This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: eC51Uxyb86C9M7o8rC6wk2JvxcEZw6dslaqSBb3bKag= Subject key identifier: 65:B9:FD:58:D7:B4:9D:EE:6F:60:98:02:4C:FA:1D:6C:1A:37:D4:93 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 02FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 02FA Signing time: Fri 19 Dec 2025 00:30:15 +0000 Manifest this update: Fri 19 Dec 2025 00:30:15 +0000 Manifest next update: Fri 26 Dec 2025 00:30:15 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: gqPLPITDEMkbSvdw2gG8fkscHhoy8qhH39pp0ZM+GMc=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: 9v/ZeGZKD58JIKPG+TPtlKNDrryBJF2rWiKbvOcAj4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Dec 19 00:30:15 2025 GMT Not After : Dec 26 00:30:15 2025 GMT Subject: CN=69449c97-bce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:a1:3c:78:92:cb:64:f9:c8:06:28:e0:85: 98:93:6d:3d:3d:f6:8c:ad:5b:3f:b8:76:72:1e:b0: 80:8d:bc:08:8d:eb:04:05:9c:1a:6c:af:0c:1b:50: 63:9f:3b:ea:3d:37:7c:c4:89:b5:10:9a:88:f3:47: f2:6f:c7:2d:0f:b9:cb:22:70:6e:2c:15:52:7f:36: b2:15:8c:69:a8:79:16:fd:a1:e4:15:36:79:a1:17: f2:00:f6:05:47:8c:76:06:71:de:aa:28:46:82:25: 6b:5d:f7:96:6c:6c:49:31:e4:05:3f:84:db:3d:fc: 01:09:79:b5:64:31:91:cc:b6:c2:c5:ac:47:54:21: b6:2d:56:29:28:6e:19:81:25:5c:79:e5:de:ce:60: 33:94:b7:ea:9f:bd:f0:b0:c0:94:39:2d:b2:8b:52: ca:5a:e5:ed:be:5b:bf:28:d1:e2:aa:63:b5:a7:4c: 9e:5c:b3:8f:1e:31:d7:55:a3:f2:fd:f8:b2:62:81: 34:d9:7b:86:c5:9a:18:a7:f0:9a:5e:b5:55:f8:d1: 5a:95:d7:b6:b4:1c:3b:29:a0:7e:44:b7:85:67:6f: 5d:93:4d:f0:03:fc:b7:0b:0c:b3:b9:62:4d:53:60: 2d:c9:c6:e8:8d:80:81:9a:dc:ec:ea:63:93:11:f6: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B9:FD:58:D7:B4:9D:EE:6F:60:98:02:4C:FA:1D:6C:1A:37:D4:93 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:78:14:e4:50:18:b5:25:a4:a9:b3:eb:5e:36:81:0b:7f:28: 55:1d:f1:22:06:97:de:7b:bd:bb:95:86:3c:4b:09:f2:17:e1: e4:47:41:b5:49:69:94:e8:3a:15:04:52:e2:84:a0:3f:6d:f5: b6:1e:47:33:31:7d:b8:9f:9a:58:e9:3a:b9:21:42:8b:82:fd: ef:02:de:c4:4d:40:cc:52:61:fb:51:fd:30:9e:99:d8:53:62: 71:ca:cb:8d:ce:b5:32:30:37:6b:f3:b4:5e:02:14:5d:b1:4a: e7:67:e9:e6:e0:0f:d1:1b:9f:d4:03:67:c8:0a:c7:f9:6f:48: c5:22:0f:84:3e:88:c2:c6:83:74:58:e9:8b:05:1b:e5:1c:4a: 17:c7:b8:1d:5e:12:70:66:b0:2f:f5:88:ed:2c:c9:b2:78:32: 3d:e4:f8:7c:aa:1c:7b:34:12:23:6a:7b:9c:ef:4c:8a:24:90: b6:c5:9c:07:c3:7a:5c:d0:95:c2:75:2e:94:ee:d0:7a:81:82: 03:61:13:86:11:3a:7f:07:b0:0b:d1:64:56:3e:3e:00:27:c4: 41:11:d7:22:6f:22:1f:88:70:b8:b5:c5:2c:55:a8:4b:d4:5d: ac:e3:eb:ea:7d:6a:86:ce:30:94:5d:64:8d:86:58:8f:7f:ca: 47:9a:92:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUxMjE5MDAzMDE1WhcNMjUxMjI2MDAzMDE1WjAYMRYwFAYD VQQDDA02OTQ0OWM5Ny1iY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEehPHiSy2T5yAYo4IWYk209PfaMrVs/uHZyHrCAjbwIjesEBZwabK8MG1Bj nzvqPTd8xIm1EJqI80fyb8ctD7nLInBuLBVSfzayFYxpqHkW/aHkFTZ5oRfyAPYF R4x2BnHeqihGgiVrXfeWbGxJMeQFP4TbPfwBCXm1ZDGRzLbCxaxHVCG2LVYpKG4Z gSVceeXezmAzlLfqn73wsMCUOS2yi1LKWuXtvlu/KNHiqmO1p0yeXLOPHjHXVaPy /fiyYoE02XuGxZoYp/CaXrVV+NFalde2tBw7KaB+RLeFZ29dk03wA/y3CwyzuWJN U2AtycbojYCBmtzs6mOTEfZ2pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW5/VjX tJ3ub2CYAkz6HWwaN9STMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAeBTkUBi1JaSps+teNoELfyhVHfEiBpfee727lYY8SwnyF+HkR0G1 SWmU6DoVBFLihKA/bfW2HkczMX24n5pY6Tq5IUKLgv3vAt7ETUDMUmH7Uf0wnpnY U2JxysuNzrUyMDdr87ReAhRdsUrnZ+nm4A/RG5/UA2fICsf5b0jFIg+EPojCxoN0 WOmLBRvlHEoXx7gdXhJwZrAv9YjtLMmyeDI95Ph8qhx7NBIjanuc70yKJJC2xZwH w3pc0JXCdS6U7tB6gYIDYROGETp/B7AL0WRWPj4AJ8RBEdcibyIfiHC4tcUsVahL 1F2s4+vqfWqGzjCUXWSNhliPf8pHmpLK -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:23 2025 by rpki-client