This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft File: M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json) Hash identifier: TEidO3SOyUqR5Gqeinq3Su9jNlw3HJgV+475llDXiBM= Subject key identifier: 8B:E5:D5:87:91:A7:CF:FB:0A:C6:7B:40:15:2F:E3:A2:33:81:D6:70 Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF Certificate issuer: /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft Manifest number: 0A Signing time: Fri 19 Dec 2025 07:01:27 +0000 Manifest this update: Fri 19 Dec 2025 07:01:26 +0000 Manifest next update: Fri 26 Dec 2025 07:01:26 +0000 Files and hashes: 1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: CCqRfCll22iz8Td4GN5BJzXr2PBmHzlvnxhpPnrS3nk=) 2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: EW+O3zJm/8aHMvBW+P638EmgJKPpDH/piV2PO/BW6z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF Validity Not Before: Dec 19 07:01:26 2025 GMT Not After : Dec 26 07:01:26 2025 GMT Subject: CN=6944f846-aa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:ce:db:2b:46:8e:a7:29:07:49:ac:a0:9b: 44:d5:e9:6f:25:4a:08:f4:6b:c6:3a:08:7b:a4:e0: 60:c7:1e:95:b5:ec:67:91:d0:51:39:46:e1:60:ae: 87:19:6c:cd:51:1c:ea:16:2a:b5:3b:78:69:13:02: 29:b5:6f:81:1c:8d:bb:3a:e3:a0:4b:64:58:19:f6: 9d:ee:0c:82:f2:0b:bf:fe:84:b1:18:ba:d3:d1:69: 66:0b:08:8b:0a:ac:59:be:c8:3f:e1:19:47:43:60: 62:39:01:0a:08:12:9e:32:ec:d7:10:8a:7e:c9:36: c8:ce:1a:35:2f:f4:53:c0:c5:d4:90:a7:5c:92:63: 30:9c:45:79:6f:a3:8e:0b:a5:34:48:53:9a:d5:a2: c6:d6:5b:d5:e5:a4:b7:e0:64:bb:de:7e:93:29:3c: 0b:12:92:9b:5e:7f:91:58:d8:c5:b8:5b:6c:4c:5b: 09:2f:f2:84:36:ba:da:fa:d0:16:52:c0:e2:23:da: 50:11:80:b6:56:b4:c4:de:f2:54:1f:d3:a1:af:70: 75:8a:2e:e7:d1:55:f4:cc:b8:3d:cf:af:23:98:51: 3e:8a:b1:c8:9d:8c:27:3c:fa:e7:5f:c6:c4:fc:86: 79:7d:65:72:55:28:92:e0:18:9e:6e:21:ba:94:7f: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E5:D5:87:91:A7:CF:FB:0A:C6:7B:40:15:2F:E3:A2:33:81:D6:70 X509v3 Authority Key Identifier: keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ce:e3:f8:c7:e5:cc:06:1b:56:a4:66:ef:31:73:1a:4f:8e: 92:9e:f8:37:04:4d:9b:34:ea:3c:7b:97:30:86:b1:1a:ff:fc: c3:d7:82:09:74:6c:9a:ed:f2:07:4c:95:c5:34:93:bd:b3:d2: 7e:1b:56:77:1a:ce:7e:ac:53:ad:f9:be:86:58:8d:63:4a:50: c9:75:26:e8:b5:43:75:19:d4:db:2c:b2:09:fd:ab:db:25:9b: 05:27:44:b4:38:de:c8:8a:ab:ee:c9:f5:3e:8c:21:a5:e6:5f: 89:54:2d:63:40:11:3e:19:a0:f2:64:0f:8b:64:7a:f3:d7:eb: 14:d2:0a:67:6d:e7:ac:aa:37:64:f0:4e:0f:b8:06:93:0f:c8: 75:67:17:f2:cd:48:b6:05:ed:cc:a1:e7:20:4a:4a:f9:2c:1c: 34:1c:f2:2d:d6:64:1d:04:a5:27:69:60:bc:f2:c6:39:36:42: 41:cc:8a:2c:61:8f:c3:63:07:e9:42:dc:3c:f5:4d:bc:65:1c: 81:55:cd:28:b2:aa:e1:62:f1:de:f7:b4:8f:5d:a3:0d:24:10: c2:ae:e2:d1:25:57:e1:f3:ab:6b:4f:14:77:e7:f0:67:76:24: cc:be:49:1c:15:93:bf:e1:a8:4f:98:fa:37:01:96:3b:e4:d6: 1d:f3:ee:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFFRTExMC8GA1UEBRMoMzNGQkQwOUZDQkIwMzJDQjY0MzdDRkJBQTYwRjVDMUZB QzU1QTFCRjAeFw0yNTEyMTkwNzAxMjZaFw0yNTEyMjYwNzAxMjZaMBgxFjAUBgNV BAMMDTY5NDRmODQ2LWFhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJvs7bK0aOpykHSaygm0TV6W8lSgj0a8Y6CHuk4GDHHpW17GeR0FE5RuFgrocZ bM1RHOoWKrU7eGkTAim1b4Ecjbs646BLZFgZ9p3uDILyC7/+hLEYutPRaWYLCIsK rFm+yD/hGUdDYGI5AQoIEp4y7NcQin7JNsjOGjUv9FPAxdSQp1ySYzCcRXlvo44L pTRIU5rVosbWW9XlpLfgZLvefpMpPAsSkptef5FY2MW4W2xMWwkv8oQ2utr60BZS wOIj2lARgLZWtMTe8lQf06GvcHWKLufRVfTMuD3PryOYUT6KscidjCc8+udfxsT8 hnl9ZXJVKJLgGJ5uIbqUf3dTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi+XVh5Gn z/sKxntAFS/jojOB1nAwHwYDVR0jBBgwFoAUM/vQn8uwMstkN8+6pg9cH6xVob8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUVFL0NDQjg1MTQyRDc0 RjExRjA4Q0RGMTRCQzZERDM2NDFEL01fdlFuOHV3TXN0a044LTZwZzljSDZ4Vm9i OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTV92UW44dXdNc3RrTjgtNnBnOWNINnhWb2I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUVFL0NDQjg1MTQyRDc0RjExRjA4Q0RGMTRCQzZERDM2NDFEL01fdlFuOHV3TXN0 a044LTZwZzljSDZ4Vm9iOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMjO4/jH5cwGG1akZu8xcxpPjpKe+DcETZs06jx7lzCGsRr//MPXggl0 bJrt8gdMlcU0k72z0n4bVncazn6sU635voZYjWNKUMl1Jui1Q3UZ1Nsssgn9q9sl mwUnRLQ43siKq+7J9T6MIaXmX4lULWNAET4ZoPJkD4tkevPX6xTSCmdt56yqN2Tw Tg+4BpMPyHVnF/LNSLYF7cyh5yBKSvksHDQc8i3WZB0EpSdpYLzyxjk2QkHMiixh j8NjB+lC3Dz1TbxlHIFVzSiyquFi8d73tI9dow0kEMKu4tElV+Hzq2tPFHfn8Gd2 JMy+SRwVk7/hqE+Y+jcBljvk1h3z7q8= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:53 2025 by rpki-client