This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: 2CY71xE+7Zm1IBQNrVz1XKeOt74vdSZqoO22wpsja+4= Subject key identifier: 12:19:C7:CD:53:85:E6:2A:99:57:15:C0:D9:AD:56:07:3E:8D:28:31 Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 02B3 Signing time: Fri 19 Dec 2025 01:18:39 +0000 Manifest this update: Fri 19 Dec 2025 01:18:38 +0000 Manifest next update: Fri 26 Dec 2025 01:18:38 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: CS2NE+F73b1KRrJpzkxAotJ73y5QNuu+KNv/2ATuVeM=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: lvQ8BAOEHHI1X0qXH/UaJKBYn5+t8IOjYcFWQGKElqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: Dec 19 01:18:38 2025 GMT Not After : Dec 26 01:18:38 2025 GMT Subject: CN=6944a7ef-0477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:97:80:41:d3:85:0e:a8:1b:ee:f9:70:6c:08: 75:8d:d4:9d:33:c8:c1:f1:e4:18:74:69:fe:92:a3: 9c:72:4c:d9:29:59:19:03:9d:0a:76:ba:f8:60:c6: dc:24:a5:22:59:07:75:bc:96:91:e3:5b:27:b7:ff: 54:cf:59:e0:1c:5c:71:dd:da:94:8e:79:f9:ad:7a: 00:12:f5:85:5d:bc:0b:4a:20:6d:89:9f:b5:f6:7e: 24:b9:f3:b1:1a:36:54:16:cd:3d:f4:ed:ed:fd:42: 1d:02:82:98:c0:05:ad:42:81:5f:93:1d:d6:c8:ae: f0:d7:0a:1c:7f:89:0e:cd:bc:04:df:e1:47:3e:e1: 4d:0d:84:c1:8c:02:02:bf:6d:9e:85:7c:55:33:53: 01:d4:44:e8:0b:39:9b:17:47:95:52:91:f6:cd:46: e1:7c:46:4c:f8:a4:ae:dd:9c:39:f7:c1:73:97:2b: 21:dd:5f:50:37:62:3f:b1:46:93:e1:fa:7d:72:25: 18:76:2b:56:d0:dd:eb:cf:f2:fe:72:43:33:d5:fe: d4:1d:3f:3f:c9:a0:20:f0:a1:a4:19:82:90:c4:c0: 39:de:c6:37:72:30:89:0e:60:28:2b:2b:41:38:62: d0:ae:54:35:83:94:3c:87:ca:54:eb:a5:6c:7c:c0: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:C7:CD:53:85:E6:2A:99:57:15:C0:D9:AD:56:07:3E:8D:28:31 X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4b:62:6b:13:8e:bd:18:92:ac:fa:81:38:01:2c:ce:87:39: a2:f7:11:2e:78:8f:24:97:69:0d:6c:03:00:d3:33:5e:7e:7b: 61:e7:be:89:13:f4:9a:dc:2c:91:b2:28:f5:a1:d6:bb:23:ed: 3a:08:31:d6:63:24:4b:43:03:8a:c2:36:af:f3:b0:e7:d1:30: e6:bf:db:9a:b3:68:c2:8d:47:e9:55:5e:3b:10:7a:b3:e4:20: 0f:a1:67:55:05:93:34:32:c3:d6:67:05:b9:99:4f:1a:8c:44: c3:2d:97:c9:0e:9c:1f:9f:ef:ed:5c:63:c9:c6:b8:84:6f:f7: f3:d5:2f:fe:ef:0d:5d:f4:93:e4:c0:d4:bf:42:e4:70:05:b4: d8:2f:ba:47:c9:04:55:c8:37:4b:c1:33:10:a3:22:2b:51:d6: bb:39:5e:ba:27:67:4f:48:76:c8:43:8d:83:2f:d2:f9:34:ab: 99:fe:e3:42:e7:2d:3d:ed:fc:2b:cd:04:88:94:30:27:6a:c7: e2:13:98:3b:fe:98:a6:84:f7:48:8a:ab:14:25:33:1a:3a:b1: 1d:e2:35:e0:8f:26:22:83:90:f2:85:75:dd:57:22:2d:1a:e2: 1e:89:63:9e:ff:1c:32:a0:65:77:d9:cb:a5:18:1a:27:54:8b: b3:5d:7b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKEFEREIyQkYzQzQxODI2RDZEMEZCRThEMkJGMkYwNTJE OThBNUQ5NDkwHhcNMjUxMjE5MDExODM4WhcNMjUxMjI2MDExODM4WjAYMRYwFAYD VQQDDA02OTQ0YTdlZi0wNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3peAQdOFDqgb7vlwbAh1jdSdM8jB8eQYdGn+kqOcckzZKVkZA50Kdrr4YMbc JKUiWQd1vJaR41snt/9Uz1ngHFxx3dqUjnn5rXoAEvWFXbwLSiBtiZ+19n4kufOx GjZUFs099O3t/UIdAoKYwAWtQoFfkx3WyK7w1wocf4kOzbwE3+FHPuFNDYTBjAIC v22ehXxVM1MB1EToCzmbF0eVUpH2zUbhfEZM+KSu3Zw598Fzlysh3V9QN2I/sUaT 4fp9ciUYditW0N3rz/L+ckMz1f7UHT8/yaAg8KGkGYKQxMA53sY3cjCJDmAoKytB OGLQrlQ1g5Q8h8pU66VsfMDvTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIZx81T heYqmVcVwNmtVgc+jSgxMB8GA1UdIwQYMBaAFK3bK/PEGCbW0Pvo0r8vBS2YpdlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0YlEtLWpTdnk4RkxaaWwy VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0 YlEtLWpTdnk4RkxaaWwyVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZS2JrE469GJKs+oE4ASzOhzmi9xEueI8kl2kNbAMA0zNefnth576J E/Sa3CyRsij1oda7I+06CDHWYyRLQwOKwjav87Dn0TDmv9uas2jCjUfpVV47EHqz 5CAPoWdVBZM0MsPWZwW5mU8ajETDLZfJDpwfn+/tXGPJxriEb/fz1S/+7w1d9JPk wNS/QuRwBbTYL7pHyQRVyDdLwTMQoyIrUda7OV66J2dPSHbIQ42DL9L5NKuZ/uNC 5y097fwrzQSIlDAnasfiE5g7/pimhPdIiqsUJTMaOrEd4jXgjyYig5DyhXXdVyIt GuIeiWOe/xwyoGV32culGBonVIuzXXtY -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:28 2025 by rpki-client