This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: s5pioUB7127YZ4HZrTI/KV5csMzbMEQlaZF2WeUCgZM= Subject key identifier: D9:0C:CE:A5:38:F7:AA:87:E4:73:DC:C7:8D:1D:BA:7E:43:40:63:35 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 069C Signing time: Mon 22 Dec 2025 21:36:54 +0000 Manifest this update: Mon 22 Dec 2025 21:36:53 +0000 Manifest next update: Mon 29 Dec 2025 21:36:53 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: NU6+pXiiiQcfmVntoEmkL/6nKKpsKSJ7jtDx54XoGuY=) 2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: EQNnt+47JakLAicAJpey8kMF4fyXy0EyBy2A09Z/nmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Dec 22 21:36:53 2025 GMT Not After : Dec 29 21:36:53 2025 GMT Subject: CN=6949b9f5-bb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:bb:c3:4b:3f:c3:6e:f3:05:48:cc:5f:7b: 59:2c:b9:76:1d:f8:8a:ae:26:6d:55:03:27:43:c1: bf:e6:3d:d2:ad:28:7c:54:f1:e6:6e:ad:d9:94:d0: 4c:a3:11:6d:60:db:17:15:b1:04:18:30:6d:0b:f7: c0:46:70:ae:61:94:c5:ea:48:f9:d5:49:24:24:b9: b6:21:46:3b:46:30:56:c3:46:61:c3:97:7e:2f:fc: 84:60:9a:dc:87:24:d4:9a:ef:8a:3d:c8:ae:c7:51: c2:d0:b2:95:5f:e9:87:ac:9e:05:d0:a2:cb:0b:39: e4:e7:d9:b5:d9:09:c0:56:fb:d4:24:3e:52:0e:67: e6:5e:b1:39:1a:41:1c:5a:68:b0:1e:16:1c:58:60: 15:6a:6e:a4:e1:5c:8f:ee:78:b0:de:36:41:b2:b8: be:b0:4f:0b:7c:02:26:79:cf:9a:9d:b1:4b:62:6f: 1a:be:2e:e8:de:be:23:a4:c1:69:c6:1e:56:44:a0: cb:d5:a4:58:52:bd:44:b0:68:d5:de:c7:36:dc:0a: fc:10:ce:21:4f:5b:d3:71:64:b0:62:9f:a9:b6:4c: 0e:19:28:d5:e0:d7:28:a0:f4:67:c5:f8:a4:79:a5: 38:48:8a:6a:ac:0e:35:75:06:95:c2:c0:bc:92:e3: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:CE:A5:38:F7:AA:87:E4:73:DC:C7:8D:1D:BA:7E:43:40:63:35 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:47:a8:a4:23:a9:a4:4c:f9:0a:f1:4a:80:f8:3a:0e:2f:5c: 0e:ea:8e:f8:f0:3a:6c:bf:bd:86:b1:00:55:eb:e5:13:75:15: 51:a9:93:71:e1:32:5a:64:08:a4:98:4a:6a:90:66:72:9d:7c: 2a:49:94:e7:f6:80:2d:1d:86:39:db:6a:79:a6:e3:58:88:fc: 34:56:14:e8:1e:56:79:7e:84:9c:de:53:6e:64:a4:5e:a0:97: 7a:34:60:7b:06:d2:ac:7c:4a:1e:46:5b:2c:28:69:b9:7d:0a: c6:a4:6e:be:e3:be:40:b3:42:e4:10:3c:a3:7b:15:75:b0:f1: 10:2b:34:fd:7e:82:35:52:40:c2:1a:fa:4a:42:c0:ae:f8:d4: 0e:44:f7:2e:72:7d:0f:39:0b:fa:21:f5:18:07:f8:96:b4:58: 57:aa:93:ca:50:ea:91:48:6d:e6:c1:2e:b1:5f:d8:a2:fa:59: b0:5e:28:19:a5:09:33:7a:1b:f2:89:7b:b3:c8:40:24:d5:e0: 5f:33:9d:71:eb:39:52:86:58:14:fd:4c:4f:69:09:2d:18:59: c4:2b:45:cb:00:59:6f:23:e6:ef:30:53:0b:fd:8a:ab:42:b6: b7:cf:b9:12:04:29:35:46:06:eb:86:00:8d:69:90:af:44:3b: 1a:ca:d7:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUxMjIyMjEzNjUzWhcNMjUxMjI5MjEzNjUzWjAYMRYwFAYD VQQDDA02OTQ5YjlmNS1iYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunO7w0s/w27zBUjMX3tZLLl2HfiKriZtVQMnQ8G/5j3SrSh8VPHmbq3ZlNBM oxFtYNsXFbEEGDBtC/fARnCuYZTF6kj51UkkJLm2IUY7RjBWw0Zhw5d+L/yEYJrc hyTUmu+KPciux1HC0LKVX+mHrJ4F0KLLCznk59m12QnAVvvUJD5SDmfmXrE5GkEc WmiwHhYcWGAVam6k4VyP7niw3jZBsri+sE8LfAImec+anbFLYm8avi7o3r4jpMFp xh5WRKDL1aRYUr1EsGjV3sc23Ar8EM4hT1vTcWSwYp+ptkwOGSjV4NcooPRnxfik eaU4SIpqrA41dQaVwsC8kuOEkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkMzqU4 96qH5HPcx40dun5DQGM1MB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtR6ikI6mkTPkK8UqA+DoOL1wO6o748Dpsv72GsQBV6+UTdRVRqZNx 4TJaZAikmEpqkGZynXwqSZTn9oAtHYY522p5puNYiPw0VhToHlZ5foSc3lNuZKRe oJd6NGB7BtKsfEoeRlssKGm5fQrGpG6+475As0LkEDyjexV1sPEQKzT9foI1UkDC GvpKQsCu+NQORPcucn0POQv6IfUYB/iWtFhXqpPKUOqRSG3mwS6xX9ii+lmwXigZ pQkzehvyiXuzyEAk1eBfM51x6zlShlgU/UxPaQktGFnEK0XLAFlvI+bvMFML/Yqr Qra3z7kSBCk1RgbrhgCNaZCvRDsaytfI -----END CERTIFICATE-----Generated at Tue Dec 23 01:25:40 2025 by rpki-client