This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: VWVsymqrzqrPyTV8Txzqfb+fxp5TrObw6+tG3bbIogc= Subject key identifier: 4A:16:3A:A8:D3:99:9E:74:DB:21:DC:F2:B7:5F:FB:54:93:A3:08:FD Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: E2 Signing time: Tue 23 Dec 2025 04:31:42 +0000 Manifest this update: Tue 23 Dec 2025 04:31:41 +0000 Manifest next update: Tue 30 Dec 2025 04:31:41 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: QolNYfXmQGY4hoBqJvbrpvmErDth/WllVat6i3anPls=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: Ccx7SnGjPCxsvKUBeamLN1Oa9v9jyBTBtL74lgFdLHk=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: k2dEAv933yKqFgM4NCZBdb4Xn5r7WtBWqggONtm/gBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Dec 23 04:31:41 2025 GMT Not After : Dec 30 04:31:41 2025 GMT Subject: CN=694a1b2e-28e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:e6:d5:d3:da:93:0b:da:f9:d8:3d:17:fe: 0b:1f:93:65:82:41:59:cf:9d:0e:ae:13:d6:be:2b: 8f:fe:8d:35:7f:95:49:cc:8d:58:33:45:8e:e8:4f: a6:88:de:b6:4c:21:b8:e3:90:49:49:a2:8d:dd:08: 19:1a:c9:2b:13:e8:3a:c1:96:b1:dd:11:c6:09:7e: 09:a5:8f:73:ef:11:be:2b:c5:95:c3:fa:19:37:cc: 7d:da:28:f3:f4:21:ac:89:51:89:be:11:90:88:b4: 8b:d1:6d:b9:a7:c7:95:40:f7:6c:6f:1e:c8:84:9d: b0:76:0e:e7:6c:70:e4:79:b2:a6:a7:7f:76:8c:8c: 08:b1:bf:b4:dd:cb:5d:10:21:ca:b9:7b:14:5f:e1: 17:c2:2d:20:ee:04:1f:3a:e5:6f:30:12:45:4a:82: 54:f3:91:ed:0b:67:38:98:7b:ad:6e:72:dd:86:3f: e4:bd:74:0c:40:5d:57:f2:88:6b:74:27:4a:75:57: bc:87:61:f2:a8:38:a6:b2:07:d0:12:ba:d4:28:b7: 04:55:35:02:75:e8:3f:1e:08:5c:b0:75:3e:29:04: 04:8c:9a:57:80:9e:38:88:ce:90:a0:23:8e:ac:c6: b3:9c:43:c8:28:27:25:d4:b7:74:3f:2b:4c:7c:bc: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:16:3A:A8:D3:99:9E:74:DB:21:DC:F2:B7:5F:FB:54:93:A3:08:FD X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7d:6a:41:26:ae:a9:9c:45:cb:5e:a8:4b:12:b8:1f:40:20: af:07:2e:9f:b3:54:c9:b5:aa:57:74:7d:8e:09:a4:d0:e2:b4: c8:2c:5f:5f:30:c4:31:ec:fa:5b:d3:31:ae:db:6d:e8:e0:ad: 45:e5:30:37:2d:d1:42:4e:51:04:c4:bf:7e:01:a9:41:f0:46: 56:37:86:c7:18:8b:dc:68:f4:ec:af:08:d4:b4:bf:83:66:74: 9a:fc:25:5f:f0:50:96:5b:8c:c8:bd:e5:c3:0a:ca:2b:90:2a: e7:99:5c:01:b3:b0:65:29:8b:3c:ab:d0:a6:c0:aa:d9:e3:79: 0d:d0:00:7e:76:c0:50:c0:0d:5c:d9:40:ae:08:1c:a3:46:c2: db:1a:d3:c0:53:a2:2a:16:bf:bc:d3:cb:70:65:b7:69:c4:55: d0:ce:f7:91:f4:ae:a4:1c:4f:6a:43:f0:fa:2f:e9:b1:c1:b3: c4:63:b9:57:88:78:b9:bf:8b:62:3c:04:93:38:d4:ad:83:80: 8b:c9:fe:4a:32:0e:42:78:60:30:71:bb:75:4e:25:3b:6b:1f: 2d:c4:65:96:c0:e4:57:92:c0:59:6a:c5:ce:a0:63:b1:a6:3b: 07:33:c9:18:f2:1d:84:15:eb:4d:5b:da:61:a1:96:f4:1c:92: 99:40:d9:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUxMjIzMDQzMTQxWhcNMjUxMjMwMDQzMTQxWjAYMRYwFAYD VQQDDA02OTRhMWIyZS0yOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6nm1dPakwva+dg9F/4LH5NlgkFZz50OrhPWviuP/o01f5VJzI1YM0WO6E+m iN62TCG445BJSaKN3QgZGskrE+g6wZax3RHGCX4JpY9z7xG+K8WVw/oZN8x92ijz 9CGsiVGJvhGQiLSL0W25p8eVQPdsbx7IhJ2wdg7nbHDkebKmp392jIwIsb+03ctd ECHKuXsUX+EXwi0g7gQfOuVvMBJFSoJU85HtC2c4mHutbnLdhj/kvXQMQF1X8ohr dCdKdVe8h2HyqDimsgfQErrUKLcEVTUCdeg/HghcsHU+KQQEjJpXgJ44iM6QoCOO rMaznEPIKCcl1Ld0PytMfLxJSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoWOqjT mZ502yHc8rdf+1STowj9MB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBffWpBJq6pnEXLXqhLErgfQCCvBy6fs1TJtapXdH2OCaTQ4rTILF9f MMQx7Ppb0zGu223o4K1F5TA3LdFCTlEExL9+AalB8EZWN4bHGIvcaPTsrwjUtL+D ZnSa/CVf8FCWW4zIveXDCsorkCrnmVwBs7BlKYs8q9CmwKrZ43kN0AB+dsBQwA1c 2UCuCByjRsLbGtPAU6IqFr+808twZbdpxFXQzveR9K6kHE9qQ/D6L+mxwbPEY7lX iHi5v4tiPASTONStg4CLyf5KMg5CeGAwcbt1TiU7ax8txGWWwORXksBZasXOoGOx pjsHM8kY8h2EFetNW9phoZb0HJKZQNlH -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:25 2025 by rpki-client