This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: ozbgz69XBMCKjhHLZhUQpiuEMNflqfOrsfyvcTqobTw= Subject key identifier: 04:A5:3C:9C:49:DF:09:52:86:A4:65:10:FB:D6:E8:F5:CA:DA:C4:AD Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0B25 Signing time: Mon 22 Dec 2025 18:46:34 +0000 Manifest this update: Mon 22 Dec 2025 18:46:34 +0000 Manifest next update: Mon 29 Dec 2025 18:46:34 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: 0bm5gvijCE5ysSLHBLnviLPRgl9HExRKtytzTs5KLXE=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: wVjOHBRTAFBzywxmlgqw2C8A1H3crVXb96hs+TBB5RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Dec 22 18:46:34 2025 GMT Not After : Dec 29 18:46:34 2025 GMT Subject: CN=6949920a-dace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:87:04:b9:b6:80:0e:cd:f5:11:0c:01:7c: 50:bb:da:1f:e0:50:2a:e3:90:b2:90:c0:34:93:73: 03:60:62:ab:40:29:22:88:b9:49:5c:cd:08:9b:a9: 2a:eb:aa:95:17:ca:79:1e:2f:d7:d1:31:fb:ff:f8: 3e:11:39:85:d6:c0:ab:0d:6d:af:00:88:03:60:22: 22:42:c1:3a:3d:3e:0d:e2:41:b8:e8:1c:4e:e6:2f: d0:ed:50:58:21:10:ec:ed:9d:37:94:21:75:c7:e6: 04:2f:91:6e:78:18:0c:bd:6a:81:e2:60:92:78:a7: 9e:af:8f:00:5e:77:b6:65:cb:f5:3b:30:4c:d9:9b: 09:95:81:c3:8e:b4:93:1b:32:2d:12:86:8a:4d:03: 8a:a8:25:8c:f1:9c:e4:a0:e1:29:fd:a2:20:ce:74: 04:6d:04:9a:1d:bf:12:a8:84:d1:83:fd:55:f4:ae: 3c:89:46:49:19:98:21:c6:99:ee:61:2d:ba:2f:e9: c4:30:73:69:87:32:ab:42:73:0d:7e:dc:9d:9a:5e: 3e:5f:82:34:f0:6d:b0:0a:4a:40:e4:36:9b:82:60: b5:b6:b5:be:ac:7b:50:b2:2b:6d:8f:1b:ff:4c:9e: 9f:b7:d2:ee:66:6d:f2:9a:69:01:13:1f:7a:6a:b1: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:3C:9C:49:DF:09:52:86:A4:65:10:FB:D6:E8:F5:CA:DA:C4:AD X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:a8:33:13:fe:14:2f:3c:01:2d:7c:db:4a:36:8d:a7:fb:c2: 5f:1a:fe:c1:9f:3b:50:a5:54:02:43:cb:f7:11:54:86:05:01: 7c:ef:af:28:f2:5f:2a:e7:f8:53:2a:2e:43:6b:2d:c8:9a:72: 8d:1d:e3:f9:8f:4e:b9:fe:24:fc:2e:a4:e6:12:a0:71:cd:a7: 10:be:95:7c:e8:f5:cb:24:73:c8:66:8d:c3:d5:64:ec:18:f5: a9:55:c4:18:40:7e:0c:3b:44:19:5b:d8:51:5c:4c:2b:d2:e8: 4a:cc:a1:02:7a:68:f3:e9:3b:f1:65:4c:e2:e4:c4:cc:78:41: db:3a:a4:b4:dc:43:70:dd:b4:ab:8c:3b:88:e1:d3:02:a7:f3: f8:af:b6:d9:42:c9:97:97:09:48:d7:d3:7c:38:04:45:dd:dc: d6:84:03:6c:c4:a5:c4:3b:5e:84:a8:f0:a3:b0:3d:a0:55:61: 86:50:5d:8c:b3:97:96:75:f8:34:95:3a:9a:fd:e9:db:ba:dc: 87:75:e4:10:a8:fb:5c:35:23:32:f6:d0:12:34:8e:69:26:9a: 47:5b:99:ea:91:97:ab:b1:93:e2:4e:5c:9e:c7:00:94:38:a7: 14:3b:fb:d6:0c:9a:99:89:49:03:47:ce:10:4e:be:0f:9b:ae: c3:bb:b1:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjUxMjIyMTg0NjM0WhcNMjUxMjI5MTg0NjM0WjAYMRYwFAYD VQQDDA02OTQ5OTIwYS1kYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hCHBLm2gA7N9REMAXxQu9of4FAq45CykMA0k3MDYGKrQCkiiLlJXM0Im6kq 66qVF8p5Hi/X0TH7//g+ETmF1sCrDW2vAIgDYCIiQsE6PT4N4kG46BxO5i/Q7VBY IRDs7Z03lCF1x+YEL5FueBgMvWqB4mCSeKeer48AXne2Zcv1OzBM2ZsJlYHDjrST GzItEoaKTQOKqCWM8ZzkoOEp/aIgznQEbQSaHb8SqITRg/1V9K48iUZJGZghxpnu YS26L+nEMHNphzKrQnMNftydml4+X4I08G2wCkpA5DabgmC1trW+rHtQsittjxv/ TJ6ft9LuZm3ymmkBEx96arGVeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASlPJxJ 3wlShqRlEPvW6PXK2sStMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQqDMT/hQvPAEtfNtKNo2n+8JfGv7BnztQpVQCQ8v3EVSGBQF8768o 8l8q5/hTKi5Day3ImnKNHeP5j065/iT8LqTmEqBxzacQvpV86PXLJHPIZo3D1WTs GPWpVcQYQH4MO0QZW9hRXEwr0uhKzKECemjz6TvxZUzi5MTMeEHbOqS03ENw3bSr jDuI4dMCp/P4r7bZQsmXlwlI19N8OARF3dzWhANsxKXEO16EqPCjsD2gVWGGUF2M s5eWdfg0lTqa/enbutyHdeQQqPtcNSMy9tASNI5pJppHW5nqkZersZPiTlyexwCU OKcUO/vWDJqZiUkDR84QTr4Pm67Du7Gp -----END CERTIFICATE-----Generated at Tue Dec 23 19:19:52 2025 by rpki-client