This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json) Hash identifier: zzsU2BPAhn/KKS5/NqwU1EnJBpzqGFTsIRFPguOEo5Y= Subject key identifier: 5F:5E:B2:49:A6:14:89:99:BD:EB:5D:4E:56:47:D3:FE:21:F9:70:6C Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft Manifest number: 07 Signing time: Tue 23 Dec 2025 06:53:33 +0000 Manifest this update: Tue 23 Dec 2025 06:53:33 +0000 Manifest next update: Tue 30 Dec 2025 06:53:33 +0000 Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: Aev2MW8ZrC+Ut5OYlyAykBc5Sg+kxH0llF7kCykU25o=) 2: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: cnu2jvpz6VuTwHgFw7Z5D84LK7BDcNMaOVaG50JEGUE=) 3: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: D81DSvORE+T8JlZrt9j4gBVy+u4hLWZ+jPLU48Kviw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Validity Not Before: Dec 23 06:53:33 2025 GMT Not After : Dec 30 06:53:33 2025 GMT Subject: CN=694a3c6d-ac4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:25:7a:3a:fc:c4:9c:f4:f0:af:37:46:69: e3:23:b5:0c:cd:6a:cd:54:64:9c:2a:5b:8f:d1:ca: 3c:6d:4a:82:9e:7e:14:e9:9f:b8:70:b9:6a:2f:fb: f1:97:04:84:8a:9a:08:15:71:6d:8b:bf:b6:47:73: 20:98:38:7f:57:cc:8c:fe:33:b9:0d:dc:23:6e:fd: 75:e2:34:27:9e:b1:2c:03:ef:01:f9:b5:99:2c:6d: 23:bf:01:44:b7:22:24:c9:2b:35:2b:b4:6e:38:ce: 94:06:b5:ec:c4:9b:1a:63:4e:22:52:29:6e:98:cd: fa:14:a0:5d:20:6e:8d:de:ae:7f:68:98:17:47:52: 04:d6:c8:87:90:f8:35:19:5d:d3:14:40:b9:6e:40: 99:bb:c1:3a:05:15:df:6f:3f:b4:90:61:a7:41:7a: 7f:e8:be:94:b6:2b:a1:9a:94:e9:a9:02:34:52:db: ad:d4:a0:9f:5d:33:0c:3f:9e:4c:34:b2:37:20:a0: 5d:2d:24:a1:4e:58:40:d3:e5:59:26:25:7b:82:2f: 77:a1:14:98:dd:1b:90:8e:d8:b4:39:ee:b7:98:c8: af:cc:15:d0:cb:42:f8:a7:f5:ce:02:c2:be:48:2c: bf:5e:10:f2:5d:5f:67:3b:73:81:c8:af:48:29:0d: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:B2:49:A6:14:89:99:BD:EB:5D:4E:56:47:D3:FE:21:F9:70:6C X509v3 Authority Key Identifier: keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:9b:f2:1f:69:01:cc:46:59:d9:e9:2c:e6:62:32:9e:da: 2e:91:5e:f5:57:25:fe:14:0d:28:02:fd:c8:6e:99:a1:3e:76: b5:45:fa:fd:5f:44:4c:9c:d4:9a:6b:86:65:4c:68:e3:26:74: a4:56:15:d2:41:e6:b2:ea:a9:57:ac:bd:56:50:20:e2:00:35: b2:5b:91:07:59:39:81:a0:6c:06:be:aa:a1:43:99:35:6d:fc: 87:9d:5f:e3:2a:cf:37:05:22:71:b2:df:c4:86:48:80:85:e6: ac:32:94:60:41:55:fb:b6:d0:af:86:3d:5b:24:20:61:6d:98: b6:e2:0d:ea:a0:c0:e7:d3:31:0a:66:ac:85:0c:bf:e5:30:0d: 95:7d:58:34:7f:7e:55:39:01:d0:99:58:7f:cf:a7:48:f0:c5: 45:52:72:59:dc:5f:4e:c5:75:5f:25:80:63:8b:04:21:c9:27: 55:47:ff:84:33:01:76:80:b3:8b:87:ff:f0:ea:c2:3d:48:ed: 5b:a6:40:6f:92:b8:9e:4e:68:c6:b4:12:20:3e:bf:a6:e8:44: d3:1f:f3:c4:85:fa:01:f4:3e:d5:45:ef:9e:3d:fb:8f:c6:58: d7:b0:cd:28:40:3d:df:56:a4:39:50:86:48:97:8d:8c:d7:d4: dc:b2:83:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoOUFEODkyOEVBRjI1QzUxQ0IzQjMyMTFENDlCNkJBQjlG MEI5RjY3RjAeFw0yNTEyMjMwNjUzMzNaFw0yNTEyMzAwNjUzMzNaMBgxFjAUBgNV BAMMDTY5NGEzYzZkLWFjNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkrSV6OvzEnPTwrzdGaeMjtQzNas1UZJwqW4/RyjxtSoKefhTpn7hwuWov+/GX BISKmggVcW2Lv7ZHcyCYOH9XzIz+M7kN3CNu/XXiNCeesSwD7wH5tZksbSO/AUS3 IiTJKzUrtG44zpQGtezEmxpjTiJSKW6YzfoUoF0gbo3ern9omBdHUgTWyIeQ+DUZ XdMUQLluQJm7wToFFd9vP7SQYadBen/ovpS2K6GalOmpAjRS263UoJ9dMww/nkw0 sjcgoF0tJKFOWEDT5VkmJXuCL3ehFJjdG5CO2LQ57reYyK/MFdDLQvin9c4Cwr5I LL9eEPJdX2c7c4HIr0gpDX7RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX16ySaYU iZm9611OVkfT/iH5cGwwHwYDVR0jBBgwFoAUmtiSjq8lxRyzsyEdSba6ufC59n8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGLzUyRUJDOEM4RDk5 QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5enN5RWRTYmE2dWZDNTlu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRpU2pxOGx4Unl6c3lFZFNiYTZ1ZkM1OW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGLzUyRUJDOEM4RDk5QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5 enN5RWRTYmE2dWZDNTluOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzjm/IfaQHMRlnZ6SzmYjKe2i6RXvVXJf4UDSgC/chumaE+drVF+v1f REyc1JprhmVMaOMmdKRWFdJB5rLqqVesvVZQIOIANbJbkQdZOYGgbAa+qqFDmTVt /IedX+MqzzcFInGy38SGSICF5qwylGBBVfu20K+GPVskIGFtmLbiDeqgwOfTMQpm rIUMv+UwDZV9WDR/flU5AdCZWH/Pp0jwxUVSclncX07FdV8lgGOLBCHJJ1VH/4Qz AXaAs4uH//Dqwj1I7VumQG+SuJ5OaMa0EiA+v6boRNMf88SF+gH0PtVF7549+4/G WNewzShAPd9WpDlQhkiXjYzX1Nyyg0o= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:07 2025 by rpki-client