This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: 6zckFf29Gd9xy7xjTf53pI0UT2z1vXqF3eSaBltopJ8= Subject key identifier: F0:0D:7C:BE:E9:B5:23:4D:05:51:A8:FF:BC:43:AF:A6:BA:C9:E7:27 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 03EF Signing time: Sat 20 Dec 2025 23:47:36 +0000 Manifest this update: Sat 20 Dec 2025 23:47:35 +0000 Manifest next update: Sat 27 Dec 2025 23:47:35 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: FVKTAM2EDLroYOI6J+hwXWJpoX7Sqxj5rzOtZp2zUrI=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) 4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Dec 20 23:47:35 2025 GMT Not After : Dec 27 23:47:35 2025 GMT Subject: CN=69473597-292f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:c8:46:ae:96:39:85:85:80:3f:0d:45:4f: bc:53:4d:a8:29:3a:99:b0:99:9b:ce:23:54:14:a2: c7:88:4a:75:e3:d7:df:16:d3:ff:07:eb:4b:11:f5: a2:83:5a:8d:21:ee:91:f0:2b:90:9a:94:fc:4c:4c: c2:70:ad:f9:b7:eb:ed:b4:61:24:61:04:d4:3f:72: 2e:7b:cc:29:bf:f8:df:4e:08:7a:64:27:a5:9f:c7: c8:a5:e6:f1:76:57:8d:dc:70:40:c4:0a:f6:25:f2: 4c:92:ae:46:d6:45:5a:79:95:43:af:74:ec:fb:b6: 42:d5:16:24:f7:38:f2:54:f9:9b:2a:4d:e0:af:d9: 1b:e4:d2:bb:01:5f:7f:4d:0e:b8:16:a3:04:fd:78: 15:71:f2:6a:8a:31:24:02:27:be:18:47:5a:f9:fc: 38:3b:4f:01:60:34:0e:43:aa:24:86:c8:fc:63:63: d8:2c:54:37:95:6a:17:a2:79:af:86:62:fa:8d:59: 5c:8b:44:e0:ea:76:9d:04:05:5d:05:68:69:a7:9f: da:f4:bf:23:0d:ac:99:b2:8f:e1:e4:25:cf:e8:05: 67:69:98:b7:d5:9c:23:d7:d7:d6:71:6a:f4:33:91: db:c1:1b:3a:20:95:ad:16:db:7c:bb:7a:da:92:a0: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0D:7C:BE:E9:B5:23:4D:05:51:A8:FF:BC:43:AF:A6:BA:C9:E7:27 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:67:f1:d7:dd:bf:7b:4e:82:77:be:8d:b7:d7:db:19:1f:68: 27:08:24:93:9d:e3:98:9a:fb:ed:bd:43:4c:c2:8f:67:71:9a: 26:57:1f:5d:69:4b:83:9d:0d:c4:e2:30:f2:ac:88:58:92:db: 22:a5:b1:8e:30:fd:54:0b:4b:ea:e2:87:80:b3:6e:6a:e3:26: c8:dd:1a:d8:1f:b5:e0:0b:9c:ac:4e:59:34:20:1d:cd:9a:88: 2e:95:07:56:ac:5e:e0:0d:8c:cc:ea:b9:ec:91:76:16:9b:d0: 8e:4e:99:97:f9:ba:94:e4:10:a5:78:e1:f1:97:d7:f0:a7:d6: f5:ae:44:ac:5a:fa:17:fe:1b:e6:43:f2:c5:49:43:54:67:94: 89:be:d6:c7:43:ac:94:ed:29:40:34:16:91:be:a9:8b:97:a3: a0:07:ef:ce:fe:c0:1b:02:db:37:dc:d8:cf:da:95:d1:a8:f5: 6c:7b:58:92:53:62:ec:e9:2a:de:3e:1f:bb:01:9b:c5:9d:f8: 7f:15:6d:7e:f9:75:72:28:f1:62:fe:45:e8:52:bf:46:f5:84: aa:20:80:6c:2e:dc:b7:5a:9a:11:f5:ab:33:7b:43:fb:d3:a0: 15:c9:3c:b1:c7:04:e0:d9:f1:91:ce:f3:66:d9:c4:7c:0c:c2: c9:96:7a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUxMjIwMjM0NzM1WhcNMjUxMjI3MjM0NzM1WjAYMRYwFAYD VQQDDA02OTQ3MzU5Ny0yOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+PIRq6WOYWFgD8NRU+8U02oKTqZsJmbziNUFKLHiEp149ffFtP/B+tLEfWi g1qNIe6R8CuQmpT8TEzCcK35t+vttGEkYQTUP3Iue8wpv/jfTgh6ZCeln8fIpebx dleN3HBAxAr2JfJMkq5G1kVaeZVDr3Ts+7ZC1RYk9zjyVPmbKk3gr9kb5NK7AV9/ TQ64FqME/XgVcfJqijEkAie+GEda+fw4O08BYDQOQ6okhsj8Y2PYLFQ3lWoXonmv hmL6jVlci0Tg6nadBAVdBWhpp5/a9L8jDayZso/h5CXP6AVnaZi31Zwj19fWcWr0 M5HbwRs6IJWtFtt8u3rakqDT5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPANfL7p tSNNBVGo/7xDr6a6yecnMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZZ/HX3b97ToJ3vo2319sZH2gnCCSTneOYmvvtvUNMwo9ncZomVx9d aUuDnQ3E4jDyrIhYktsipbGOMP1UC0vq4oeAs25q4ybI3RrYH7XgC5ysTlk0IB3N mogulQdWrF7gDYzM6rnskXYWm9COTpmX+bqU5BCleOHxl9fwp9b1rkSsWvoX/hvm Q/LFSUNUZ5SJvtbHQ6yU7SlANBaRvqmLl6OgB+/O/sAbAts33NjP2pXRqPVse1iS U2Ls6SrePh+7AZvFnfh/FW1++XVyKPFi/kXoUr9G9YSqIIBsLty3WpoR9asze0P7 06AVyTyxxwTg2fGRzvNm2cR8DMLJlnqV -----END CERTIFICATE-----Generated at Sun Dec 21 14:13:36 2025 by rpki-client