This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: N5mhg2X/xVIoWCCU+tHU2PLSnbo2X/8L3FEGn4kF3z4= Subject key identifier: 79:69:7F:5B:AC:14:A6:1B:FF:48:C6:34:6D:25:78:A0:FE:20:D0:5A Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0CAD Signing time: Wed 24 Dec 2025 17:58:45 +0000 Manifest this update: Wed 24 Dec 2025 17:58:45 +0000 Manifest next update: Wed 31 Dec 2025 17:58:45 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: YUBnFqocDDjrG384aqcdMTibLM5MdwXhXtv+NIoQwuk=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: Tom7u2KILmaBR19TjEIpuUPoq7F9nKzmH+Ll43MgfGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Dec 24 17:58:45 2025 GMT Not After : Dec 31 17:58:45 2025 GMT Subject: CN=694c29d5-5950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:5b:1e:01:66:57:f8:33:d1:d1:0e:6b:44: 0e:17:05:02:cb:2c:07:e6:24:05:58:a4:a9:ec:36: 34:7b:05:fd:0d:a1:d0:c6:07:d3:a5:93:0c:b1:f3: c3:29:12:62:11:7c:ae:36:a3:fb:7b:48:53:90:f6: 24:a8:1f:70:7c:e8:64:0d:15:40:46:4a:80:62:78: d5:86:7e:64:3c:c9:b9:c3:f4:59:67:2a:4e:ae:94: a7:62:2b:00:06:78:c1:47:dd:93:f0:86:36:97:a2: 5f:b6:59:ec:85:af:c3:51:41:b7:65:c2:6e:9d:06: 87:8e:b5:d2:c1:e5:8e:4a:ab:05:cb:f9:83:cd:ba: 8b:1b:5c:b0:6c:bd:08:7f:56:1c:1f:9a:b2:17:1e: 2c:15:2c:71:7b:ac:0f:8a:a2:76:4f:2a:4c:dc:dd: 91:50:85:d5:6d:2b:a9:08:b2:49:92:6f:e0:1d:a4: ec:58:87:58:7b:9b:99:b6:5a:4a:17:e4:b7:fa:d2: 05:ac:ab:26:ce:9f:dd:de:39:de:2e:7c:5b:3a:28: 33:05:65:d9:34:ac:d1:6e:0a:48:70:68:ca:f8:ce: 3b:da:46:f6:b5:36:18:1c:31:de:bd:9f:0c:91:2f: 44:7c:d3:e7:7c:13:de:18:ea:2b:c5:61:10:76:67: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:69:7F:5B:AC:14:A6:1B:FF:48:C6:34:6D:25:78:A0:FE:20:D0:5A X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c6:a3:3f:31:bc:64:47:c2:6b:48:64:47:33:44:de:ff:c3: 41:f9:5b:1d:2b:dc:3b:94:c9:c6:17:89:c0:4f:99:c1:c3:41: 7d:4a:8d:28:5e:d9:1e:e8:c6:bc:ed:fb:4b:57:5d:e1:c6:0e: 73:50:05:70:c4:a2:59:31:d3:23:5e:c8:22:86:9d:5b:b8:b3: e6:28:fb:13:4c:cb:e1:af:f6:04:f3:06:2c:6c:b8:ef:1a:d5: aa:f1:e6:0c:85:13:34:3c:9d:30:02:14:57:a4:26:5e:12:fb: 14:8d:e5:7b:cc:9e:8b:e3:cb:a9:bc:0f:ec:5c:f2:62:b3:d0: 57:a9:6f:21:61:38:33:f1:dc:32:8c:16:9b:21:f6:d5:16:ce: 82:ba:13:df:d1:86:19:70:05:f1:31:b1:56:c0:a2:f4:03:52: 75:67:58:4a:9c:9b:ca:7a:ab:45:f9:a7:b4:5c:d6:c2:1c:c6: e9:f7:d5:15:87:dd:1d:0d:8d:a2:d0:95:6c:f4:4e:9c:a8:63: 9f:cc:0b:dc:47:ae:bd:29:f7:1c:ac:2a:1d:ef:87:9b:d1:56: 61:99:51:11:39:3b:8e:57:50:34:c9:76:0f:6a:af:88:cd:1c: 05:b4:fd:79:9f:aa:b2:af:6c:c9:a0:40:54:cc:35:16:5c:bf: e8:15:67:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUxMjI0MTc1ODQ1WhcNMjUxMjMxMTc1ODQ1WjAYMRYwFAYD VQQDDA02OTRjMjlkNS01OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy59bHgFmV/gz0dEOa0QOFwUCyywH5iQFWKSp7DY0ewX9DaHQxgfTpZMMsfPD KRJiEXyuNqP7e0hTkPYkqB9wfOhkDRVARkqAYnjVhn5kPMm5w/RZZypOrpSnYisA BnjBR92T8IY2l6Jftlnsha/DUUG3ZcJunQaHjrXSweWOSqsFy/mDzbqLG1ywbL0I f1YcH5qyFx4sFSxxe6wPiqJ2TypM3N2RUIXVbSupCLJJkm/gHaTsWIdYe5uZtlpK F+S3+tIFrKsmzp/d3jneLnxbOigzBWXZNKzRbgpIcGjK+M472kb2tTYYHDHevZ8M kS9EfNPnfBPeGOorxWEQdmc40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlpf1us FKYb/0jGNG0leKD+INBaMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVxqM/MbxkR8JrSGRHM0Te/8NB+VsdK9w7lMnGF4nAT5nBw0F9So0o Xtke6Ma87ftLV13hxg5zUAVwxKJZMdMjXsgihp1buLPmKPsTTMvhr/YE8wYsbLjv GtWq8eYMhRM0PJ0wAhRXpCZeEvsUjeV7zJ6L48upvA/sXPJis9BXqW8hYTgz8dwy jBabIfbVFs6CuhPf0YYZcAXxMbFWwKL0A1J1Z1hKnJvKeqtF+ae0XNbCHMbp99UV h90dDY2i0JVs9E6cqGOfzAvcR669KfccrCod74eb0VZhmVEROTuOV1A0yXYPaq+I zRwFtP15n6qyr2zJoEBUzDUWXL/oFWeD -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:23 2025 by rpki-client