This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: YeFROnab4u30WVuGxwn2zhE2R/j5R1AghW3+H2l9CnE= Subject key identifier: 7D:3D:E5:4F:D9:F8:79:6E:E5:02:CE:38:BA:44:3C:84:BB:6A:9D:4C Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 0841 Signing time: Sat 20 Dec 2025 20:09:37 +0000 Manifest this update: Sat 20 Dec 2025 20:09:37 +0000 Manifest next update: Sat 27 Dec 2025 20:09:37 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: 0Z6K4J97nj1gjaGFoe7cy7KRc+JyiHitUNs5BDsW124=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: K1UuNBw5WFh1vrFCgINXdCeXsqQDIqc2wdlXDmKdmEY=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: PQWGngD3aYy1WNrpxXg2QYd1WAV8RW9TqsL6xqvwEK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Dec 20 20:09:37 2025 GMT Not After : Dec 27 20:09:37 2025 GMT Subject: CN=69470281-463b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:3d:7f:bb:29:1d:f5:58:e8:c4:c7:4b:b6: b4:6f:45:70:95:09:61:f9:9d:89:ff:bb:86:9b:7f: 8f:ef:e9:15:05:44:9d:41:8f:8c:80:46:d7:82:e5: 35:ab:5c:eb:7e:90:3d:b6:15:ad:93:a2:05:80:7f: 0d:02:49:c2:e5:0c:e0:dc:50:a4:57:8c:78:39:68: 5e:8e:ef:67:ad:89:1f:55:d1:5d:39:36:ce:60:60: 31:bb:23:fe:df:1a:02:9f:ef:31:d7:f0:65:4e:29: dd:ef:0e:3e:f7:3f:c7:11:50:90:19:11:eb:d2:7c: 97:51:6f:af:c0:82:1c:30:cf:18:80:01:2d:6b:d6: 9a:1d:a0:bc:2e:ac:3d:26:9a:f8:4f:23:6e:b6:03: 75:2e:68:8d:e4:a0:11:9b:b4:71:a2:d4:1a:18:36: ea:c5:1d:cf:8a:95:3a:1e:4c:80:4e:0c:ba:32:cd: 0d:46:88:71:4b:2c:18:58:17:e7:48:3b:4a:bd:32: d1:85:35:b9:c0:83:5b:3d:61:5e:fd:04:70:62:8f: f0:12:c8:38:b1:fb:e6:73:2a:90:e0:45:eb:ed:2e: d8:14:b9:0f:ef:9c:ca:18:08:b0:93:39:a1:3e:08: b2:56:82:67:06:6a:b6:72:bf:9e:29:6d:ee:06:c8: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3D:E5:4F:D9:F8:79:6E:E5:02:CE:38:BA:44:3C:84:BB:6A:9D:4C X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9d:50:a8:5d:08:82:30:5b:a9:74:5c:b7:c6:7d:ec:b4:02: 94:aa:56:0c:35:0e:89:73:86:24:ab:5a:ef:e6:d9:b3:17:a8: 7a:b3:8d:90:e7:bc:d6:b1:bc:f8:89:d4:f5:9f:09:d5:c7:96: 41:44:bd:05:4e:14:d4:db:74:94:a2:b3:44:48:bf:b0:24:5a: c2:e5:1e:8b:15:31:51:e9:e6:cc:89:e9:46:89:63:21:de:ce: 1d:7b:02:22:97:5c:9e:72:7b:70:2c:2d:7a:85:07:15:d7:b1: 22:27:d6:f0:17:6c:a6:16:c4:5b:5f:b8:8d:51:3e:27:8a:cb: 06:dc:32:a4:33:3c:1f:b4:30:60:64:93:50:8b:e4:ed:bf:8c: b8:ba:0d:4e:f3:7d:17:16:dd:58:a3:58:16:54:1a:15:d8:e3: ef:26:2f:d5:5d:f4:bb:41:14:df:48:b2:61:56:28:35:90:43: ec:72:1b:a0:95:08:77:40:73:b7:2b:ab:60:cc:67:df:aa:c0: 2f:74:20:f5:6c:18:d8:61:dc:8b:0d:89:9f:a3:31:c4:26:f8: a6:33:e8:84:a8:7e:aa:33:7e:8c:f4:1d:06:e2:af:92:c8:ef: ae:42:4a:c7:85:a1:50:4e:e6:ca:fb:3e:33:77:0c:ae:e0:7c: 6a:93:6d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUxMjIwMjAwOTM3WhcNMjUxMjI3MjAwOTM3WjAYMRYwFAYD VQQDDA02OTQ3MDI4MS00NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwg9f7spHfVY6MTHS7a0b0VwlQlh+Z2J/7uGm3+P7+kVBUSdQY+MgEbXguU1 q1zrfpA9thWtk6IFgH8NAknC5Qzg3FCkV4x4OWheju9nrYkfVdFdOTbOYGAxuyP+ 3xoCn+8x1/BlTind7w4+9z/HEVCQGRHr0nyXUW+vwIIcMM8YgAEta9aaHaC8Lqw9 Jpr4TyNutgN1LmiN5KARm7RxotQaGDbqxR3PipU6HkyATgy6Ms0NRohxSywYWBfn SDtKvTLRhTW5wINbPWFe/QRwYo/wEsg4sfvmcyqQ4EXr7S7YFLkP75zKGAiwkzmh PgiyVoJnBmq2cr+eKW3uBsjkwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH095U/Z +Hlu5QLOOLpEPIS7ap1MMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBanVCoXQiCMFupdFy3xn3stAKUqlYMNQ6Jc4Ykq1rv5tmzF6h6s42Q 57zWsbz4idT1nwnVx5ZBRL0FThTU23SUorNESL+wJFrC5R6LFTFR6ebMielGiWMh 3s4dewIil1yecntwLC16hQcV17EiJ9bwF2ymFsRbX7iNUT4nissG3DKkMzwftDBg ZJNQi+Ttv4y4ug1O830XFt1Yo1gWVBoV2OPvJi/VXfS7QRTfSLJhVig1kEPschug lQh3QHO3K6tgzGffqsAvdCD1bBjYYdyLDYmfozHEJvimM+iEqH6qM36M9B0G4q+S yO+uQkrHhaFQTubK+z4zdwyu4Hxqk20F -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:08 2025 by rpki-client