This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: 3Z/qyBUjp+nA7ZcJpaH7N5HGBKnzQbM+g+A1b+L3djI= Subject key identifier: 18:E9:6B:90:F7:8F:D5:4E:9F:F3:30:FD:3A:64:54:27:40:41:F4:38 Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 079F Signing time: Mon 22 Dec 2025 20:46:15 +0000 Manifest this update: Mon 22 Dec 2025 20:46:15 +0000 Manifest next update: Mon 29 Dec 2025 20:46:15 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: YmyJpFEcd5c0iq7WfdZA3YjKJYeI2tSO40ryPSqgPDc=) 2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=) 3: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=) 4: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: Dec 22 20:46:15 2025 GMT Not After : Dec 29 20:46:15 2025 GMT Subject: CN=6949ae17-3dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:2c:12:7a:d9:b3:83:e4:3e:6f:d4:9e:84: 5c:d7:f8:9b:92:aa:d9:57:ad:84:c8:5a:73:1b:99: d9:8f:a7:6d:5f:0d:83:3e:09:b5:fa:bb:bf:fa:bd: 14:14:85:11:0b:32:9a:f2:63:2b:4a:c7:93:4b:d8: 00:7b:ad:79:26:ce:2a:79:f0:4a:c9:5f:8a:52:48: da:c6:44:66:92:79:0e:04:ea:b9:fa:ea:1e:cd:f4: 8e:19:31:94:0f:19:5b:01:64:b0:7e:ba:87:50:8f: a4:f2:64:48:00:6e:47:8a:8d:d0:f1:aa:48:6a:96: 8e:2a:aa:94:8a:98:8c:2c:96:e4:a1:f3:91:33:c6: 3a:dd:54:bf:4d:f4:ee:8c:c4:25:62:26:17:8f:90: 1b:b2:f7:15:e9:74:91:9f:10:28:f1:87:dd:d9:33: 38:23:f5:4a:19:4d:61:47:ba:26:9f:89:34:31:a9: 50:19:4a:39:c1:cd:b0:ba:eb:0b:16:49:09:ca:c0: 45:65:7a:16:bd:35:7e:89:5e:d3:e9:0b:1e:76:3a: e1:75:3d:14:b3:06:76:bb:a7:65:13:ab:48:a2:1d: e0:19:78:e4:7e:f1:ea:07:82:0c:e9:1b:22:79:ad: 6d:f9:6d:ef:0f:57:7a:2e:17:62:6b:23:5d:e6:6d: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:6B:90:F7:8F:D5:4E:9F:F3:30:FD:3A:64:54:27:40:41:F4:38 X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:97:b8:01:25:a1:03:cb:09:38:42:fd:d8:65:de:fa:56:81: 3d:3c:e4:2b:bd:47:3a:e2:c8:e9:39:ca:fd:8c:d6:10:5e:71: 0b:cb:95:d9:f5:b6:20:c3:dc:06:37:73:d1:1f:db:7f:3b:cc: 07:df:61:a4:1e:38:7c:f5:9f:cc:48:be:0d:f7:1f:13:83:a3: 33:59:90:64:22:55:e1:c8:db:c2:09:04:a3:fe:71:b4:d7:28: ad:a3:55:48:65:ac:ec:61:30:a9:7f:f2:99:1e:e5:2d:ad:27: d1:f9:36:f6:0d:5a:45:cd:6e:98:b1:33:78:9a:ea:b7:87:79: 70:cc:32:31:36:31:57:bd:76:a9:94:2d:64:89:5d:34:51:89: dc:ae:ed:1f:d9:6f:4d:41:63:5c:09:6a:96:8b:5c:8b:a4:3c: de:66:e1:29:46:ce:0a:4e:7c:da:4b:3f:91:63:f6:3f:25:68: a3:b8:70:2e:75:ff:cb:15:3f:51:41:76:64:cc:d0:6b:35:9e: b0:61:f0:e8:f3:bd:43:b5:b6:7b:1f:e8:f7:a4:68:32:f5:34: ad:a2:ec:96:45:c0:a3:59:44:2e:74:11:9d:42:b7:8b:80:e0: bb:98:29:51:41:a4:f0:41:d6:0d:61:1c:53:f0:01:0f:ab:a7: 2c:82:cc:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjUxMjIyMjA0NjE1WhcNMjUxMjI5MjA0NjE1WjAYMRYwFAYD VQQDDA02OTQ5YWUxNy0zZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3AsEnrZs4PkPm/UnoRc1/ibkqrZV62EyFpzG5nZj6dtXw2DPgm1+ru/+r0U FIURCzKa8mMrSseTS9gAe615Js4qefBKyV+KUkjaxkRmknkOBOq5+uoezfSOGTGU DxlbAWSwfrqHUI+k8mRIAG5Hio3Q8apIapaOKqqUipiMLJbkofORM8Y63VS/TfTu jMQlYiYXj5AbsvcV6XSRnxAo8Yfd2TM4I/VKGU1hR7omn4k0MalQGUo5wc2wuusL FkkJysBFZXoWvTV+iV7T6QsedjrhdT0UswZ2u6dlE6tIoh3gGXjkfvHqB4IM6Rsi ea1t+W3vD1d6LhdiayNd5m1xfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjpa5D3 j9VOn/Mw/TpkVCdAQfQ4MB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJl7gBJaEDywk4Qv3YZd76VoE9POQrvUc64sjpOcr9jNYQXnELy5XZ 9bYgw9wGN3PRH9t/O8wH32GkHjh89Z/MSL4N9x8Tg6MzWZBkIlXhyNvCCQSj/nG0 1yito1VIZazsYTCpf/KZHuUtrSfR+Tb2DVpFzW6YsTN4muq3h3lwzDIxNjFXvXap lC1kiV00UYncru0f2W9NQWNcCWqWi1yLpDzeZuEpRs4KTnzaSz+RY/Y/JWijuHAu df/LFT9RQXZkzNBrNZ6wYfDo871DtbZ7H+j3pGgy9TStouyWRcCjWUQudBGdQreL gOC7mClRQaTwQdYNYRxT8AEPq6csgswn -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:52 2025 by rpki-client