This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: vDfN2FdfE8/EDOupPWYr+y0YWtCnvcJ4MvUOtj6NU+Q= Subject key identifier: FB:F0:63:7F:D1:80:3A:78:9D:47:C4:38:0F:35:2A:DA:02:69:FD:8D Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 031C Signing time: Mon 29 Dec 2025 00:10:31 +0000 Manifest this update: Mon 29 Dec 2025 00:10:30 +0000 Manifest next update: Mon 05 Jan 2026 00:10:30 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: BpW6i1HoQbwc4CzVZPT+lyw2A3hMwO2a08VsLNvjOss=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: GSaMIr6pgI7dtk3phmzJ+sITrRTfHVwUtDPjWfHSWD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 00:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: Dec 29 00:10:30 2025 GMT Not After : Jan 5 00:10:30 2026 GMT Subject: CN=6951c6f6-c9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:51:d8:62:05:48:32:2d:88:53:22:5a:28: d4:45:9f:df:45:4d:2c:2e:d9:74:d4:50:f2:bf:f8: e9:c6:12:0b:e4:e2:34:d2:6d:a9:7c:6d:59:ef:a1: 59:7d:4d:97:fa:5b:55:bd:b2:15:81:84:f7:ab:c7: 9e:6b:2b:3a:a5:ac:f2:e5:9a:a3:f5:63:f4:61:00: ad:0c:01:ef:23:8f:bc:7e:bc:ef:b3:cd:e1:1f:4f: 3c:e6:55:c8:03:16:4d:59:fa:ab:33:ac:53:dc:b4: 6c:87:56:dc:fd:38:d8:cd:96:2a:44:96:a0:fc:60: e3:17:98:c8:f2:52:8e:4d:d4:08:d8:6f:67:1c:8d: d8:79:92:d2:ac:06:13:69:25:e7:db:ad:0b:31:b3: 8a:5f:1a:a5:0e:b1:4a:ba:c3:ec:9a:67:91:33:9b: 16:63:4a:79:62:43:4e:43:94:c1:03:bf:4f:a7:51: 4c:19:f5:f5:ab:ab:dd:98:cb:4a:43:84:df:85:27: c1:e1:f7:ce:07:73:96:4c:3f:6c:16:bd:69:43:10: 5e:94:1f:8f:f3:3e:c6:e1:9f:ba:0c:99:64:8f:41: e5:d7:24:91:ef:9f:b1:1a:6f:62:46:91:e6:d2:04: cd:f3:ab:16:60:3e:56:93:ee:1d:e9:bc:ef:b0:6a: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F0:63:7F:D1:80:3A:78:9D:47:C4:38:0F:35:2A:DA:02:69:FD:8D X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3a:22:53:37:f5:85:dd:3d:47:16:17:d2:11:b4:0c:2c:60: 83:ff:28:fd:c8:27:e4:01:30:12:6d:e1:f2:30:eb:1a:b0:85: 42:d1:e5:f1:a3:de:59:84:bf:f2:7c:67:72:d6:54:78:4b:2b: 78:f5:80:3e:0d:3d:e2:28:58:8c:a0:65:b8:eb:40:16:02:ed: 71:eb:c3:08:35:b6:87:e4:25:33:fe:12:a6:d5:02:84:e0:8d: a5:53:eb:3d:62:08:5a:46:b0:dd:96:8e:ab:f4:5e:7a:87:ce: e3:18:71:31:73:71:73:3d:9b:59:4b:42:c3:85:3c:9b:77:0e: 7d:b1:bc:1d:60:1c:58:f9:7d:f5:a0:92:1e:e4:24:fe:81:d3: 77:44:10:1e:13:ed:aa:92:25:43:e5:6a:51:aa:fb:c5:bc:46: 83:75:26:c4:95:28:3a:59:ef:da:79:d3:75:f4:61:5f:b2:19: 2e:96:c6:87:9b:39:13:f0:a3:15:e2:98:f6:ec:43:54:c8:5d: c3:68:65:1b:a7:b7:5a:3e:07:26:6b:d3:24:7b:fd:8b:84:0e: 9a:80:c7:f4:7a:51:c1:9b:5e:6b:db:cb:9e:60:33:82:43:cc: ce:ea:5b:16:e6:2c:be:a2:85:30:d1:11:f1:b6:5a:57:ff:f4: 97:c1:e4:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjUxMjI5MDAxMDMwWhcNMjYwMTA1MDAxMDMwWjAYMRYwFAYD VQQDDA02OTUxYzZmNi1jOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ1R2GIFSDItiFMiWijURZ/fRU0sLtl01FDyv/jpxhIL5OI00m2pfG1Z76FZ fU2X+ltVvbIVgYT3q8eeays6pazy5Zqj9WP0YQCtDAHvI4+8frzvs83hH0885lXI AxZNWfqrM6xT3LRsh1bc/TjYzZYqRJag/GDjF5jI8lKOTdQI2G9nHI3YeZLSrAYT aSXn260LMbOKXxqlDrFKusPsmmeRM5sWY0p5YkNOQ5TBA79Pp1FMGfX1q6vdmMtK Q4TfhSfB4ffOB3OWTD9sFr1pQxBelB+P8z7G4Z+6DJlkj0Hl1ySR75+xGm9iRpHm 0gTN86sWYD5Wk+4d6bzvsGo8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvwY3/R gDp4nUfEOA81KtoCaf2NMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9OiJTN/WF3T1HFhfSEbQMLGCD/yj9yCfkATASbeHyMOsasIVC0eXx o95ZhL/yfGdy1lR4Syt49YA+DT3iKFiMoGW460AWAu1x68MINbaH5CUz/hKm1QKE 4I2lU+s9YghaRrDdlo6r9F56h87jGHExc3FzPZtZS0LDhTybdw59sbwdYBxY+X31 oJIe5CT+gdN3RBAeE+2qkiVD5WpRqvvFvEaDdSbElSg6We/aedN19GFfshkulsaH mzkT8KMV4pj27ENUyF3DaGUbp7daPgcma9Mke/2LhA6agMf0elHBm15r28ueYDOC Q8zO6lsW5iy+ooUw0RHxtlpX//SXweTV -----END CERTIFICATE-----Generated at Mon Dec 29 02:24:32 2025 by rpki-client