This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: 3xYL/G0OaSxn07R6kvVpjN9mZjp/KW1+c4zzG1BEu0U= Subject key identifier: F7:23:D6:C2:CD:F1:7B:56:CC:A3:9D:2D:CF:98:3D:C1:F6:47:AC:A9 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: B4 Signing time: Mon 29 Dec 2025 05:10:29 +0000 Manifest this update: Mon 29 Dec 2025 05:10:29 +0000 Manifest next update: Mon 05 Jan 2026 05:10:29 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: 4GQWc2xuy1gDTTiFbnmahjUIJs09qO9P3wCjcP3eyu4=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: C6tDI3rJ/iD8oB/JqL4h4hgvRMylwXHdbQGCV6gQBXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Dec 29 05:10:29 2025 GMT Not After : Jan 5 05:10:29 2026 GMT Subject: CN=69520d45-4fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:a6:a1:2b:c8:78:11:b5:41:69:5f:26:c1: be:e9:30:18:62:15:69:d7:2a:77:53:fc:23:9a:11: 18:4f:43:c4:ac:d4:b2:9f:64:4b:5c:81:bf:5d:61: 10:c7:a3:22:a2:1b:1e:a3:a9:8d:df:5a:45:46:15: c1:7a:c2:9a:4f:db:37:ff:66:07:f2:78:b4:43:26: 31:d5:e4:77:91:57:b7:ff:a7:7d:eb:81:d6:db:55: 5b:05:97:b9:aa:15:d5:10:b4:45:6d:21:7c:d6:8f: 5d:a1:2c:be:e7:8e:51:dd:5e:f6:ee:b9:34:82:3f: 28:6d:15:64:57:97:15:f2:53:5a:70:02:63:be:7b: eb:8a:eb:45:c1:fb:24:45:5d:4f:c8:27:c8:8b:ea: 4a:89:f3:b0:58:af:8b:f3:84:e3:67:cb:ad:b8:a0: 5c:ff:63:a5:b0:2d:af:8f:ad:42:30:d1:09:f7:ec: 96:de:86:49:5d:37:91:2b:d4:bc:19:d6:56:0c:65: 9d:e0:e3:58:d1:f4:1b:9d:34:2a:95:20:13:3f:cb: d8:61:01:0f:68:e5:02:5a:bf:24:8a:91:b1:15:1d: 4a:0a:2a:0f:35:55:19:26:8e:5d:9a:43:41:08:fb: a4:8a:cc:5e:1d:16:0d:1f:a6:89:51:ad:90:cc:64: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:23:D6:C2:CD:F1:7B:56:CC:A3:9D:2D:CF:98:3D:C1:F6:47:AC:A9 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:ec:0b:7a:bb:5c:d7:63:0a:be:2c:e3:82:3b:e9:a1:69:57: 32:c9:4b:02:8b:5a:ad:f8:5b:56:56:da:dc:ec:7e:ec:a0:04: 90:34:47:1e:cd:42:ef:eb:d3:f6:5e:07:e3:82:b6:55:ef:cd: 1b:f8:e3:51:76:c9:0c:c3:52:e9:1e:77:21:97:39:45:a3:cf: ee:28:77:5c:e8:28:e1:e8:37:37:e7:21:62:88:05:bd:12:1e: 46:51:ea:5f:45:ac:2e:3d:78:84:57:7b:53:a1:5d:a1:18:71: ee:84:35:76:ae:d6:c5:8b:ab:aa:9d:72:ae:6c:9a:e5:a7:25: 9c:f5:20:c8:8e:72:c6:ca:e2:1b:00:9d:84:3d:84:fc:d3:a8: c3:97:4f:d1:b5:b2:14:9a:a1:5c:b4:cf:20:10:d9:b4:cc:a3: 1c:11:5c:7f:a4:5e:55:5c:09:16:c5:0f:9e:93:2a:c7:19:67: 01:10:97:3a:b1:3c:56:44:91:de:a1:cf:83:ae:8d:43:71:5d: b7:6a:9f:45:7e:f9:9e:1b:30:c0:8b:f8:ef:52:ad:f8:5f:3b: eb:af:14:a4:2f:d9:47:28:5b:b0:8f:8f:66:ea:29:9b:2b:27: 1c:fc:bf:89:90:12:bf:72:59:35:a7:61:86:40:55:4f:b3:86: f0:0d:cc:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjUxMjI5MDUxMDI5WhcNMjYwMTA1MDUxMDI5WjAYMRYwFAYD VQQDDA02OTUyMGQ0NS00ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswamoSvIeBG1QWlfJsG+6TAYYhVp1yp3U/wjmhEYT0PErNSyn2RLXIG/XWEQ x6Miohseo6mN31pFRhXBesKaT9s3/2YH8ni0QyYx1eR3kVe3/6d964HW21VbBZe5 qhXVELRFbSF81o9doSy+545R3V727rk0gj8obRVkV5cV8lNacAJjvnvriutFwfsk RV1PyCfIi+pKifOwWK+L84TjZ8utuKBc/2OlsC2vj61CMNEJ9+yW3oZJXTeRK9S8 GdZWDGWd4ONY0fQbnTQqlSATP8vYYQEPaOUCWr8kipGxFR1KCioPNVUZJo5dmkNB CPukisxeHRYNH6aJUa2QzGQx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcj1sLN 8XtWzKOdLc+YPcH2R6ypMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN7At6u1zXYwq+LOOCO+mhaVcyyUsCi1qt+FtWVtrc7H7soASQNEce zULv69P2XgfjgrZV780b+ONRdskMw1LpHnchlzlFo8/uKHdc6Cjh6Dc35yFiiAW9 Eh5GUepfRawuPXiEV3tToV2hGHHuhDV2rtbFi6uqnXKubJrlpyWc9SDIjnLGyuIb AJ2EPYT806jDl0/RtbIUmqFctM8gENm0zKMcEVx/pF5VXAkWxQ+ekyrHGWcBEJc6 sTxWRJHeoc+Dro1DcV23ap9FfvmeGzDAi/jvUq34XzvrrxSkL9lHKFuwj49m6imb Kycc/L+JkBK/clk1p2GGQFVPs4bwDcz5 -----END CERTIFICATE-----Generated at Mon Dec 29 07:38:34 2025 by rpki-client