This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: mLL/NX2FxWd6KRKr6mKvIWKkYpAm43qfz7EWgfRWj+8= Subject key identifier: 4A:FC:02:28:EE:B7:11:27:28:5F:87:1E:D0:6F:A3:18:80:16:15:29 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 0435 Signing time: Sat 20 Dec 2025 23:33:33 +0000 Manifest this update: Sat 20 Dec 2025 23:33:32 +0000 Manifest next update: Sat 27 Dec 2025 23:33:32 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: t32zSXyRC+dz6QzE66HyHRAdj7Ak9guPOAAOk3wSgjg=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Dec 20 23:33:32 2025 GMT Not After : Dec 27 23:33:32 2025 GMT Subject: CN=6947324d-c425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:3f:9d:9b:c1:4a:49:52:d3:c0:24:6c:84: 5f:b6:1b:70:32:3a:4b:ef:c0:40:61:dd:60:38:08: f9:ed:dc:e1:c5:f2:56:75:9c:35:0c:a8:4d:e3:95: ee:c9:ab:bd:4a:e1:23:a0:6e:28:fc:2c:f0:2d:67: 38:b7:97:ea:eb:29:62:9e:5e:9b:c8:8d:7c:39:79: b1:df:91:85:b8:a9:d6:c6:de:a8:2c:57:71:bf:cf: fa:7a:96:b6:0a:6a:af:6b:68:0e:b0:60:79:23:1f: 62:c3:ea:09:be:8f:b3:8e:5a:43:95:fc:7a:cb:27: fc:f5:e0:da:93:2f:b1:f4:47:ef:23:86:0c:49:19: 10:4b:34:59:97:80:a4:e9:64:e0:2e:dc:60:2b:f1: cc:b4:92:4a:f8:15:32:1e:53:69:c1:81:df:22:be: fb:0e:52:b0:82:fb:fe:67:54:98:7f:83:e8:cf:e9: b4:ba:89:be:3e:13:60:ae:99:eb:50:44:6a:65:d4: c9:e5:1a:0d:77:7e:54:5f:a5:4e:b2:31:ee:a4:19: ab:be:65:98:0a:d5:b1:be:e9:ee:f8:d0:27:4a:79: aa:17:a9:b4:12:fc:61:60:da:d5:c8:cf:ef:7b:c1: 66:35:df:60:49:a6:d9:f8:02:61:1e:a5:3b:ff:f0: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:02:28:EE:B7:11:27:28:5F:87:1E:D0:6F:A3:18:80:16:15:29 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:73:76:c6:08:a3:6c:b6:4f:7f:87:32:f2:20:b9:2c:c7: 46:73:7a:04:9b:ce:c0:f8:69:cd:f3:3b:fb:fd:2b:4e:de:0e: e9:2d:e6:18:7c:96:36:74:91:df:e1:ff:13:9c:ed:6e:0a:8a: a2:37:45:18:13:f2:e1:98:8b:83:95:14:20:a7:70:21:39:40: 38:5d:af:94:6d:c7:29:51:f3:d6:53:d3:06:68:e5:3b:08:19: eb:ec:6e:ca:28:e9:30:1d:37:be:75:75:1d:e8:a6:9f:e8:df: c6:7c:02:c9:0d:4b:5b:80:63:a8:20:19:a0:d8:4f:3e:8d:3d: 19:67:64:f8:22:7b:9c:ac:94:60:b9:91:c0:42:48:49:61:b0: de:c7:dd:1e:c1:29:ff:28:de:56:e6:18:3b:53:fd:25:e4:c3: 15:55:6b:2d:9e:5f:f6:cc:df:a3:45:7a:97:18:6d:d7:e2:dc: c5:12:b7:43:f0:b5:3b:f7:1e:08:70:38:4a:ee:26:0a:6a:98: ba:4a:92:97:c1:ab:8f:45:e8:e9:9c:0d:f8:19:dc:0c:15:a3: f1:ae:8f:f8:47:a6:be:05:79:7e:fb:2e:2b:d7:66:0e:f2:8e: ff:da:12:1f:d5:89:93:df:58:88:1c:a2:8b:b8:ee:bf:ed:b3: b8:a1:29:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUxMjIwMjMzMzMyWhcNMjUxMjI3MjMzMzMyWjAYMRYwFAYD VQQDDA02OTQ3MzI0ZC1jNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq84/nZvBSklS08AkbIRfthtwMjpL78BAYd1gOAj57dzhxfJWdZw1DKhN45Xu yau9SuEjoG4o/CzwLWc4t5fq6ylinl6byI18OXmx35GFuKnWxt6oLFdxv8/6epa2 Cmqva2gOsGB5Ix9iw+oJvo+zjlpDlfx6yyf89eDaky+x9EfvI4YMSRkQSzRZl4Ck 6WTgLtxgK/HMtJJK+BUyHlNpwYHfIr77DlKwgvv+Z1SYf4Poz+m0uom+PhNgrpnr UERqZdTJ5RoNd35UX6VOsjHupBmrvmWYCtWxvunu+NAnSnmqF6m0EvxhYNrVyM/v e8FmNd9gSabZ+AJhHqU7//AE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr8Aiju txEnKF+HHtBvoxiAFhUpMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9knN2xgijbLZPf4cy8iC5LMdGc3oEm87A+GnN8zv7/StO3g7pLeYY fJY2dJHf4f8TnO1uCoqiN0UYE/LhmIuDlRQgp3AhOUA4Xa+UbccpUfPWU9MGaOU7 CBnr7G7KKOkwHTe+dXUd6Kaf6N/GfALJDUtbgGOoIBmg2E8+jT0ZZ2T4InucrJRg uZHAQkhJYbDex90ewSn/KN5W5hg7U/0l5MMVVWstnl/2zN+jRXqXGG3X4tzFErdD 8LU79x4IcDhK7iYKapi6SpKXwauPRejpnA34GdwMFaPxro/4R6a+BXl++y4r12YO 8o7/2hIf1YmT31iIHKKLuO6/7bO4oSnx -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:20 2025 by rpki-client