This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft File: F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json) Hash identifier: 65NqViv4KNeDvbAfh0jIBGrBU8ZjV07hw2C++kaQJKs= Subject key identifier: A1:17:36:0F:88:C1:8F:78:48:F5:BE:5B:DB:38:9A:98:BD:2B:C7:AE Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 Certificate issuer: /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft Manifest number: 044A Signing time: Sat 20 Dec 2025 23:27:43 +0000 Manifest this update: Sat 20 Dec 2025 23:27:43 +0000 Manifest next update: Sat 27 Dec 2025 23:27:43 +0000 Files and hashes: 1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: jdFIQ/D/tI8HpoWSbcEJMcKfbu3HDSupP1gm3Ew1z5c=) 2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: wgDb1KnVQWBoZ1T5BXpX71TMMnESBtSdKYU93dImmgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Validity Not Before: Dec 20 23:27:43 2025 GMT Not After : Dec 27 23:27:43 2025 GMT Subject: CN=694730ef-1a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:90:bb:90:11:a6:13:35:aa:72:8d:ce:f8: 2c:06:07:1f:cc:8b:be:dc:ee:fd:c4:c1:f0:fe:71: b5:25:44:5d:35:70:f7:1d:2a:69:b9:26:09:44:90: 8a:d3:e0:b8:06:06:f9:42:22:1a:d5:2a:c6:d4:30: 09:df:7f:36:33:a4:a6:1b:84:5e:3b:7a:91:12:19: 3f:a0:73:48:06:7b:84:3f:0e:4f:d0:88:a1:54:18: 21:2f:dd:04:16:af:72:56:8e:40:ac:bf:ac:10:c1: 75:21:26:b9:81:41:fc:5a:56:73:ff:15:a1:1c:48: dd:e0:47:48:14:f0:ab:4d:ac:d5:dc:61:1a:d9:ef: 24:1d:c3:e4:b1:89:1e:8a:74:c7:76:50:b4:96:86: 77:06:9a:09:f5:c4:08:02:6e:8a:92:53:ec:46:37: ba:1a:da:20:6c:04:da:03:ec:b7:b4:4d:96:c6:31: 8b:f6:95:e9:0e:a0:09:a3:e7:ee:21:f2:d1:a4:01: e6:a0:bb:9c:bb:aa:ad:2b:63:89:92:62:17:c7:17: 7c:f9:14:e0:b2:cc:74:fe:65:d7:85:79:32:36:d8: 73:4f:d4:c1:eb:dc:64:a1:f5:58:eb:3d:e1:87:c6: f1:5d:76:3d:1e:b1:11:a6:2f:91:71:08:84:75:3e: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:17:36:0F:88:C1:8F:78:48:F5:BE:5B:DB:38:9A:98:BD:2B:C7:AE X509v3 Authority Key Identifier: keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:7a:13:ce:94:6a:f2:73:37:6a:38:cf:d5:39:d5:36:34: c9:e4:1e:d3:0c:04:5c:eb:9d:4a:03:56:30:25:7b:3e:fc:70: d5:de:c4:85:85:4e:9e:24:f5:ee:a6:4e:c7:39:91:fc:b9:02: 35:ed:09:95:8d:c3:8f:8d:21:2d:6f:a8:6b:ae:1c:56:1e:15: c4:7d:ad:22:17:09:ab:23:56:a9:fc:53:ac:db:88:c2:8b:89: a2:e0:4f:0e:d8:a5:28:ae:65:5d:a5:8d:01:00:50:f1:a3:1e: 8e:ce:34:52:86:b2:86:f4:4f:dc:27:1f:a8:f4:c4:0d:22:8d: b9:89:db:6b:48:02:1c:61:b3:eb:65:6c:4d:9f:54:9f:be:9a: 51:4b:41:d4:28:dc:3b:ea:a1:2a:a7:fa:71:91:da:1e:dd:bb: cb:89:0d:cc:b7:68:25:88:61:b8:75:e0:3a:41:87:b9:03:e7: b7:95:2b:7a:c7:18:57:94:d9:d0:c8:3b:2f:ba:b0:d3:41:78: f1:57:cd:ab:f4:fe:fe:89:d0:4f:f9:21:07:82:29:c5:92:c1: 29:88:73:bb:b5:7c:10:35:7e:21:9d:bf:80:fa:85:9b:90:c4: 1a:8c:cf:5e:56:c6:b3:5e:38:4b:d0:6d:bb:bf:dd:6f:38:a8: 69:a4:99:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY4MEUxMTAvBgNVBAUTKDE3NUY3MzJFNDZEQkFCRTlBQTcxODFERjgzQzcyNkVG NkY2RjVCQzIwHhcNMjUxMjIwMjMyNzQzWhcNMjUxMjI3MjMyNzQzWjAYMRYwFAYD VQQDDA02OTQ3MzBlZi0xYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs+Qu5ARphM1qnKNzvgsBgcfzIu+3O79xMHw/nG1JURdNXD3HSppuSYJRJCK 0+C4Bgb5QiIa1SrG1DAJ3382M6SmG4ReO3qREhk/oHNIBnuEPw5P0IihVBghL90E Fq9yVo5ArL+sEMF1ISa5gUH8WlZz/xWhHEjd4EdIFPCrTazV3GEa2e8kHcPksYke inTHdlC0loZ3BpoJ9cQIAm6KklPsRje6GtogbATaA+y3tE2WxjGL9pXpDqAJo+fu IfLRpAHmoLucu6qtK2OJkmIXxxd8+RTgssx0/mXXhXkyNthzT9TB69xkofVY6z3h h8bxXXY9HrERpi+RcQiEdT4WAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEXNg+I wY94SPW+W9s4mpi9K8euMB8GA1UdIwQYMBaAFBdfcy5G26vpqnGB34PHJu9vb1vC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjgwRS9ENkY3QkFEODdF RTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEtbXFjWUhmZzhjbTcyOXZX OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxOXpMa2JicS1tcWNZSGZnOGNtNzI5dlc4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjgwRS9ENkY3QkFEODdFRTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEt bXFjWUhmZzhjbTcyOXZXOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlSnoTzpRq8nM3ajjP1TnVNjTJ5B7TDARc651KA1YwJXs+/HDV3sSF hU6eJPXupk7HOZH8uQI17QmVjcOPjSEtb6hrrhxWHhXEfa0iFwmrI1ap/FOs24jC i4mi4E8O2KUormVdpY0BAFDxox6OzjRShrKG9E/cJx+o9MQNIo25idtrSAIcYbPr ZWxNn1SfvppRS0HUKNw76qEqp/pxkdoe3bvLiQ3Mt2gliGG4deA6QYe5A+e3lSt6 xxhXlNnQyDsvurDTQXjxV82r9P7+idBP+SEHginFksEpiHO7tXwQNX4hnb+A+oWb kMQajM9eVsazXjhL0G27v91vOKhppJkq -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:27 2025 by rpki-client