This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: z2F1lsRXGWf+X4amc8Q2DMSjEyuf6gVQBLORbwSOYzU= Subject key identifier: 4E:6B:3F:06:96:0F:C6:68:AE:9F:49:D5:0A:D9:FC:9F:C6:99:7A:D5 Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 19 Signing time: Tue 23 Dec 2025 06:44:11 +0000 Manifest this update: Tue 23 Dec 2025 06:44:10 +0000 Manifest next update: Tue 30 Dec 2025 06:44:10 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: 2JTsKJWQh1++km/C5KLR/iCpY1vbHFXnb4m3IcW/qmk=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: 48zywXKMdCoecrzGBCo9/VsiO+sSg4SaJvOnw5Kh4Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Dec 23 06:44:10 2025 GMT Not After : Dec 30 06:44:10 2025 GMT Subject: CN=694a3a3b-0823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:7f:7c:29:cf:ab:9a:c6:fb:b4:e9:fc:34: 30:ae:55:fb:72:a5:f1:d3:14:ea:98:67:dc:c8:88: 0f:3a:c6:2a:62:0f:1b:7f:be:2b:04:9f:58:e5:d6: 34:d9:18:fe:b2:80:ff:cf:4c:62:86:24:17:66:34: d8:ec:78:e4:dc:e2:64:a6:15:18:39:dd:1c:81:48: a6:aa:c2:12:a5:51:38:4f:6f:ee:fa:c8:8c:c2:80: 1f:e2:ea:b5:6c:b1:80:55:ce:d2:78:30:5d:a1:65: eb:44:9c:b9:32:a2:45:9f:ef:13:1a:1c:26:17:39: 30:e8:db:d6:a4:f2:e1:1b:3e:2a:59:b1:1d:ac:8f: 29:47:f1:1f:cd:ed:12:8a:fc:45:b4:6a:0e:fb:4d: 32:a5:a3:45:6e:da:fc:0e:0c:35:96:b4:1f:28:5e: 54:c4:14:10:94:73:c4:ff:34:1e:24:20:64:b5:20: d6:0e:31:6f:00:cd:58:1b:9a:fd:8b:bb:f7:01:6d: 74:d5:63:7f:d8:12:97:d1:3a:1c:5d:a6:94:ba:be: d6:bf:6c:b8:e3:ad:46:eb:20:a1:9c:f7:0e:1d:c6: 62:4e:48:fb:c9:d9:0d:02:4e:0a:38:c3:66:83:e4: 16:18:07:15:01:8f:75:45:26:f1:f1:dc:05:37:bc: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6B:3F:06:96:0F:C6:68:AE:9F:49:D5:0A:D9:FC:9F:C6:99:7A:D5 X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:b2:49:c2:bf:22:7b:17:45:72:dc:92:9f:8b:70:84:23: 46:bf:43:70:a4:c9:e9:f8:05:0c:de:d2:16:02:cb:fe:60:8e: a4:99:2b:02:9d:82:2e:3c:bf:d8:e7:18:fb:02:fd:3b:00:bf: 3a:2d:42:16:a9:e0:8f:23:e0:c8:6a:2e:10:55:1c:7f:f5:be: 0b:81:fc:c1:f1:86:b4:02:55:87:fe:66:e6:ae:b3:0f:79:3f: 5f:29:49:43:6b:ec:a5:72:52:e7:24:59:81:94:ad:69:3a:c7: 06:aa:db:10:5b:1a:d8:d1:e3:e5:8b:47:95:96:f0:8e:0b:66: 13:d4:e9:98:f4:4b:a7:77:03:08:ce:ae:7e:8d:4a:0c:ba:9f: a1:81:c8:35:3b:a1:78:5b:44:f2:16:11:64:2d:25:fd:75:45: 22:99:89:23:cb:27:6f:dc:2c:80:68:e5:80:51:be:e0:1f:2f: 14:9d:2e:1b:7b:4c:9e:33:a1:f2:45:f7:b8:88:55:c0:f5:eb: 19:b5:53:c0:4f:f6:e8:3c:fc:1c:aa:2d:12:b5:11:8f:99:e6: 2c:0c:d3:b7:a2:72:55:cb:b5:0f:9d:43:68:ef:9e:6f:5a:fe: 95:e9:22:40:69:16:88:75:ed:13:8a:7c:97:43:44:98:ae:d0: 4d:3c:85:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNTEyMjMwNjQ0MTBaFw0yNTEyMzAwNjQ0MTBaMBgxFjAUBgNV BAMMDTY5NGEzYTNiLTA4MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfnH98Kc+rmsb7tOn8NDCuVftypfHTFOqYZ9zIiA86xipiDxt/visEn1jl1jTZ GP6ygP/PTGKGJBdmNNjseOTc4mSmFRg53RyBSKaqwhKlUThPb+76yIzCgB/i6rVs sYBVztJ4MF2hZetEnLkyokWf7xMaHCYXOTDo29ak8uEbPipZsR2sjylH8R/N7RKK /EW0ag77TTKlo0Vu2vwODDWWtB8oXlTEFBCUc8T/NB4kIGS1INYOMW8AzVgbmv2L u/cBbXTVY3/YEpfROhxdppS6vta/bLjjrUbrIKGc9w4dxmJOSPvJ2Q0CTgo4w2aD 5BYYBxUBj3VFJvHx3AU3vJOtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTms/BpYP xmiun0nVCtn8n8aZetUwHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGGsknCvyJ7F0Vy3JKfi3CEI0a/Q3Ckyen4BQze0hYCy/5gjqSZKwKd gi48v9jnGPsC/TsAvzotQhap4I8j4MhqLhBVHH/1vguB/MHxhrQCVYf+Zuausw95 P18pSUNr7KVyUuckWYGUrWk6xwaq2xBbGtjR4+WLR5WW8I4LZhPU6Zj0S6d3AwjO rn6NSgy6n6GByDU7oXhbRPIWEWQtJf11RSKZiSPLJ2/cLIBo5YBRvuAfLxSdLht7 TJ4zofJF97iIVcD16xm1U8BP9ug8/ByqLRK1EY+Z5iwM07eiclXLtQ+dQ2jvnm9a /pXpIkBpFoh17ROKfJdDRJiu0E08hUA= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:06 2025 by rpki-client