This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: LQgTuw1joLcNB3EMJuHbzG8TCtKk9k8Y2BlBXVw5sRk= Subject key identifier: 0D:77:31:F5:94:F1:C1:11:E4:1E:8F:9E:95:B9:F5:36:4E:2D:A9:D2 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 01C0 Signing time: Tue 23 Dec 2025 02:01:47 +0000 Manifest this update: Tue 23 Dec 2025 02:01:46 +0000 Manifest next update: Tue 30 Dec 2025 02:01:46 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: cL2ik8c/3o+FmRFjhr1cjqIlA1uZ/0GlGnhbGTeAoXY=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Dec 23 02:01:46 2025 GMT Not After : Dec 30 02:01:46 2025 GMT Subject: CN=6949f80b-dfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:da:dc:2e:08:41:89:71:c4:4d:d4:da:b2: 2a:40:75:5b:c0:4a:cc:5f:1c:04:7a:02:2c:22:46: c5:1f:c6:3d:e6:1a:9f:cb:99:70:74:1c:f3:a7:89: 77:09:7b:de:dd:98:26:09:38:86:9e:be:d1:2a:f0: 01:cf:a1:2c:66:82:59:9e:f6:44:ef:b2:8a:58:15: 3c:85:83:09:20:d2:15:45:e7:b6:de:4f:da:0c:1b: 34:f5:fc:38:7d:3d:cf:51:88:6d:0f:a9:9b:f3:44: ca:90:df:26:55:1a:df:04:6e:ac:eb:09:24:4a:9c: 80:d0:25:13:f7:b0:09:a2:af:95:ef:b9:9c:d2:ef: ae:40:9b:b9:af:51:88:1b:fa:25:2b:41:b2:46:a8: 38:c4:cc:ea:33:6b:85:27:2c:b6:ff:c1:53:d1:f9: 7e:2f:d8:ad:97:66:44:73:94:53:2b:5b:92:1e:49: 0b:95:4c:96:80:c2:5c:77:88:6b:e2:f6:e1:88:59: 36:1a:c0:06:b8:14:2f:52:f4:ee:14:0b:98:3a:a2: 39:b9:90:d8:02:4f:0f:23:6b:75:aa:31:c2:b7:5d: b9:8d:f8:89:90:42:17:e9:83:9d:03:ea:89:4f:cd: aa:5b:b9:09:b5:9a:e2:1a:8c:42:41:8d:c8:2f:a4: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:31:F5:94:F1:C1:11:E4:1E:8F:9E:95:B9:F5:36:4E:2D:A9:D2 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d2:ba:c5:b0:94:8e:67:a4:e6:c4:c1:36:bf:53:a5:14:8e: d7:92:4f:89:9c:ef:59:72:e8:fa:dc:8d:ee:2a:06:31:d7:36: 19:c0:47:6f:ed:40:91:ae:b0:fb:33:b7:09:92:a7:6c:4a:d7: 4c:8a:24:7e:b7:3a:8c:73:42:02:a0:db:b1:91:42:07:2b:c6: e2:16:56:fb:ef:c3:75:49:51:d9:07:d7:32:15:30:63:bd:07: ba:84:88:ea:a7:ba:1a:c9:fa:b8:07:71:2a:51:13:e6:7e:aa: cc:ff:d3:1a:6c:8f:d3:74:84:3b:88:6d:ac:d8:f2:e3:7c:77: 47:55:a3:e7:eb:05:73:07:05:c2:dd:37:a5:17:c6:42:db:c3: 22:75:79:ee:f1:00:67:76:12:45:3c:90:69:a2:3a:84:d3:10: 51:d5:df:88:f7:44:61:6e:7b:1d:ca:8a:40:97:08:79:9d:07: e5:ae:87:13:14:63:55:ac:a5:e2:df:ea:1c:00:b2:c8:bc:11: d9:ab:4e:ac:c5:7e:8a:77:cd:6f:a6:ad:94:54:20:82:dd:6b: 97:84:1a:a6:69:91:db:08:e7:57:3a:5d:21:d8:0c:53:da:a3: 4e:7e:af:2d:4e:6b:3e:27:42:f3:a5:66:6d:b4:ef:01:39:b0: d1:22:0f:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUxMjIzMDIwMTQ2WhcNMjUxMjMwMDIwMTQ2WjAYMRYwFAYD VQQDDA02OTQ5ZjgwYi1kZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslva3C4IQYlxxE3U2rIqQHVbwErMXxwEegIsIkbFH8Y95hqfy5lwdBzzp4l3 CXve3ZgmCTiGnr7RKvABz6EsZoJZnvZE77KKWBU8hYMJINIVRee23k/aDBs09fw4 fT3PUYhtD6mb80TKkN8mVRrfBG6s6wkkSpyA0CUT97AJoq+V77mc0u+uQJu5r1GI G/olK0GyRqg4xMzqM2uFJyy2/8FT0fl+L9itl2ZEc5RTK1uSHkkLlUyWgMJcd4hr 4vbhiFk2GsAGuBQvUvTuFAuYOqI5uZDYAk8PI2t1qjHCt125jfiJkEIX6YOdA+qJ T82qW7kJtZriGoxCQY3IL6QHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA13MfWU 8cER5B6PnpW59TZOLanSMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi0rrFsJSOZ6TmxME2v1OlFI7Xkk+JnO9Zcuj63I3uKgYx1zYZwEdv 7UCRrrD7M7cJkqdsStdMiiR+tzqMc0ICoNuxkUIHK8biFlb778N1SVHZB9cyFTBj vQe6hIjqp7oayfq4B3EqURPmfqrM/9MabI/TdIQ7iG2s2PLjfHdHVaPn6wVzBwXC 3TelF8ZC28MidXnu8QBndhJFPJBpojqE0xBR1d+I90RhbnsdyopAlwh5nQflrocT FGNVrKXi3+ocALLIvBHZq06sxX6Kd81vpq2UVCCC3WuXhBqmaZHbCOdXOl0h2AxT 2qNOfq8tTms+J0LzpWZttO8BObDRIg8I -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:09 2025 by rpki-client