This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json) Hash identifier: +d8SGlG6cUh9HKtiYVe0tz6XO0A9Rrn62O/MBQuI7PQ= Subject key identifier: DD:8C:4F:09:C8:53:60:6E:2C:44:72:A3:D8:D6:5A:71:27:07:59:32 Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft Manifest number: 063E Signing time: Mon 22 Dec 2025 21:52:37 +0000 Manifest this update: Mon 22 Dec 2025 21:52:36 +0000 Manifest next update: Mon 29 Dec 2025 21:52:36 +0000 Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: JC1NMvnbsTtNpCDm9Yb3qF6+fSXzFWJjlFq1OMZOiyg=) 2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: mRSjwQDsA2Ity8Ke/pKlCSea6N3rjwOrxrJxPkM3a1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Validity Not Before: Dec 22 21:52:36 2025 GMT Not After : Dec 29 21:52:36 2025 GMT Subject: CN=6949bda5-a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:dd:15:86:32:a1:d5:06:fa:66:87:17:da: 2e:57:f3:77:3d:46:b5:f7:1a:30:90:1f:0d:58:d7: 95:27:ea:7d:aa:a2:7a:99:28:da:84:c6:8f:e6:95: 99:12:44:8a:62:c4:55:2e:c4:e1:ca:7a:1b:48:c7: 87:f1:9c:eb:57:33:94:4c:a9:ed:16:5a:2d:4a:8e: 1c:5d:d8:64:56:b9:f4:aa:eb:ef:3e:4d:18:73:f6: 69:5a:2c:de:44:2d:9d:f5:b9:54:7b:f2:be:5f:f7: 3e:aa:00:37:66:79:72:52:be:c2:18:1a:a6:bd:2a: 08:f1:2f:56:f5:33:92:04:a2:5f:9a:6a:72:b4:b1: 1c:23:be:61:e0:70:64:04:99:93:1b:89:a8:18:42: e4:52:5f:da:60:33:91:b5:ca:49:61:e2:75:9c:8d: d4:50:d0:c1:55:28:d5:84:96:7a:87:9e:ed:36:e0: ff:ed:96:fd:d0:9e:22:ce:91:b0:31:09:80:10:06: 75:6c:65:89:70:71:49:d3:b9:5c:02:0c:92:84:d3: 38:6c:a5:ea:09:1a:c9:05:e0:01:97:92:77:90:63: 2f:33:fe:0a:dc:b5:0b:fa:92:4c:c4:30:bf:da:b5: 02:96:4a:b1:a3:8c:d3:4a:e9:dc:27:e2:2d:08:54: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8C:4F:09:C8:53:60:6E:2C:44:72:A3:D8:D6:5A:71:27:07:59:32 X509v3 Authority Key Identifier: keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:83:86:d8:82:2d:b8:0a:0d:b5:4a:8f:cd:4f:d7:2d:de:b4: fc:f9:7a:9d:be:88:c5:33:44:cc:26:dd:92:cc:48:97:bc:c7: 55:fc:34:b8:08:37:fd:ac:bf:68:fb:40:44:ac:d3:ef:93:77: 6d:7b:c6:40:90:80:79:6f:c1:7d:7a:c3:2a:00:01:d9:12:48: 0f:0f:3b:e1:4f:33:72:38:33:c6:63:86:42:11:1d:54:ef:0e: 04:c8:22:03:bf:e1:c3:e6:b8:68:a7:ab:93:72:81:19:07:ad: ca:71:25:9b:0b:2c:15:e7:4e:3e:0d:38:ec:31:84:65:52:4f: 0e:06:10:b5:be:31:17:55:4f:a4:fc:95:a4:33:0b:8d:36:e4: ee:ef:3c:e3:eb:2e:01:10:fe:56:a0:ab:74:d2:00:73:d5:fc: f2:af:39:70:59:48:00:5d:1c:83:03:b0:e4:fa:92:8f:ab:85: f8:3d:8e:1a:80:db:19:3f:18:80:a1:2f:de:33:80:6b:a4:43: 0a:92:c2:7b:fb:58:75:79:2e:d6:74:95:53:b2:aa:0b:57:a2: 79:7f:99:9d:99:ef:02:1a:3e:83:88:af:16:72:40:d9:f7:0e: 26:fc:79:61:c7:c7:5f:15:73:2d:46:76:06:a8:71:a4:27:2f: 8e:12:44:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5 Rjc1NjMzRkQwHhcNMjUxMjIyMjE1MjM2WhcNMjUxMjI5MjE1MjM2WjAYMRYwFAYD VQQDDA02OTQ5YmRhNS1hOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/PdFYYyodUG+maHF9ouV/N3PUa19xowkB8NWNeVJ+p9qqJ6mSjahMaP5pWZ EkSKYsRVLsThynobSMeH8ZzrVzOUTKntFlotSo4cXdhkVrn0quvvPk0Yc/ZpWize RC2d9blUe/K+X/c+qgA3ZnlyUr7CGBqmvSoI8S9W9TOSBKJfmmpytLEcI75h4HBk BJmTG4moGELkUl/aYDORtcpJYeJ1nI3UUNDBVSjVhJZ6h57tNuD/7Zb90J4izpGw MQmAEAZ1bGWJcHFJ07lcAgyShNM4bKXqCRrJBeABl5J3kGMvM/4K3LUL+pJMxDC/ 2rUClkqxo4zTSuncJ+ItCFTwLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2MTwnI U2BuLERyo9jWWnEnB1kyMB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5 REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD dXJzR2hid3VhdDJmZFdNXzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5g4bYgi24Cg21So/NT9ct3rT8+XqdvojFM0TMJt2SzEiXvMdV/DS4 CDf9rL9o+0BErNPvk3dte8ZAkIB5b8F9esMqAAHZEkgPDzvhTzNyODPGY4ZCER1U 7w4EyCIDv+HD5rhop6uTcoEZB63KcSWbCywV504+DTjsMYRlUk8OBhC1vjEXVU+k /JWkMwuNNuTu7zzj6y4BEP5WoKt00gBz1fzyrzlwWUgAXRyDA7Dk+pKPq4X4PY4a gNsZPxiAoS/eM4BrpEMKksJ7+1h1eS7WdJVTsqoLV6J5f5mdme8CGj6DiK8WckDZ 9w4m/Hlhx8dfFXMtRnYGqHGkJy+OEkQD -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:12 2025 by rpki-client