This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: rCJrjVY15Q/zCq90mvv5fSOJ0mRnJWR1tBFsiKSJ1QE= Subject key identifier: 57:7C:B5:FD:77:BA:10:BC:A3:29:89:06:AA:7E:89:37:09:E0:2F:60 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 051C Signing time: Mon 22 Dec 2025 22:43:49 +0000 Manifest this update: Mon 22 Dec 2025 22:43:48 +0000 Manifest next update: Mon 29 Dec 2025 22:43:48 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: CVgN5w+eX898AisHsUzhUuKUOb8UqfaCpxFP7TvGVyQ=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Dec 22 22:43:48 2025 GMT Not After : Dec 29 22:43:48 2025 GMT Subject: CN=6949c9a5-6b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:c1:b8:6b:a5:57:24:36:f8:31:14:6a:3c: fa:3c:f7:15:d5:52:b0:a9:10:4c:b0:3a:21:bf:8a: ef:04:2d:8a:d3:73:f9:08:2f:46:1a:83:37:ec:ac: 3a:43:60:8e:d3:a7:07:54:66:10:0a:aa:11:ee:4b: 26:8c:a1:05:a1:6c:24:cf:ea:d2:7d:31:44:08:92: 3a:57:72:60:8a:1c:fa:f6:36:f7:77:88:7a:05:43: 19:3a:09:71:41:4a:03:c3:30:bd:20:de:5f:fd:08: ae:0d:4a:c9:15:0c:f6:1f:84:f9:35:4b:26:8a:ca: eb:20:a9:f1:8b:01:5a:62:3c:5d:e7:b4:b2:f1:eb: 72:ec:ff:33:61:c9:2c:ca:8b:45:db:c9:c1:d7:51: 11:2e:a8:5f:ad:a7:c5:12:6e:b8:94:d3:c4:f7:92: 5e:d6:cb:1f:f2:c6:2b:6b:a2:06:e3:21:b9:70:70: 07:fc:07:f8:9b:06:84:93:4a:fa:7c:c8:3a:70:ec: 31:16:fa:34:95:2c:05:22:6b:a3:76:63:62:d1:c7: aa:de:8b:d3:f8:35:8b:ff:27:2d:aa:ed:48:82:a8: 1c:99:a4:e7:6a:1d:14:3a:ab:0a:54:45:3c:d1:e1: bb:7b:d7:eb:0b:a2:6a:fc:1e:5b:88:8b:16:fb:d5: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7C:B5:FD:77:BA:10:BC:A3:29:89:06:AA:7E:89:37:09:E0:2F:60 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:8d:62:b9:9d:b7:56:48:3b:31:8b:7f:de:01:83:40:c3:19: c2:f4:64:f3:88:7a:5b:13:ce:0b:b3:ba:8b:cc:c6:5d:03:b6: a5:76:37:a5:e7:cd:0a:90:00:cf:10:89:29:e0:72:96:be:ab: 1f:41:8a:e1:77:7e:ec:3a:d0:39:c1:49:f6:a0:fa:78:5f:00: df:35:fe:bb:90:1d:3d:72:56:fb:d8:23:d1:fb:29:e1:52:8c: 39:44:5a:bc:d9:2a:2a:5e:a6:d0:99:01:54:d6:5a:bb:af:ac: c1:1d:dc:aa:a9:dd:46:c3:df:a8:f7:0f:fb:7b:40:01:6d:75: 62:88:ac:48:7a:ea:3b:60:fc:e1:4c:0f:a6:b6:65:60:90:42: 8b:e2:c6:56:20:8f:99:72:f8:60:b8:50:06:51:29:7d:8e:31: f7:86:44:c5:ce:ec:ca:42:37:45:c8:c0:37:f5:a7:77:57:53: bf:13:10:98:7c:f7:61:03:b3:0e:b8:18:c5:37:d5:85:89:3e: 84:91:88:c8:29:3d:33:c6:19:07:55:a7:39:db:e1:2f:09:cd: 90:3f:e8:80:46:86:e2:5f:e8:bc:79:f4:6a:75:46:19:ca:02: 7e:a2:77:4c:21:f2:ed:61:24:a6:86:5b:9a:3f:41:07:b3:1b: 96:6e:31:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUxMjIyMjI0MzQ4WhcNMjUxMjI5MjI0MzQ4WjAYMRYwFAYD VQQDDA02OTQ5YzlhNS02Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD7BuGulVyQ2+DEUajz6PPcV1VKwqRBMsDohv4rvBC2K03P5CC9GGoM37Kw6 Q2CO06cHVGYQCqoR7ksmjKEFoWwkz+rSfTFECJI6V3Jgihz69jb3d4h6BUMZOglx QUoDwzC9IN5f/QiuDUrJFQz2H4T5NUsmisrrIKnxiwFaYjxd57Sy8ety7P8zYcks yotF28nB11ERLqhfrafFEm64lNPE95Je1ssf8sYra6IG4yG5cHAH/Af4mwaEk0r6 fMg6cOwxFvo0lSwFImujdmNi0ceq3ovT+DWL/yctqu1IgqgcmaTnah0UOqsKVEU8 0eG7e9frC6Jq/B5biIsW+9XIywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd8tf13 uhC8oymJBqp+iTcJ4C9gMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVjWK5nbdWSDsxi3/eAYNAwxnC9GTziHpbE84Ls7qLzMZdA7aldjel 580KkADPEIkp4HKWvqsfQYrhd37sOtA5wUn2oPp4XwDfNf67kB09clb72CPR+ynh Uow5RFq82SoqXqbQmQFU1lq7r6zBHdyqqd1Gw9+o9w/7e0ABbXViiKxIeuo7YPzh TA+mtmVgkEKL4sZWII+ZcvhguFAGUSl9jjH3hkTFzuzKQjdFyMA39ad3V1O/ExCY fPdhA7MOuBjFN9WFiT6EkYjIKT0zxhkHVac52+EvCc2QP+iARobiX+i8efRqdUYZ ygJ+ondMIfLtYSSmhluaP0EHsxuWbjEC -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:39 2025 by rpki-client