This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: twT3TyZ45EFosbrxMxekYXUzHFgJ4qVA/JGJjQ74gWs= Subject key identifier: BD:22:5B:6F:94:B7:2C:59:36:9C:9D:9A:24:03:49:B3:05:C4:0B:4B Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 1226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 1209 Signing time: Sat 20 Dec 2025 16:53:48 +0000 Manifest this update: Sat 20 Dec 2025 16:53:47 +0000 Manifest next update: Sat 27 Dec 2025 16:53:47 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: HNeNtcXv3qWCzQFFtXsUuRRsTGVJfg5aFAvxauGLGDA=) 2: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 3: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4646 (0x1226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Dec 20 16:53:47 2025 GMT Not After : Dec 27 16:53:47 2025 GMT Subject: CN=6946d49c-52bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:85:0f:2d:69:41:09:54:69:cb:0b:98:4b: 56:57:86:f2:b5:09:51:e4:a8:f1:28:15:c2:f5:51: 78:07:ac:f0:c4:77:68:d6:2c:5b:02:fa:ab:dc:7e: 85:ef:e3:8c:e5:46:b3:33:3a:a4:c9:3f:cd:0f:05: 60:29:ca:c5:c6:58:4b:40:4d:4f:4c:f8:72:07:33: ed:ba:f5:36:5b:7e:c3:86:fb:7b:d1:06:24:29:3e: dc:36:45:82:c1:8a:e6:02:96:f5:af:91:7b:9e:e2: b7:b7:89:4d:8d:26:26:41:3a:3b:53:1b:2e:3b:f1: 71:52:fc:cd:83:90:f6:81:40:f7:86:47:f2:6c:ca: e0:15:66:f6:3e:f9:9f:5d:b7:c4:cf:98:ff:bc:fd: d7:a9:13:78:0d:ee:ba:62:4c:af:15:bc:48:1a:f7: c9:68:fd:fa:2b:1b:2c:10:df:40:53:ed:7e:21:b7: d1:26:d1:0b:ee:92:1d:45:2f:4e:a0:40:ca:f2:77: 41:1e:82:0a:c5:d3:b1:5d:eb:f2:7c:17:b8:0a:fd: a3:9a:86:bf:8e:bc:57:7e:4b:03:36:e2:a2:58:89: 86:44:a4:5b:40:84:3d:0d:75:a4:ae:bf:8c:a7:d7: 5f:75:80:e9:cc:9b:be:24:73:e3:c3:c7:ae:10:6b: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:5B:6F:94:B7:2C:59:36:9C:9D:9A:24:03:49:B3:05:C4:0B:4B X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d8:ee:5f:fa:7c:9f:fe:f8:0c:f3:6f:e2:ac:be:39:73:84: bc:ae:58:77:c5:0c:48:1e:8d:04:33:e1:bb:88:ac:4b:41:83: 3a:e0:4f:2f:79:0b:b0:d3:f9:a1:7c:de:ee:c0:4e:8d:d4:75: 61:34:09:e0:51:81:f9:62:84:3d:2d:36:67:2a:ac:3d:75:48: 86:09:ae:35:17:6c:e0:20:48:47:59:ef:a7:0d:cb:3e:4a:90: d9:e2:a1:e4:48:22:fd:aa:67:38:da:e2:c6:46:2b:1b:14:77: d2:2a:ef:cb:79:fb:a9:75:3d:28:19:7f:d2:d9:8f:90:35:c0: 87:19:0b:20:dd:59:11:2a:ca:a9:2b:ab:f6:f7:41:90:ab:c9: a1:02:e9:0a:b4:12:13:dc:8f:76:25:28:b2:15:8b:6a:69:ca: ad:16:14:e0:82:24:11:fd:61:f4:0e:c6:a3:8d:25:f4:9a:21: fb:cb:9f:09:e2:1e:ee:38:d6:44:cb:e7:0f:b4:c1:2d:2c:d6: e0:1a:66:74:ca:b4:17:c3:4e:2c:ec:84:b4:45:48:94:67:08: 79:50:ab:0f:26:ae:4a:c1:2f:0f:22:59:86:f3:50:23:ca:11: 39:0b:ac:a1:b3:d9:c4:0b:a6:3d:12:e2:c8:79:ae:a2:dc:3a: 1c:97:db:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUxMjIwMTY1MzQ3WhcNMjUxMjI3MTY1MzQ3WjAYMRYwFAYD VQQDDA02OTQ2ZDQ5Yy01MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLmFDy1pQQlUacsLmEtWV4bytQlR5KjxKBXC9VF4B6zwxHdo1ixbAvqr3H6F 7+OM5UazMzqkyT/NDwVgKcrFxlhLQE1PTPhyBzPtuvU2W37Dhvt70QYkKT7cNkWC wYrmApb1r5F7nuK3t4lNjSYmQTo7UxsuO/FxUvzNg5D2gUD3hkfybMrgFWb2Pvmf XbfEz5j/vP3XqRN4De66YkyvFbxIGvfJaP36KxssEN9AU+1+IbfRJtEL7pIdRS9O oEDK8ndBHoIKxdOxXevyfBe4Cv2jmoa/jrxXfksDNuKiWImGRKRbQIQ9DXWkrr+M p9dfdYDpzJu+JHPjw8euEGuM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0iW2+U tyxZNpydmiQDSbMFxAtLMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx2O5f+nyf/vgM82/irL45c4S8rlh3xQxIHo0EM+G7iKxLQYM64E8v eQuw0/mhfN7uwE6N1HVhNAngUYH5YoQ9LTZnKqw9dUiGCa41F2zgIEhHWe+nDcs+ SpDZ4qHkSCL9qmc42uLGRisbFHfSKu/LefupdT0oGX/S2Y+QNcCHGQsg3VkRKsqp K6v290GQq8mhAukKtBIT3I92JSiyFYtqacqtFhTggiQR/WH0DsajjSX0miH7y58J 4h7uONZEy+cPtMEtLNbgGmZ0yrQXw04s7IS0RUiUZwh5UKsPJq5KwS8PIlmG81Aj yhE5C6yhs9nEC6Y9EuLIea6i3Docl9tC -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:29 2025 by rpki-client