This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: SoY/cANJGpxRjnWV/P7R8VcbAn0H5wuhiGgHaxeGifk= Subject key identifier: E9:31:1F:93:AC:4D:6B:B0:AC:6D:D1:A6:AD:35:C2:88:5A:F9:2D:8B Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 05CF Signing time: Mon 22 Dec 2025 22:20:06 +0000 Manifest this update: Mon 22 Dec 2025 22:20:06 +0000 Manifest next update: Mon 29 Dec 2025 22:20:06 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: tr9aBPo9qp0CZx6nT2NDdnveF2PB8T5xzBIptYAQAV0=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: B5qPcRiAPVySXtIwaHqDbWpuZoMlGmhplKL4rpUX3FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Dec 22 22:20:06 2025 GMT Not After : Dec 29 22:20:06 2025 GMT Subject: CN=6949c416-ffca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:3e:e1:a6:31:79:c6:f7:5e:eb:2b:74:9e: 24:9e:83:ca:f5:f1:95:96:60:38:b7:c9:46:47:93: 4a:83:cb:11:a7:63:10:90:6a:cb:0e:29:92:22:14: 9c:6e:27:30:19:06:66:92:40:2f:c1:ee:86:5c:9d: ae:0a:c5:79:6a:95:af:f7:fa:47:f4:60:12:0f:af: af:73:6b:ec:89:94:25:eb:96:68:f2:40:31:07:e8: 49:e6:f5:62:6f:0e:25:e7:fb:c3:e9:fd:a4:c5:9c: 33:2c:12:ac:80:ca:08:b0:5d:b0:dd:af:bc:b2:26: a2:0e:2c:25:a2:3f:fd:09:cf:f5:70:13:5c:38:50: 99:bf:a1:82:d3:bb:3d:6f:bb:e1:15:32:f8:c0:87: d1:a6:b5:7f:3e:54:ec:7d:de:9a:1e:df:f2:06:fb: 3d:ab:ef:bc:1f:dd:17:0a:10:0c:21:99:90:4a:8c: a2:3f:cf:a7:85:96:bd:c4:3d:43:2c:a0:92:5d:63: d9:2f:7e:66:47:64:2e:c6:de:1c:92:9c:06:05:f2: 78:c6:f5:b6:56:b1:e9:79:18:b2:35:17:49:55:8f: be:64:d2:4e:1d:1a:24:fb:a9:f7:c0:c1:21:2e:c1: 13:dd:86:79:3a:54:4d:36:00:fc:67:62:35:ce:9e: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:31:1F:93:AC:4D:6B:B0:AC:6D:D1:A6:AD:35:C2:88:5A:F9:2D:8B X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a2:f0:0b:19:02:72:b2:6d:55:cd:18:70:17:03:9f:84:4d: 0b:14:b8:ee:47:69:38:5e:79:9a:89:73:6d:2c:be:b6:92:71: f0:8a:2a:68:d5:20:4e:43:2b:5b:f6:e3:3b:b3:2b:b9:0c:04: 7c:ed:b3:c9:77:bc:44:76:bb:7d:f0:4b:1b:d1:b1:b5:5b:54: 2a:1b:27:06:5a:f9:0f:93:c3:f4:0b:97:f1:d0:df:6c:8f:6b: d2:d0:3d:6b:c5:e4:2f:59:c6:01:38:84:b6:94:72:f6:de:91: 04:c8:7a:e1:9d:8b:53:92:8f:4f:3a:c3:a3:13:ec:3c:0d:ac: 49:f3:60:f2:62:d1:73:ec:f7:af:50:fb:60:7d:cc:43:a7:62: 9f:72:0c:08:b6:ab:58:69:b8:d5:30:14:ce:ba:34:b1:4a:d2: de:84:5b:45:e4:89:ca:ad:c4:a5:f0:d0:90:51:2d:2a:02:e9: c9:f6:be:15:37:93:f4:da:cb:82:da:f4:73:77:54:fc:3a:8a: ce:20:f9:ea:bd:a8:42:59:05:de:f3:5a:73:67:98:da:4d:31: 97:51:b9:44:ba:07:01:1e:04:66:58:87:e6:a0:29:de:c2:e6: 21:e6:6b:2b:e0:c1:b7:c3:9a:89:01:4f:90:ad:9f:cf:d7:7e: e2:ae:d4:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUxMjIyMjIyMDA2WhcNMjUxMjI5MjIyMDA2WjAYMRYwFAYD VQQDDA02OTQ5YzQxNi1mZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGk+4aYxecb3XusrdJ4knoPK9fGVlmA4t8lGR5NKg8sRp2MQkGrLDimSIhSc bicwGQZmkkAvwe6GXJ2uCsV5apWv9/pH9GASD6+vc2vsiZQl65Zo8kAxB+hJ5vVi bw4l5/vD6f2kxZwzLBKsgMoIsF2w3a+8siaiDiwloj/9Cc/1cBNcOFCZv6GC07s9 b7vhFTL4wIfRprV/PlTsfd6aHt/yBvs9q++8H90XChAMIZmQSoyiP8+nhZa9xD1D LKCSXWPZL35mR2Quxt4ckpwGBfJ4xvW2VrHpeRiyNRdJVY++ZNJOHRok+6n3wMEh LsET3YZ5OlRNNgD8Z2I1zp7s1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkxH5Os TWuwrG3Rpq01woha+S2LMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNovALGQJysm1VzRhwFwOfhE0LFLjuR2k4XnmaiXNtLL62knHwiipo 1SBOQytb9uM7syu5DAR87bPJd7xEdrt98Esb0bG1W1QqGycGWvkPk8P0C5fx0N9s j2vS0D1rxeQvWcYBOIS2lHL23pEEyHrhnYtTko9POsOjE+w8DaxJ82DyYtFz7Pev UPtgfcxDp2KfcgwItqtYabjVMBTOujSxStLehFtF5InKrcSl8NCQUS0qAunJ9r4V N5P02suC2vRzd1T8OorOIPnqvahCWQXe81pzZ5jaTTGXUblEugcBHgRmWIfmoCne wuYh5msr4MG3w5qJAU+QrZ/P137irtTc -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:04 2025 by rpki-client