This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: lkVraYGBfv5Q/Vbml14ZJXufF2IFk4Y2n/oyZvgs7cI= Subject key identifier: 2D:60:8E:76:21:E8:8F:89:E7:57:05:AE:17:D5:D9:4F:38:E7:A9:A6 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A90 Signing time: Mon 22 Dec 2025 19:00:00 +0000 Manifest this update: Mon 22 Dec 2025 18:59:59 +0000 Manifest next update: Mon 29 Dec 2025 18:59:59 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: iJE+ALRLGQoEZQmTUk7yt/OIUEyf860KPuiiMfqp7ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Dec 22 18:59:59 2025 GMT Not After : Dec 29 18:59:59 2025 GMT Subject: CN=69499530-0fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:73:2f:5e:5f:a5:ad:dc:34:1c:ea:76:fc: d8:94:72:50:76:a0:3a:bd:c8:82:70:de:cb:74:0b: 83:57:71:95:ff:b2:09:ab:46:a5:02:0c:e1:66:78: 57:f5:c0:89:d1:33:25:0f:f6:09:69:7a:48:cc:fc: 7d:24:7a:93:e3:ae:5f:28:61:e8:57:64:f8:ed:27: 35:89:d9:59:3d:cb:ab:4d:8c:e4:2d:51:13:ea:2a: 73:ac:84:46:d8:0a:b0:04:01:ff:f0:2c:c8:1d:a8: f8:20:4d:08:51:93:61:b4:24:89:b6:45:5b:bd:6b: 98:16:74:95:2c:0d:1f:4c:8e:4b:75:a9:d1:b1:08: 36:2e:cd:c3:29:7e:ab:84:0d:17:7f:b4:4b:5a:e3: 68:d0:86:98:b0:95:8c:69:4d:88:2f:19:d3:b5:e2: 94:dc:6b:aa:1d:86:dd:57:ed:b6:22:e8:3a:76:0f: 68:39:c4:b2:c8:e4:24:e0:5d:7f:77:ac:35:10:51: d2:1e:1f:b3:76:35:37:7b:af:4b:7a:3e:bf:3f:d6: a0:07:0c:39:97:68:0a:73:ed:c8:cb:89:a5:67:2c: 93:81:0b:ee:8d:da:9d:a2:0d:93:45:21:3e:74:35: 9e:9c:f0:eb:07:0b:fd:19:30:95:de:77:c7:6d:98: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:8E:76:21:E8:8F:89:E7:57:05:AE:17:D5:D9:4F:38:E7:A9:A6 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5d:b3:8b:c3:02:80:26:10:ba:fb:59:37:b1:fa:f4:e3:b6: a8:fb:9d:5a:74:59:7e:f2:0f:c2:38:7a:b5:0f:23:6d:a7:c5: 68:fe:69:a8:26:d1:65:b8:51:75:3f:f3:52:74:88:0e:5d:f3: ca:e7:49:9a:4b:33:8b:c0:a1:3c:f0:a0:e9:10:c5:62:e2:b1: fd:56:88:d3:fa:39:50:54:ff:da:e7:53:f9:1e:9d:f5:34:b3: 26:e8:e6:a1:48:25:c0:25:69:8c:3b:3b:5b:be:cc:f3:7b:ae: 25:81:53:f2:7f:25:e8:61:bd:6e:be:ae:d8:05:25:02:12:77: b1:48:d8:b4:7e:ed:fc:24:a3:bd:02:85:54:6f:cc:b7:98:60: 57:65:1c:4b:0e:32:56:a4:a1:81:e9:b0:20:e1:93:e8:ba:99: e1:08:74:8d:5b:09:9c:8a:22:42:df:da:df:80:c8:81:21:ee: 6b:12:7f:20:94:03:1e:f9:ad:27:4c:66:57:37:3d:88:f4:83: e9:e6:19:b1:a1:72:03:52:db:01:33:03:1a:4c:51:9a:5e:55: 4f:07:e7:19:92:68:71:b7:24:95:7f:fc:8e:27:b6:11:6d:8c: b6:11:11:21:d0:be:bc:5d:6a:a3:61:a8:1b:74:d9:f8:97:90: f6:ed:50:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUxMjIyMTg1OTU5WhcNMjUxMjI5MTg1OTU5WjAYMRYwFAYD VQQDDA02OTQ5OTUzMC0wZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UBzL15fpa3cNBzqdvzYlHJQdqA6vciCcN7LdAuDV3GV/7IJq0alAgzhZnhX 9cCJ0TMlD/YJaXpIzPx9JHqT465fKGHoV2T47Sc1idlZPcurTYzkLVET6ipzrIRG 2AqwBAH/8CzIHaj4IE0IUZNhtCSJtkVbvWuYFnSVLA0fTI5LdanRsQg2Ls3DKX6r hA0Xf7RLWuNo0IaYsJWMaU2ILxnTteKU3GuqHYbdV+22Iug6dg9oOcSyyOQk4F1/ d6w1EFHSHh+zdjU3e69Lej6/P9agBww5l2gKc+3Iy4mlZyyTgQvujdqdog2TRSE+ dDWenPDrBwv9GTCV3nfHbZiEaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1gjnYh 6I+J51cFrhfV2U8456mmMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPXbOLwwKAJhC6+1k3sfr047ao+51adFl+8g/COHq1DyNtp8Vo/mmo JtFluFF1P/NSdIgOXfPK50maSzOLwKE88KDpEMVi4rH9VojT+jlQVP/a51P5Hp31 NLMm6OahSCXAJWmMOztbvszze64lgVPyfyXoYb1uvq7YBSUCEnexSNi0fu38JKO9 AoVUb8y3mGBXZRxLDjJWpKGB6bAg4ZPoupnhCHSNWwmciiJC39rfgMiBIe5rEn8g lAMe+a0nTGZXNz2I9IPp5hmxoXIDUtsBMwMaTFGaXlVPB+cZkmhxtySVf/yOJ7YR bYy2EREh0L68XWqjYagbdNn4l5D27VDI -----END CERTIFICATE-----Generated at Wed Dec 24 17:42:00 2025 by rpki-client