This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: Aa9q2TVEyKlawVy290svvu1trXipQhkOZ9svP7vvlDE= Subject key identifier: 27:E1:7C:9B:1C:A5:1E:FE:2A:6B:23:A3:A9:82:26:AF:C2:BA:FC:77 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0AE9 Signing time: Mon 22 Dec 2025 18:53:25 +0000 Manifest this update: Mon 22 Dec 2025 18:53:25 +0000 Manifest next update: Mon 29 Dec 2025 18:53:25 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: o2QO2Tidl+f84IkfQkFHyt8J2Pe2DNUMyQOjvoAImq0=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Dec 22 18:53:25 2025 GMT Not After : Dec 29 18:53:25 2025 GMT Subject: CN=694993a5-0152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:8f:1f:19:46:9d:92:e0:14:bd:f3:a2:e9: 17:3b:b7:eb:b6:66:d7:9e:35:15:77:d2:44:1f:1d: 22:34:7d:7b:e3:1c:10:da:18:97:c0:c9:ec:bb:b4: b5:de:7b:2c:65:8b:17:d7:7a:0b:9f:1d:f9:92:9b: 47:f2:50:87:0d:dc:98:ab:af:92:66:5a:39:a4:a7: ed:c7:c4:7d:68:a1:13:cb:a8:22:10:6e:6f:81:9a: 2a:ac:b8:70:11:b1:39:03:c0:e4:69:eb:7f:d4:df: 41:92:21:a8:a2:c9:06:7f:96:bf:68:dd:00:66:72: fd:02:8a:0b:53:bf:61:d7:8c:02:8c:91:b3:db:7c: 48:e1:de:0d:af:e8:c7:85:6b:e1:67:ef:c3:15:88: 70:99:ba:08:98:bc:b4:d1:95:62:2a:8f:22:e1:84: 65:8e:57:84:7f:75:a1:c4:f5:fc:96:c6:dc:f3:95: c8:3c:b2:07:4f:a9:ef:30:0b:5d:bb:01:f2:79:b6: c0:75:d2:dd:a6:71:9c:a4:07:70:f5:76:83:b3:47: 41:17:2e:e7:2b:ee:3c:44:22:13:fb:4e:0b:a3:44: 12:c1:85:ab:58:85:50:a6:f1:5e:b9:23:d6:c5:98: 55:7b:e9:f3:c1:21:8c:d6:9e:e0:35:1d:62:f7:b5: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:7C:9B:1C:A5:1E:FE:2A:6B:23:A3:A9:82:26:AF:C2:BA:FC:77 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:12:45:03:18:a1:43:89:41:98:bb:66:14:98:37:c1:7e:a0: f4:67:85:58:25:ab:cb:3a:36:68:bc:e1:2e:60:87:2f:7a:59: 75:c3:f0:70:17:56:dd:23:77:2e:b6:a9:d8:28:20:6e:18:e9: 9b:6d:c1:5f:20:4d:5e:5d:2d:62:af:00:aa:61:40:1d:79:fd: d7:a2:c6:2c:a8:d9:1e:a7:c4:cd:98:14:03:a7:1c:47:28:fa: e8:75:91:02:a3:45:59:6d:b5:ca:47:54:25:da:a5:21:38:6c: 85:79:9f:2c:f9:9a:1c:48:f3:c6:a6:69:36:91:33:10:a9:97: 70:49:76:76:1e:54:ce:6d:81:82:f6:47:8c:fd:4b:f1:9a:2d: d8:4d:0d:22:a4:9d:d6:0a:31:d1:ab:15:8f:3a:a3:6d:ac:59: cb:a7:6f:bd:10:e3:91:57:19:f9:33:43:05:b2:5b:f0:d2:b2: 4d:86:d9:d6:ee:3c:b5:39:d6:e8:14:6b:47:c0:85:35:f7:af: 03:3a:03:fd:c9:92:ec:ce:8c:69:a8:fa:bd:1d:24:7f:94:ef: ee:ac:f6:f8:b5:83:ab:2c:43:42:16:f6:fc:78:4a:e4:9a:f5: 77:f0:54:c5:87:f3:b0:91:76:9d:f2:12:84:e5:9c:89:10:59: 75:e7:c2:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUxMjIyMTg1MzI1WhcNMjUxMjI5MTg1MzI1WjAYMRYwFAYD VQQDDA02OTQ5OTNhNS0wMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaKPHxlGnZLgFL3zoukXO7frtmbXnjUVd9JEHx0iNH174xwQ2hiXwMnsu7S1 3nssZYsX13oLnx35kptH8lCHDdyYq6+SZlo5pKftx8R9aKETy6giEG5vgZoqrLhw EbE5A8Dkaet/1N9BkiGooskGf5a/aN0AZnL9AooLU79h14wCjJGz23xI4d4Nr+jH hWvhZ+/DFYhwmboImLy00ZViKo8i4YRljleEf3WhxPX8lsbc85XIPLIHT6nvMAtd uwHyebbAddLdpnGcpAdw9XaDs0dBFy7nK+48RCIT+04Lo0QSwYWrWIVQpvFeuSPW xZhVe+nzwSGM1p7gNR1i97XInQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfhfJsc pR7+Kmsjo6mCJq/Cuvx3MB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUEkUDGKFDiUGYu2YUmDfBfqD0Z4VYJavLOjZovOEuYIcvell1w/Bw F1bdI3cutqnYKCBuGOmbbcFfIE1eXS1irwCqYUAdef3XosYsqNkep8TNmBQDpxxH KProdZECo0VZbbXKR1Ql2qUhOGyFeZ8s+ZocSPPGpmk2kTMQqZdwSXZ2HlTObYGC 9keM/Uvxmi3YTQ0ipJ3WCjHRqxWPOqNtrFnLp2+9EOORVxn5M0MFslvw0rJNhtnW 7jy1OdboFGtHwIU1968DOgP9yZLszoxpqPq9HSR/lO/urPb4tYOrLENCFvb8eErk mvV38FTFh/OwkXad8hKE5ZyJEFl158Jt -----END CERTIFICATE-----Generated at Tue Dec 23 20:20:02 2025 by rpki-client