This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: qfQg2gpRhscC7hlFnCVqJF+l+gE4tEALW5PsvIYRoWY= Subject key identifier: A3:F1:FC:07:F9:DC:3B:2F:95:7C:C2:0B:30:32:B0:76:76:7A:17:84 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 153A Signing time: Fri 26 Dec 2025 16:34:07 +0000 Manifest this update: Fri 26 Dec 2025 16:34:07 +0000 Manifest next update: Fri 02 Jan 2026 16:34:07 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: noQYUNu9AUk7Fv6uYYavsP3KzxWGKH/QxUOUoNG2bvc=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: YK6Hmo3PllZtdE5hm6A8K6SCgV+te0dB3ba976/6MCY=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: 3SKd7JKNbo4VQv7IRdQ4lKTCd0NxnhIdEQAdsmvLftg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 16:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5510 (0x1586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Dec 26 16:34:07 2025 GMT Not After : Jan 2 16:34:07 2026 GMT Subject: CN=694eb8ff-8f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:d8:45:f4:06:1b:47:d7:ef:d9:ae:a7:2c: 22:96:7a:44:3b:b1:da:24:92:ba:cb:68:19:2c:39: f3:a0:b9:79:83:b0:2b:75:53:70:ac:1e:c8:9b:3e: 84:1a:69:81:61:b5:4d:aa:c6:6b:34:ae:e5:26:35: d2:55:7e:c2:bc:1e:13:74:21:fa:58:5b:c5:34:85: 74:6d:f5:aa:6e:c8:b4:19:a4:7b:ca:c0:47:77:e0: 01:50:ed:f0:b7:a8:80:60:15:78:8d:43:b2:a3:7f: 33:a6:d5:0b:63:55:0f:79:53:a9:c7:b4:9c:44:d8: 62:96:f6:61:03:87:b7:5a:36:43:3f:74:01:d5:46: 3e:45:1b:2d:e5:0d:76:2f:71:8f:74:6f:7c:e5:b3: 6f:f5:5d:76:ac:68:c5:e4:85:32:c4:0a:b9:eb:22: ee:31:3b:87:04:c0:b1:8a:b5:1c:9e:36:28:45:43: 25:84:95:03:0a:3c:07:96:d8:c4:87:85:1f:76:bd: 32:46:57:56:e3:93:95:57:ff:67:50:7c:de:59:55: 18:6a:55:f2:c3:12:16:f3:d0:5a:59:61:4d:3d:e6: 23:c5:34:29:d1:5a:6e:48:c6:2b:25:3c:28:82:8e: 6b:a1:4b:ed:51:4f:36:68:7e:9a:6a:9d:80:5f:57: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:FC:07:F9:DC:3B:2F:95:7C:C2:0B:30:32:B0:76:76:7A:17:84 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e2:08:7a:02:bc:3e:b4:22:36:a3:f9:85:67:6a:d6:cb:cc: bb:83:40:eb:c3:60:ec:42:67:21:b8:25:84:ab:16:3b:81:91: ac:04:3b:15:4c:8a:bd:60:64:9d:e5:31:1c:b4:91:b9:a1:43: d9:ee:bd:21:b7:63:e1:88:f8:cb:9f:7c:b7:16:14:30:ba:0d: 8b:b5:5e:f0:31:c4:d6:de:dd:4f:66:96:a3:3c:03:e3:9d:85: 41:24:82:c2:68:db:65:b8:7c:82:4a:39:28:44:a5:60:34:00: 96:7c:08:67:8d:6e:81:c3:ff:c5:3d:10:86:f8:11:98:64:f8: b1:5a:c5:98:3d:cc:04:93:b9:2d:3b:29:22:3c:7f:86:79:30: 35:30:ba:2c:1b:04:fc:04:15:e1:2d:f0:d0:cf:16:cb:02:54: c8:16:83:20:80:38:38:c3:c0:02:71:62:bc:ac:36:78:8d:9e: b7:78:ac:bd:0d:de:62:8a:e4:0c:97:9a:d8:4f:99:0c:25:62: cf:9d:9e:c2:29:17:96:59:b8:a8:07:3b:16:ee:dd:b9:53:09: 76:c9:3b:d6:ee:eb:2b:17:d5:aa:76:79:4b:86:17:32:d8:f1: b6:c5:3a:8e:97:2e:1d:0d:61:c1:f6:db:14:b9:1a:a3:90:6f: 88:68:76:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUxMjI2MTYzNDA3WhcNMjYwMTAyMTYzNDA3WjAYMRYwFAYD VQQDDA02OTRlYjhmZi04Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVLYRfQGG0fX79mupywilnpEO7HaJJK6y2gZLDnzoLl5g7ArdVNwrB7Imz6E GmmBYbVNqsZrNK7lJjXSVX7CvB4TdCH6WFvFNIV0bfWqbsi0GaR7ysBHd+ABUO3w t6iAYBV4jUOyo38zptULY1UPeVOpx7ScRNhilvZhA4e3WjZDP3QB1UY+RRst5Q12 L3GPdG985bNv9V12rGjF5IUyxAq56yLuMTuHBMCxirUcnjYoRUMlhJUDCjwHltjE h4Ufdr0yRldW45OVV/9nUHzeWVUYalXywxIW89BaWWFNPeYjxTQp0VpuSMYrJTwo go5roUvtUU82aH6aap2AX1fU1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPx/Af5 3DsvlXzCCzAysHZ2eheEMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw4gh6Arw+tCI2o/mFZ2rWy8y7g0Drw2DsQmchuCWEqxY7gZGsBDsV TIq9YGSd5TEctJG5oUPZ7r0ht2PhiPjLn3y3FhQwug2LtV7wMcTW3t1PZpajPAPj nYVBJILCaNtluHyCSjkoRKVgNACWfAhnjW6Bw//FPRCG+BGYZPixWsWYPcwEk7kt OykiPH+GeTA1MLosGwT8BBXhLfDQzxbLAlTIFoMggDg4w8ACcWK8rDZ4jZ63eKy9 Dd5iiuQMl5rYT5kMJWLPnZ7CKReWWbioBzsW7t25Uwl2yTvW7usrF9WqdnlLhhcy 2PG2xTqOly4dDWHB9tsUuRqjkG+IaHYv -----END CERTIFICATE-----Generated at Sat Dec 27 19:24:45 2025 by rpki-client