This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json) Hash identifier: RFmS/WmW2MxKtZRH/cdJ4ikBalZXfHCqToPyGZ1op9c= Subject key identifier: 92:8F:45:2E:44:C0:63:6D:01:A9:84:85:34:F0:04:6E:33:04:28:B1 Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft Manifest number: 4B Signing time: Tue 23 Dec 2025 06:14:13 +0000 Manifest this update: Tue 23 Dec 2025 06:14:13 +0000 Manifest next update: Tue 30 Dec 2025 06:14:13 +0000 Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: Y2s+nrsp/nyvbvEAyEXjXQMOR1vSat1RCZZEn2H4TbQ=) 2: F8E93410A85C11F0A2A48E76C4F9AE02.roa (hash: uSc+a7UP/AciXljHJWSm6FJ7cB1ozyvjX6O58aed8lU=) 3: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: tj++9M2lVWEa5egkhERYRXuWpoUuhAiNGmVaKo9CiAs=) 4: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: PAvwTfnZ/W9fr7RnaDWJUDQG4Z1oLxvvzVFavJSMKUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Dec 23 06:14:13 2025 GMT Not After : Dec 30 06:14:13 2025 GMT Subject: CN=694a3335-d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:1b:7d:a4:87:e7:fc:a1:7c:9f:6f:4c:63: 43:7c:64:ad:16:a1:ad:f0:55:66:00:0c:77:f3:4d: 32:e3:b0:ee:6b:e7:74:90:2b:0d:93:7d:a2:68:15: 6d:f2:db:c9:43:51:6e:de:ff:0a:97:9a:61:a6:9e: a1:f6:c4:31:41:a4:6d:43:e1:cc:ee:cd:b2:ba:c2: ed:d5:14:79:67:64:49:26:c9:0c:1f:76:26:81:17: 0e:19:05:11:60:37:17:e3:5e:dc:71:50:c9:c4:48: 70:c8:49:29:85:b5:6f:1c:f5:f2:d9:f1:5e:d1:73: 04:87:bf:ce:8a:85:f7:18:04:94:10:6e:24:48:74: 6b:bd:5d:7f:1f:8e:55:c1:9f:10:c3:c0:c3:94:37: 62:31:e7:3a:b7:4e:2b:ad:24:07:aa:14:f5:e7:c4: 96:80:5b:69:f6:bf:87:a7:3f:25:7c:6c:65:ca:2f: 83:50:69:d0:6a:9d:6a:35:00:21:b1:94:16:d0:e9: a3:43:42:d2:cd:bc:05:47:75:41:3f:05:60:a2:c4: 79:c3:14:70:95:44:3d:6a:d5:da:21:e4:e3:ce:7b: 10:40:4f:91:29:3e:26:87:cf:ed:c3:c4:33:79:9b: 97:5f:16:f0:48:d2:e4:f8:2f:cf:64:0a:d4:51:81: 4a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:45:2E:44:C0:63:6D:01:A9:84:85:34:F0:04:6E:33:04:28:B1 X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:be:6b:a3:68:d1:38:6b:a3:5f:ac:45:4d:7e:5c:24:d6:9d: 7d:25:10:b9:47:67:68:9d:94:f0:6e:47:9c:1f:c2:04:a5:69: 37:d7:ef:53:f6:27:6d:8f:20:52:ed:20:4a:24:3e:75:6d:81: 4b:cb:ef:22:bc:e9:41:c9:23:16:ba:7e:60:5a:d0:04:ee:0c: ff:18:73:d0:cd:b8:bc:bc:68:38:b5:28:2e:d1:20:3b:92:17: 9b:f5:94:c8:4f:a9:2b:83:04:7a:3d:36:a3:7f:80:aa:78:b8: 13:f3:19:e4:9f:2c:d7:11:92:b8:c1:60:bf:70:55:2a:67:b7: 26:b8:f5:2f:a8:4e:49:53:a3:0e:19:8e:a6:ee:f1:8b:24:3d: 04:69:01:d3:77:10:73:67:ef:05:cf:08:3e:dd:58:03:f3:5e: 9e:c8:ac:97:53:94:6d:4e:2b:55:f4:c6:c4:05:57:ee:c9:98: a7:65:16:78:bf:89:a0:08:6b:1a:b0:2b:9c:39:f5:7a:c4:ba: 82:58:9f:19:94:cd:03:49:77:66:a2:4c:ad:22:70:34:c8:30: a4:f6:75:e7:16:2b:d5:4c:eb:d0:01:ee:1b:e2:f1:16:a5:61: f2:6b:6b:72:0e:b3:18:ba:7d:0a:a3:97:87:15:28:a9:6e:dc: 74:c7:67:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzVERTExMC8GA1UEBRMoQTYxMzZFNTBFOTQ5OEUwNDlEMEI0RDJGMTg2N0ZBMUIx ODkxQzRFRjAeFw0yNTEyMjMwNjE0MTNaFw0yNTEyMzAwNjE0MTNaMBgxFjAUBgNV BAMMDTY5NGEzMzM1LWQ3NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCorRt9pIfn/KF8n29MY0N8ZK0Woa3wVWYADHfzTTLjsO5r53SQKw2TfaJoFW3y 28lDUW7e/wqXmmGmnqH2xDFBpG1D4czuzbK6wu3VFHlnZEkmyQwfdiaBFw4ZBRFg NxfjXtxxUMnESHDISSmFtW8c9fLZ8V7RcwSHv86KhfcYBJQQbiRIdGu9XX8fjlXB nxDDwMOUN2Ix5zq3TiutJAeqFPXnxJaAW2n2v4enPyV8bGXKL4NQadBqnWo1ACGx lBbQ6aNDQtLNvAVHdUE/BWCixHnDFHCVRD1q1doh5OPOexBAT5EpPiaHz+3DxDN5 m5dfFvBI0uT4L89kCtRRgUppAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUko9FLkTA Y20BqYSFNPAEbjMEKLEwHwYDVR0jBBgwFoAUphNuUOlJjgSdC00vGGf6GxiRxO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNURFLzg3NjJDRDFBNzQy MjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhOdVVPbEpqZ1NkQzAwdkdHZjZHeGlSeE84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD NURFLzg3NjJDRDFBNzQyMjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdT ZEMwMHZHR2Y2R3hpUnhPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADy+a6No0Thro1+sRU1+XCTWnX0lELlHZ2idlPBuR5wfwgSlaTfX71P2 J22PIFLtIEokPnVtgUvL7yK86UHJIxa6fmBa0ATuDP8Yc9DNuLy8aDi1KC7RIDuS F5v1lMhPqSuDBHo9NqN/gKp4uBPzGeSfLNcRkrjBYL9wVSpntya49S+oTklTow4Z jqbu8YskPQRpAdN3EHNn7wXPCD7dWAPzXp7IrJdTlG1OK1X0xsQFV+7JmKdlFni/ iaAIaxqwK5w59XrEuoJYnxmUzQNJd2aiTK0icDTIMKT2decWK9VM69AB7hvi8Ral YfJra3IOsxi6fQqjl4cVKKlu3HTHZ6s= -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:23 2025 by rpki-client