This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: ZkuXZdY21Dcl4CNRNrXAsgKA0pAIyHQWSLDLxrHG8PI= Subject key identifier: 53:5A:66:A2:CB:25:6F:29:63:A8:8E:E3:09:B5:37:ED:9A:F0:8F:4E Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 01E3 Signing time: Fri 19 Dec 2025 01:52:43 +0000 Manifest this update: Fri 19 Dec 2025 01:52:42 +0000 Manifest next update: Fri 26 Dec 2025 01:52:42 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: UzLzLqhmC7RJQ6DH0eVY3GYZFZqwc1GDaU/79kPqJYU=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Dec 19 01:52:42 2025 GMT Not After : Dec 26 01:52:42 2025 GMT Subject: CN=6944afeb-6a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:07:d4:43:34:7a:e9:70:20:0e:37:5b:99: 35:67:17:bb:77:41:94:2e:9b:d5:87:32:3b:d4:b9: 37:71:03:dc:e8:09:1b:e7:13:ea:c3:e7:35:5b:c7: bc:89:21:b2:11:54:54:87:9a:b3:9b:b4:41:ca:ce: 14:61:e5:25:25:65:34:cf:6f:04:bb:38:8d:13:a2: a8:e9:60:8c:a6:18:f7:ba:dc:a1:17:f3:40:13:ff: 29:19:31:9e:f5:d3:cc:c8:b7:20:fd:34:52:31:ef: 84:63:d1:5c:98:4e:af:2c:18:bc:c7:64:d1:03:d6: 3d:fd:ed:a7:d0:e1:2c:45:7d:3b:62:46:c2:94:dc: 9a:c8:18:b6:97:42:b3:1a:c3:09:2c:3d:ca:9a:25: b6:08:b9:ba:50:33:bc:26:1a:1d:85:00:15:ed:5e: 0e:a0:09:5b:21:c2:44:31:be:30:71:79:a3:c5:1b: dd:0e:a7:0a:0d:c4:25:c6:cc:4c:58:c1:0d:5d:65: 1d:9a:89:d6:f3:79:53:7d:78:4e:17:55:a4:3c:04: 58:82:7d:00:e6:e0:0e:be:64:83:3a:1b:48:b5:8f: a1:5d:52:95:d5:ba:71:c7:d6:80:8c:49:e2:c1:b9: 2d:a1:8d:aa:d9:7d:b3:17:ae:5c:8e:0e:62:50:f4: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:66:A2:CB:25:6F:29:63:A8:8E:E3:09:B5:37:ED:9A:F0:8F:4E X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:06:0d:70:da:9a:55:a4:67:89:4b:8f:36:ea:7d:f4:14:65: 2a:83:75:dd:f0:a7:c1:0b:cc:f2:cc:84:ea:e8:09:a8:9f:8e: a2:6b:66:8f:47:cd:1b:44:22:f0:d0:b3:d3:d9:87:8b:35:13: c2:6b:40:3a:ed:f5:ab:f3:03:34:56:dc:3d:51:62:c4:da:c4: 24:5d:19:42:4a:91:6d:b2:9f:8e:5f:58:53:3e:f7:6e:30:08: 80:e6:61:b1:ef:c6:59:b8:1e:57:0a:60:c1:e1:e0:13:b1:bf: 29:ce:82:a6:54:32:7b:bb:5d:6d:26:b2:f4:2d:18:4b:07:38: 39:d1:73:be:38:e4:4f:09:b0:55:41:8d:51:15:5c:b9:a9:09: 58:9e:ba:2e:77:60:b2:0e:7a:9e:2f:31:da:e4:a4:b3:61:4d: ef:22:13:9e:cb:e4:c3:a3:6d:13:0b:08:94:3a:26:dd:a7:21: 0e:f2:56:16:31:de:22:0b:e9:8a:4a:30:61:cb:7e:d5:9a:8b: 38:29:cf:6e:aa:83:db:09:d8:b7:cc:03:c0:d9:d9:b2:d1:17: bc:e1:05:a7:ae:15:cb:cb:84:ae:1f:1d:2b:d0:32:fd:a4:42: 1b:01:35:b1:3d:b6:a0:b3:90:2c:d2:3c:63:8d:fb:95:0c:3c: bb:4f:44:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjUxMjE5MDE1MjQyWhcNMjUxMjI2MDE1MjQyWjAYMRYwFAYD VQQDDA02OTQ0YWZlYi02YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ8H1EM0eulwIA43W5k1Zxe7d0GULpvVhzI71Lk3cQPc6Akb5xPqw+c1W8e8 iSGyEVRUh5qzm7RBys4UYeUlJWU0z28EuziNE6Ko6WCMphj3utyhF/NAE/8pGTGe 9dPMyLcg/TRSMe+EY9FcmE6vLBi8x2TRA9Y9/e2n0OEsRX07YkbClNyayBi2l0Kz GsMJLD3KmiW2CLm6UDO8JhodhQAV7V4OoAlbIcJEMb4wcXmjxRvdDqcKDcQlxsxM WMENXWUdmonW83lTfXhOF1WkPARYgn0A5uAOvmSDOhtItY+hXVKV1bpxx9aAjEni wbktoY2q2X2zF65cjg5iUPRFQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNaZqLL JW8pY6iO4wm1N+2a8I9OMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPBg1w2ppVpGeJS4826n30FGUqg3Xd8KfBC8zyzITq6Amon46ia2aP R80bRCLw0LPT2YeLNRPCa0A67fWr8wM0Vtw9UWLE2sQkXRlCSpFtsp+OX1hTPvdu MAiA5mGx78ZZuB5XCmDB4eATsb8pzoKmVDJ7u11tJrL0LRhLBzg50XO+OORPCbBV QY1RFVy5qQlYnroud2CyDnqeLzHa5KSzYU3vIhOey+TDo20TCwiUOibdpyEO8lYW Md4iC+mKSjBhy37Vmos4Kc9uqoPbCdi3zAPA2dmy0Re84QWnrhXLy4SuHx0r0DL9 pEIbATWxPbags5As0jxjjfuVDDy7T0QO -----END CERTIFICATE-----Generated at Fri Dec 19 13:58:00 2025 by rpki-client