This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: OrGdgH3YogEBzcxAZOIHGRhraQV+uzJYhLnarEkaMwk= Subject key identifier: A5:84:E8:A6:F0:20:90:7C:CB:39:90:14:E2:54:D2:2F:2E:65:C2:37 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 051E Signing time: Mon 22 Dec 2025 22:44:01 +0000 Manifest this update: Mon 22 Dec 2025 22:44:00 +0000 Manifest next update: Mon 29 Dec 2025 22:44:00 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: deRC0FB2zS4+mkWuFiEtPwmjyEAL6foTwAMrm4vljtM=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Dec 22 22:44:00 2025 GMT Not After : Dec 29 22:44:00 2025 GMT Subject: CN=6949c9b1-a1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:cd:56:db:db:9f:db:69:bb:88:c8:90:2a: cc:0f:47:00:10:20:44:5b:8f:0d:dd:26:73:2f:e4: 79:3c:07:2b:2a:46:a1:03:47:83:14:49:25:bc:37: a2:47:3d:1b:a0:d2:c6:1e:05:01:78:82:60:81:06: c2:d5:9a:83:2b:40:e5:79:17:e0:af:8d:bd:cd:32: 11:be:58:ce:8a:c0:d5:94:e3:8d:01:1b:e8:4f:89: de:aa:2e:5b:3a:29:f9:c6:34:6d:a4:b7:56:47:30: fb:d0:0f:49:2c:24:36:51:fc:1a:38:62:2a:90:b7: 3a:2f:58:0c:d1:87:93:b9:30:d0:3b:bf:bd:12:27: 65:59:c7:3a:09:f5:c0:7e:22:fa:11:6b:a3:8f:4e: 5b:a3:30:0f:d7:a6:19:8f:eb:82:87:9f:0a:ff:a0: f0:dc:f2:b6:c2:ef:d9:cb:eb:4a:0f:f2:86:de:94: 34:11:8a:9c:ad:47:c4:b8:02:92:5e:26:2c:af:a9: 81:48:63:80:5a:14:87:eb:7f:f8:48:8a:dd:e9:44: 69:2e:1e:f1:08:cd:3d:14:3a:c3:f1:a0:2d:d7:e9: 70:a8:ed:c7:d9:a7:2e:d6:7f:2d:ba:44:44:0c:48: 10:03:f5:c8:a6:c5:40:7c:80:54:66:7e:52:d2:8a: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:E8:A6:F0:20:90:7C:CB:39:90:14:E2:54:D2:2F:2E:65:C2:37 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e7:55:36:87:53:17:90:ab:36:09:ec:26:3c:52:19:d9:ab: d7:28:7f:2e:03:90:99:29:ed:05:a9:b2:e0:1f:27:2f:21:23: 7b:25:d8:83:a2:fc:e9:d1:e5:dd:f2:5c:31:27:54:4c:21:d0: f8:a3:a3:20:dd:0f:b5:f2:b7:50:f6:b6:a6:c2:92:26:f9:31: 64:90:2e:7c:2d:29:7d:a3:34:6f:41:9a:c3:c7:fc:dc:dd:a4: 5e:ed:78:a7:db:31:d9:8e:96:23:08:23:3d:7c:2b:81:4c:eb: 27:16:b3:ec:ad:92:e9:bf:4d:dc:c7:e1:91:b8:28:7b:05:03: 2a:1f:d7:57:9e:d3:79:b2:20:bd:97:69:7f:62:d7:9a:70:85: 27:4c:57:38:09:76:43:37:89:cd:7b:e4:5d:af:1b:7d:55:cd: 31:46:05:49:73:a4:e1:02:f9:02:c2:8e:9c:7d:80:62:62:a2: aa:48:7f:25:60:4f:bc:7c:52:74:47:19:94:50:16:b0:c0:40: 20:3e:09:d2:9c:ed:70:c3:f8:eb:84:68:f4:61:da:13:50:17: 82:28:95:cd:e7:6a:81:f6:16:cb:e3:4c:ce:20:dc:37:a6:e2: 34:56:01:2c:53:d1:cf:9c:f9:7e:12:33:f3:99:69:31:31:11: 38:47:9a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUxMjIyMjI0NDAwWhcNMjUxMjI5MjI0NDAwWjAYMRYwFAYD VQQDDA02OTQ5YzliMS1hMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjXjNVtvbn9tpu4jIkCrMD0cAECBEW48N3SZzL+R5PAcrKkahA0eDFEklvDei Rz0boNLGHgUBeIJggQbC1ZqDK0DleRfgr429zTIRvljOisDVlOONARvoT4neqi5b Oin5xjRtpLdWRzD70A9JLCQ2UfwaOGIqkLc6L1gM0YeTuTDQO7+9EidlWcc6CfXA fiL6EWujj05bozAP16YZj+uCh58K/6Dw3PK2wu/Zy+tKD/KG3pQ0EYqcrUfEuAKS XiYsr6mBSGOAWhSH63/4SIrd6URpLh7xCM09FDrD8aAt1+lwqO3H2acu1n8tukRE DEgQA/XIpsVAfIBUZn5S0oodfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWE6Kbw IJB8yzmQFOJU0i8uZcI3MB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA051U2h1MXkKs2CewmPFIZ2avXKH8uA5CZKe0FqbLgHycvISN7JdiD ovzp0eXd8lwxJ1RMIdD4o6Mg3Q+18rdQ9ramwpIm+TFkkC58LSl9ozRvQZrDx/zc 3aRe7Xin2zHZjpYjCCM9fCuBTOsnFrPsrZLpv03cx+GRuCh7BQMqH9dXntN5siC9 l2l/YteacIUnTFc4CXZDN4nNe+Rdrxt9Vc0xRgVJc6ThAvkCwo6cfYBiYqKqSH8l YE+8fFJ0RxmUUBawwEAgPgnSnO1ww/jrhGj0YdoTUBeCKJXN52qB9hbL40zOINw3 puI0VgEsU9HPnPl+EjPzmWkxMRE4R5r/ -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:19 2025 by rpki-client