This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: JlULjN87nUJj6WiveoSPrds4I4T0RaUoTc0aEZyL4gs= Subject key identifier: CD:78:07:2D:90:E2:49:24:66:E0:DA:45:D5:E8:90:41:85:D9:2A:EC Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 1C Signing time: Tue 23 Dec 2025 06:39:48 +0000 Manifest this update: Tue 23 Dec 2025 06:39:48 +0000 Manifest next update: Tue 30 Dec 2025 06:39:48 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: shIvWjUAUFHc500eo+yAh3+ufiyaIzDJc2Mbi7ALee8=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: yGR2xqnv87rJpxXoRJ5BLEOl4DCEpjBSrdz8OkezYaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Dec 23 06:39:48 2025 GMT Not After : Dec 30 06:39:48 2025 GMT Subject: CN=694a3934-1906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:59:97:5d:6e:11:8d:86:48:3a:6c:12:e5: 69:2d:ad:93:ec:3a:72:f8:c9:56:09:6d:41:15:dc: 96:7d:c5:a2:78:13:30:36:33:84:b9:24:bd:48:7c: 9b:0f:f3:66:7f:ed:f1:c4:b1:51:e1:f8:22:dc:5d: 69:a1:88:ec:ff:f2:69:0b:4d:80:5b:d8:0f:a0:72: 8c:e0:35:d2:af:c9:37:06:fa:a6:9e:ea:bf:dd:24: 42:f8:24:81:45:9c:f2:4a:2d:80:5d:e3:21:19:bd: ac:86:dc:dd:c1:9a:ba:29:e4:61:9c:c1:8b:80:27: 46:33:9b:11:3c:4c:f2:a4:a2:8f:de:88:e7:e8:b5: 6b:22:1f:92:60:94:f6:5f:36:ff:b8:f6:d9:ac:1a: f2:94:80:9c:69:1f:99:03:88:30:47:06:6a:4f:12: f6:cc:5d:3d:35:69:74:0a:6a:47:65:c4:35:df:6c: 22:d9:5b:56:22:18:11:f5:28:13:d4:85:ed:23:ae: 00:3e:0a:95:10:00:8b:20:d2:c4:8c:85:76:f8:95: 71:4d:0e:bc:c6:9d:12:2e:4f:e0:b4:a6:ba:87:3b: 70:9a:ca:ba:7d:e2:be:e3:73:15:2b:ab:f4:64:1f: c7:91:19:09:3f:80:a7:ae:b3:83:51:bb:ec:8d:9d: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:78:07:2D:90:E2:49:24:66:E0:DA:45:D5:E8:90:41:85:D9:2A:EC X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:90:15:b6:d1:8a:e3:da:0d:03:70:06:c5:15:5a:34:fe:0b: ae:03:e4:ac:f5:64:c3:de:d4:1a:a4:34:83:65:83:fe:e1:e5: d4:ec:98:9f:46:7e:42:59:db:c0:03:92:73:3e:3c:5c:6d:d9: 50:0a:36:ad:30:ff:f4:52:26:79:d9:9d:64:ba:5e:3d:d9:bf: 05:97:23:53:fc:2d:14:5f:52:43:6c:81:5d:70:4c:8d:b4:98: 61:bd:de:82:73:14:56:9b:1b:0a:1c:e8:74:41:ea:3c:1e:c4: 2e:83:82:40:6d:d2:b2:e5:56:c8:0b:57:b0:ce:6a:21:9f:4d: d7:5c:84:f2:91:e0:17:11:47:63:05:a8:08:bc:85:22:0f:c1: 90:4a:5a:5a:7f:fe:02:3e:c0:75:20:e4:34:5d:2e:54:dc:65: 7f:f6:a9:f7:e0:9c:6b:bd:f0:0a:d3:77:e9:1b:c2:24:8f:a4: 98:59:b0:81:9d:b1:87:8c:27:c4:43:67:12:4d:38:ff:b2:50: b1:a1:5a:51:c7:83:c1:7b:db:d3:ce:2c:9c:a8:19:c2:c2:38: c0:6b:c2:04:8d:89:c5:72:7e:9b:7d:c2:bb:b3:1c:ab:c4:bf: 1e:5c:f3:34:7f:98:d1:11:11:c5:7c:b2:17:20:48:d4:84:fb: 46:fd:34:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTEyMjMwNjM5NDhaFw0yNTEyMzAwNjM5NDhaMBgxFjAUBgNV BAMMDTY5NGEzOTM0LTE5MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoHVmXXW4RjYZIOmwS5WktrZPsOnL4yVYJbUEV3JZ9xaJ4EzA2M4S5JL1IfJsP 82Z/7fHEsVHh+CLcXWmhiOz/8mkLTYBb2A+gcozgNdKvyTcG+qae6r/dJEL4JIFF nPJKLYBd4yEZvayG3N3Bmrop5GGcwYuAJ0YzmxE8TPKkoo/eiOfotWsiH5JglPZf Nv+49tmsGvKUgJxpH5kDiDBHBmpPEvbMXT01aXQKakdlxDXfbCLZW1YiGBH1KBPU he0jrgA+CpUQAIsg0sSMhXb4lXFNDrzGnRIuT+C0prqHO3Cayrp94r7jcxUrq/Rk H8eRGQk/gKeus4NRu+yNnaU1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzXgHLZDi SSRm4NpF1eiQQYXZKuwwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOQFbbRiuPaDQNwBsUVWjT+C64D5Kz1ZMPe1BqkNINlg/7h5dTsmJ9G fkJZ28ADknM+PFxt2VAKNq0w//RSJnnZnWS6Xj3ZvwWXI1P8LRRfUkNsgV1wTI20 mGG93oJzFFabGwoc6HRB6jwexC6DgkBt0rLlVsgLV7DOaiGfTddchPKR4BcRR2MF qAi8hSIPwZBKWlp//gI+wHUg5DRdLlTcZX/2qffgnGu98ArTd+kbwiSPpJhZsIGd sYeMJ8RDZxJNOP+yULGhWlHHg8F729POLJyoGcLCOMBrwgSNicVyfpt9wruzHKvE vx5c8zR/mNEREcV8shcgSNSE+0b9NE0= -----END CERTIFICATE-----Generated at Wed Dec 24 23:00:07 2025 by rpki-client