This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json) Hash identifier: q12sgXHs1PibekSDthhYR+XqLApotYGcAPz1nR0+VkI= Subject key identifier: EC:1F:BB:37:8F:D0:15:8A:6E:D5:0E:2E:09:06:0F:A8:64:EF:BE:A8 Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft Manifest number: 011A Signing time: Sun 21 Dec 2025 03:58:06 +0000 Manifest this update: Sun 21 Dec 2025 03:58:06 +0000 Manifest next update: Sun 28 Dec 2025 03:58:06 +0000 Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: s5sqPQG2Uyv09JYmXzKoaG04g+ddJ80gIp/xo1tB/oA=) 2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: PfGn53JSYWSbw4kJ9ksJRxs8eswRllufrLhU7+JEImU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Validity Not Before: Dec 21 03:58:06 2025 GMT Not After : Dec 28 03:58:06 2025 GMT Subject: CN=6947704e-1a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:c6:17:fa:14:0e:dd:3e:09:e6:90:5b:af: ed:c8:19:be:e3:d4:e9:69:49:7e:b8:89:3c:30:09: b6:13:df:b4:fb:3c:1d:de:51:d6:3a:9c:79:60:24: 18:95:74:65:a1:b5:6b:47:b7:4a:59:7d:84:b7:11: 91:86:67:be:c2:9e:27:f2:a4:62:64:52:8e:0a:23: 71:11:41:cc:b8:0c:87:cd:c2:0b:10:e2:7e:9d:3b: 48:d5:9a:41:d3:8f:fc:c2:cb:64:57:de:45:53:a8: 73:77:04:47:48:6a:b5:eb:c2:d3:f5:d5:d3:c4:a6: 4d:a3:ae:f7:e7:44:5a:10:b8:9d:7c:67:7c:40:03: 9a:70:e3:af:e0:3f:7f:f8:60:4c:cb:6a:8d:48:90: 66:2b:ac:36:9a:06:c7:e4:be:9c:ca:fe:d2:21:a2: a6:81:0f:0f:59:00:1a:a2:94:ca:7f:4e:34:94:93: 74:a0:30:fd:c1:78:c9:4a:7a:56:c5:45:14:4c:df: 2b:92:bc:9a:dc:69:ae:0d:18:b7:b4:c9:aa:84:60: 9e:ce:1f:db:ad:1e:73:bb:e8:81:84:9f:00:65:27: 41:8f:4e:6d:3f:17:3b:c4:52:c5:27:33:fd:21:64: c5:24:d1:ae:a4:b6:b9:33:38:9f:35:10:80:f1:1c: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1F:BB:37:8F:D0:15:8A:6E:D5:0E:2E:09:06:0F:A8:64:EF:BE:A8 X509v3 Authority Key Identifier: keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:4a:36:86:5c:cd:cd:b3:79:65:5c:c3:99:14:e8:48:ac:1a: 47:77:0f:0e:b4:fd:d7:35:a2:80:33:db:c1:2b:07:55:b3:a9: 37:8f:4d:53:f2:e2:26:12:93:0f:33:56:cd:4c:36:c5:2c:ea: 03:3f:16:59:82:a3:a7:72:36:46:0a:97:c8:1f:89:97:b6:55: 99:d2:db:df:7c:0a:36:52:bf:25:a0:a7:68:93:93:1a:56:cd: 7e:e5:77:b5:c9:74:b6:64:64:39:66:b4:14:85:02:ad:9e:f2: ad:0c:b8:36:d5:92:75:46:ca:14:59:e0:cb:3d:2f:f7:78:ac: 30:7b:91:88:71:55:09:41:de:b7:32:a0:c3:f9:c0:60:18:f8: 32:66:fb:d3:6e:0c:19:11:8e:4a:e4:be:b4:05:50:b3:10:c8: d7:3b:8a:23:62:c0:8e:8f:7f:00:e8:d4:da:cc:d3:8d:21:0f: 7f:27:fb:50:31:96:9d:a5:c1:f5:7e:c7:2f:97:fc:99:cb:03: de:0e:5e:60:55:4a:70:e3:e7:d1:61:da:cc:09:69:6c:b4:c2: e4:30:f1:76:5a:62:ee:4c:f6:e4:18:fb:51:05:99:16:24:93: cc:1b:79:c4:86:09:36:35:2b:ce:b0:0d:d0:e3:8c:58:72:80: a6:ae:21:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE ODYwNUIxNjMwHhcNMjUxMjIxMDM1ODA2WhcNMjUxMjI4MDM1ODA2WjAYMRYwFAYD VQQDDA02OTQ3NzA0ZS0xYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX3GF/oUDt0+CeaQW6/tyBm+49TpaUl+uIk8MAm2E9+0+zwd3lHWOpx5YCQY lXRlobVrR7dKWX2EtxGRhme+wp4n8qRiZFKOCiNxEUHMuAyHzcILEOJ+nTtI1ZpB 04/8wstkV95FU6hzdwRHSGq168LT9dXTxKZNo67350RaELidfGd8QAOacOOv4D9/ +GBMy2qNSJBmK6w2mgbH5L6cyv7SIaKmgQ8PWQAaopTKf040lJN0oDD9wXjJSnpW xUUUTN8rkrya3GmuDRi3tMmqhGCezh/brR5zu+iBhJ8AZSdBj05tPxc7xFLFJzP9 IWTFJNGupLa5MzifNRCA8RwxewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwfuzeP 0BWKbtUOLgkGD6hk776oMB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7SjaGXM3Ns3llXMOZFOhIrBpHdw8OtP3XNaKAM9vBKwdVs6k3j01T 8uImEpMPM1bNTDbFLOoDPxZZgqOncjZGCpfIH4mXtlWZ0tvffAo2Ur8loKdok5Ma Vs1+5Xe1yXS2ZGQ5ZrQUhQKtnvKtDLg21ZJ1RsoUWeDLPS/3eKwwe5GIcVUJQd63 MqDD+cBgGPgyZvvTbgwZEY5K5L60BVCzEMjXO4ojYsCOj38A6NTazNONIQ9/J/tQ MZadpcH1fscvl/yZywPeDl5gVUpw4+fRYdrMCWlstMLkMPF2WmLuTPbkGPtRBZkW JJPMG3nEhgk2NSvOsA3Q44xYcoCmriGO -----END CERTIFICATE-----Generated at Sun Dec 21 12:53:35 2025 by rpki-client