This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: jgJCeqxdo1y6d3LS323yRTH9caSYH1591Kssv5VdNc4= Subject key identifier: 6D:F8:AD:9F:12:AA:69:58:DA:39:2E:62:BA:C4:01:DB:23:79:26:CB Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 073B Signing time: Sat 20 Dec 2025 21:06:13 +0000 Manifest this update: Sat 20 Dec 2025 21:06:12 +0000 Manifest next update: Sat 27 Dec 2025 21:06:12 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: q6Mze7ivt9UrkUo0Vjp7glPTS4JpAW1NzBlZPN9uhQ4=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Dec 20 21:06:12 2025 GMT Not After : Dec 27 21:06:12 2025 GMT Subject: CN=69470fc5-3d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:0c:6a:b7:b3:05:8b:74:ee:94:da:51:01: d8:ee:20:d8:70:02:70:87:3e:df:a5:3e:1e:87:18: 72:88:a2:93:df:d6:29:a5:37:29:6c:67:9b:3f:cc: 05:96:9a:fc:7e:38:53:38:5f:6e:25:56:61:fd:6e: e4:27:7a:c8:dc:91:7b:4a:7a:45:e8:16:16:b2:3b: 9f:6a:28:03:a0:17:51:31:a2:15:3d:42:0a:f3:38: 32:aa:0b:41:1d:ee:a8:f5:5a:e4:13:4e:9c:d5:c1: 44:79:01:be:0a:27:cf:b8:09:70:ab:4c:85:64:71: 43:58:7d:21:02:1b:7e:f6:85:ef:ea:81:a0:58:6c: 75:b1:72:e6:7b:40:3d:45:db:d1:ba:68:5c:f9:92: 3f:0b:15:be:4d:18:a9:88:07:4f:ae:7b:15:33:15: 10:d6:50:ee:e6:28:1d:90:15:8a:c1:db:a9:4d:33: 88:74:13:ca:0f:2c:11:54:e3:f0:16:7b:1f:2f:26: a6:e5:7b:b4:e3:8f:53:d8:35:b3:83:4f:d9:22:d4: 29:49:23:cc:4d:f4:4e:5e:00:07:74:48:ab:e3:e0: 57:5f:e6:59:45:8e:00:c8:47:dd:f2:79:54:de:3f: df:0c:1b:40:e3:d9:02:d4:29:ee:2c:93:6f:c8:87: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F8:AD:9F:12:AA:69:58:DA:39:2E:62:BA:C4:01:DB:23:79:26:CB X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f6:b2:25:d0:b7:b4:47:81:d7:48:78:84:39:b5:27:33:99: 7b:7c:ee:31:49:c5:5a:8e:ac:e9:94:7d:a8:7f:24:1f:91:4b: bd:4b:e0:f2:7b:c9:2e:52:60:09:e1:1e:a3:38:88:3d:e6:64: b0:d5:32:36:87:d6:10:67:29:74:aa:cd:da:1e:25:59:94:d5: e4:21:b4:86:e1:0d:3f:de:b5:e2:49:a6:6a:42:df:46:d6:88: 7a:11:1c:b5:24:23:8a:be:7a:ff:ed:c2:87:69:d0:89:ea:3f: ce:f6:e1:f7:ec:df:c2:ae:00:ee:d5:12:33:2a:cc:e1:14:65: 3f:2a:f1:49:d6:3f:00:be:f7:7d:ef:72:d9:92:cd:a4:a5:d8: a4:d9:d9:91:28:9b:18:41:0f:7a:0a:69:6e:ac:72:ee:a9:73: d8:1a:5f:db:b8:5f:dd:fd:b4:9d:89:18:19:c5:f1:35:a8:7b: 6c:d3:3c:33:c6:37:85:ac:62:5d:da:25:e3:00:e5:0b:e6:cb: 9b:4b:5f:e6:c2:8b:8a:20:43:c5:92:87:88:74:53:a9:7d:d3: 6f:27:75:e4:06:e1:06:14:1b:8f:c6:63:7b:6a:17:fa:31:78: f8:2e:d4:0e:b5:53:95:35:d1:e9:ce:02:fc:f3:e0:7d:de:14: a5:1b:13:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUxMjIwMjEwNjEyWhcNMjUxMjI3MjEwNjEyWjAYMRYwFAYD VQQDDA02OTQ3MGZjNS0zZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu70MarezBYt07pTaUQHY7iDYcAJwhz7fpT4ehxhyiKKT39YppTcpbGebP8wF lpr8fjhTOF9uJVZh/W7kJ3rI3JF7SnpF6BYWsjufaigDoBdRMaIVPUIK8zgyqgtB He6o9VrkE06c1cFEeQG+CifPuAlwq0yFZHFDWH0hAht+9oXv6oGgWGx1sXLme0A9 RdvRumhc+ZI/CxW+TRipiAdPrnsVMxUQ1lDu5igdkBWKwdupTTOIdBPKDywRVOPw FnsfLyam5Xu0449T2DWzg0/ZItQpSSPMTfROXgAHdEir4+BXX+ZZRY4AyEfd8nlU 3j/fDBtA49kC1CnuLJNvyIdnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG34rZ8S qmlY2jkuYrrEAdsjeSbLMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX9rIl0Le0R4HXSHiEObUnM5l7fO4xScVajqzplH2ofyQfkUu9S+Dy e8kuUmAJ4R6jOIg95mSw1TI2h9YQZyl0qs3aHiVZlNXkIbSG4Q0/3rXiSaZqQt9G 1oh6ERy1JCOKvnr/7cKHadCJ6j/O9uH37N/CrgDu1RIzKszhFGU/KvFJ1j8Avvd9 73LZks2kpdik2dmRKJsYQQ96CmlurHLuqXPYGl/buF/d/bSdiRgZxfE1qHts0zwz xjeFrGJd2iXjAOUL5subS1/mwouKIEPFkoeIdFOpfdNvJ3XkBuEGFBuPxmN7ahf6 MXj4LtQOtVOVNdHpzgL88+B93hSlGxO/ -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:55 2025 by rpki-client