This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: tf30On9EUnITrMEonp9Ldh+05lg89Q0Hho3aiRA79/0= Subject key identifier: 06:77:A3:B1:DD:AB:93:70:E3:08:78:DE:1A:D3:04:46:6D:2E:8E:89 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0DC0 Signing time: Mon 22 Dec 2025 17:31:48 +0000 Manifest this update: Mon 22 Dec 2025 17:31:47 +0000 Manifest next update: Mon 29 Dec 2025 17:31:47 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: 0ZDWTqsmNrb5l+UOuxoehNu19E/nbzRykmJCEekuOMM=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3527 (0xdc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Dec 22 17:31:47 2025 GMT Not After : Dec 29 17:31:47 2025 GMT Subject: CN=69498084-2872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:d8:b3:4e:36:1e:ad:8e:ca:bd:4b:6a:0a: 82:4f:81:53:a7:b6:b1:3f:e4:e4:39:c7:61:b3:06: c1:4e:a3:c7:c3:46:ef:78:e7:30:1d:14:d8:d2:c8: 72:8e:7e:a0:3e:af:56:c1:92:81:db:20:d0:95:e4: c2:f5:fb:11:ce:8f:8f:43:0f:18:82:9a:cf:28:f2: e4:41:47:eb:c6:c9:3f:b4:b9:fc:f9:8d:6d:d1:d4: 51:2d:8e:9a:ea:2f:5d:b5:3c:31:45:4c:99:3e:7a: c6:ac:fe:4a:c4:d6:06:71:e0:de:19:67:23:62:3d: 56:8d:f8:fe:c8:1a:71:77:aa:78:eb:34:9b:99:80: ce:19:d1:3c:10:a3:9b:7a:92:22:2e:7d:a3:ff:11: db:97:8a:97:f8:a1:34:58:33:b9:74:b1:b4:44:a7: cf:29:0e:1b:8a:35:b4:c1:c7:5c:8f:85:b0:e7:9a: dc:bb:a0:70:1f:b8:9d:c5:08:8d:8a:d0:84:2e:bc: 4c:97:9b:c6:86:93:20:7d:f6:5f:41:ed:18:d8:2a: 12:33:96:75:2a:ed:60:15:15:f7:5e:61:3a:54:19: 26:1c:08:80:4c:12:23:2e:28:45:21:32:21:bf:07: dc:63:9c:1b:93:05:ce:a4:d7:e0:71:e4:86:93:2a: e4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:77:A3:B1:DD:AB:93:70:E3:08:78:DE:1A:D3:04:46:6D:2E:8E:89 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:64:4c:8f:4a:91:a4:04:36:2b:d6:77:0e:5d:a5:59:34:37: 80:ff:0d:1a:fa:ac:f9:65:36:d4:23:6e:b8:d5:ef:6a:6a:a3: 54:6a:a8:8b:bf:6d:5e:bb:1c:ad:d3:2a:e8:58:af:28:b6:1d: 27:d5:4a:4a:8d:83:7f:48:70:27:b0:d7:ae:97:34:f4:cd:8d: b8:3e:d9:4c:a0:0a:fd:4a:0f:80:69:34:5c:08:3d:38:35:31: f7:4d:5d:c6:e5:fe:84:cd:91:72:df:58:50:72:e1:ab:bd:4b: a6:58:d6:14:ec:a0:49:a9:96:6e:01:61:99:16:9b:1f:ff:38: 2e:f7:a6:9a:40:20:14:e8:d9:84:57:54:44:ab:69:40:a0:75: 1a:3a:38:3d:c7:18:64:19:f1:ed:5b:48:f7:1a:64:05:72:2f: 37:e2:79:ae:6d:c6:8c:78:4b:70:14:84:98:61:d3:2f:44:b6: 11:30:ea:bc:93:d8:26:ab:f1:ba:f0:a3:16:b2:f6:fe:0c:06: 59:e5:5e:d3:d5:2b:08:76:b8:58:f8:6f:d5:f0:60:cd:ff:5b: 95:0e:56:dc:6a:3d:69:30:4d:ff:b7:c8:13:b6:b0:b4:5f:ef: 88:ca:af:2f:40:7d:72:e4:9c:a9:8f:43:f4:6f:2a:5a:ee:9a: 17:a7:da:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUxMjIyMTczMTQ3WhcNMjUxMjI5MTczMTQ3WjAYMRYwFAYD VQQDDA02OTQ5ODA4NC0yODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmDYs042Hq2Oyr1LagqCT4FTp7axP+TkOcdhswbBTqPHw0bveOcwHRTY0shy jn6gPq9WwZKB2yDQleTC9fsRzo+PQw8YgprPKPLkQUfrxsk/tLn8+Y1t0dRRLY6a 6i9dtTwxRUyZPnrGrP5KxNYGceDeGWcjYj1Wjfj+yBpxd6p46zSbmYDOGdE8EKOb epIiLn2j/xHbl4qX+KE0WDO5dLG0RKfPKQ4bijW0wcdcj4Ww55rcu6BwH7idxQiN itCELrxMl5vGhpMgffZfQe0Y2CoSM5Z1Ku1gFRX3XmE6VBkmHAiATBIjLihFITIh vwfcY5wbkwXOpNfgceSGkyrkGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ3o7Hd q5Nw4wh43hrTBEZtLo6JMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRZEyPSpGkBDYr1ncOXaVZNDeA/w0a+qz5ZTbUI2641e9qaqNUaqiL v21euxyt0yroWK8oth0n1UpKjYN/SHAnsNeulzT0zY24PtlMoAr9Sg+AaTRcCD04 NTH3TV3G5f6EzZFy31hQcuGrvUumWNYU7KBJqZZuAWGZFpsf/zgu96aaQCAU6NmE V1REq2lAoHUaOjg9xxhkGfHtW0j3GmQFci834nmubcaMeEtwFISYYdMvRLYRMOq8 k9gmq/G68KMWsvb+DAZZ5V7T1SsIdrhY+G/V8GDN/1uVDlbcaj1pME3/t8gTtrC0 X++Iyq8vQH1y5Jypj0P0bypa7poXp9pp -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:41 2025 by rpki-client