This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: cQw1uF8lyBY8mhaxewrY4vrM/+LQLUzE9gRh2hHeAV8= Subject key identifier: A6:BD:F3:F7:E3:09:05:1F:AA:83:53:FB:6A:FA:15:1D:2B:18:58:BB Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0263 Signing time: Sun 21 Dec 2025 00:50:56 +0000 Manifest this update: Sun 21 Dec 2025 00:50:56 +0000 Manifest next update: Sun 28 Dec 2025 00:50:56 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: N9Iym23I7FiJK4/ZRN1M7gyFajhHmO1j4v0Xm7Yp4Ww=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Dec 21 00:50:56 2025 GMT Not After : Dec 28 00:50:56 2025 GMT Subject: CN=69474470-cbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:12:b3:40:10:31:95:f9:c8:50:94:b4:6d:0b: 62:91:1a:bd:85:eb:44:b4:a7:6e:df:85:6d:a6:83: 0a:02:53:9c:ff:13:3b:16:80:28:d1:da:2f:3a:03: da:1d:48:50:a3:84:ec:82:00:71:a7:73:ce:70:35: 31:0c:9b:8c:fa:cd:07:f9:3a:ba:d4:77:2a:53:1e: bc:fa:3d:98:5c:16:cb:5d:32:af:36:27:96:e7:2f: 49:40:9c:eb:39:6c:de:4c:db:00:ed:dd:0e:4e:30: c4:df:1d:69:47:9e:0c:71:d8:1b:32:71:03:e1:1a: fc:05:70:61:28:0a:a8:a4:7a:b9:51:ae:1f:8f:72: 38:01:6c:1f:ea:e6:6a:2e:97:9f:d6:8a:41:33:37: 0e:76:98:c5:b7:c4:18:75:88:11:e3:26:a4:c8:b4: 70:2e:42:1e:13:df:a0:fa:6b:ea:c9:c8:ab:20:3d: c4:52:12:17:cc:d9:99:32:fc:4e:e6:0b:99:0e:23: f2:3d:ac:94:86:d9:ed:66:d2:03:a9:25:15:0f:3a: ea:4c:58:ad:5f:ec:ab:be:8d:b1:9d:a5:29:68:fa: 18:d8:cf:13:4b:ac:12:df:1d:9b:a9:02:a8:05:0b: a2:e5:2c:84:7f:69:e2:1c:a2:ca:40:f6:c5:cc:cd: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:F3:F7:E3:09:05:1F:AA:83:53:FB:6A:FA:15:1D:2B:18:58:BB X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:da:47:f9:44:b2:37:4a:7b:68:0d:ca:32:95:1b:74:f9:e4: d7:d5:85:e7:ad:8b:b1:f7:b5:e1:24:10:65:05:e8:e9:67:b2: bf:56:7a:b8:ff:e2:3c:9b:0f:f3:7a:fb:80:76:f9:6f:f8:2d: 7f:b3:f1:d3:34:12:9f:a8:64:25:da:95:dc:be:58:8b:14:c4: 91:8d:26:8d:18:a8:1b:dd:32:59:e5:a8:e2:1e:80:c7:13:ab: 99:65:bf:0b:b5:fc:fd:f5:0c:18:c3:e7:9e:49:d8:b7:d8:6d: 14:41:58:ff:e0:b9:52:0b:a3:13:9a:4f:ba:24:bf:85:33:8a: f9:2c:b9:16:9d:c8:37:9e:c7:55:b5:9b:bf:53:d1:d0:56:98: 3a:ae:0c:13:90:9d:60:6c:41:0f:ce:84:b5:92:09:93:ee:42: 63:0e:46:5d:1b:14:f4:0b:ca:ef:ea:8a:57:5c:f2:32:89:3e: 2a:f0:ea:e6:4b:73:87:e6:18:45:30:f5:27:34:42:8f:be:55: b8:45:9b:d4:20:eb:fa:08:9b:6b:4e:44:5a:8e:8a:6a:ed:98: 06:d2:32:e6:76:76:b4:08:31:df:f5:5d:fe:d6:55:5f:ee:de: 4b:e8:f7:fc:4a:7b:95:a9:fa:50:1a:39:f9:db:b8:24:f6:12: 2c:a1:15:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUxMjIxMDA1MDU2WhcNMjUxMjI4MDA1MDU2WjAYMRYwFAYD VQQDDA02OTQ3NDQ3MC1jYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RKzQBAxlfnIUJS0bQtikRq9hetEtKdu34VtpoMKAlOc/xM7FoAo0dovOgPa HUhQo4TsggBxp3POcDUxDJuM+s0H+Tq61HcqUx68+j2YXBbLXTKvNieW5y9JQJzr OWzeTNsA7d0OTjDE3x1pR54McdgbMnED4Rr8BXBhKAqopHq5Ua4fj3I4AWwf6uZq Lpef1opBMzcOdpjFt8QYdYgR4yakyLRwLkIeE9+g+mvqycirID3EUhIXzNmZMvxO 5guZDiPyPayUhtntZtIDqSUVDzrqTFitX+yrvo2xnaUpaPoY2M8TS6wS3x2bqQKo BQui5SyEf2niHKLKQPbFzM3r5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa98/fj CQUfqoNT+2r6FR0rGFi7MB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe2kf5RLI3SntoDcoylRt0+eTX1YXnrYux97XhJBBlBejpZ7K/Vnq4 /+I8mw/zevuAdvlv+C1/s/HTNBKfqGQl2pXcvliLFMSRjSaNGKgb3TJZ5ajiHoDH E6uZZb8Ltfz99QwYw+eeSdi32G0UQVj/4LlSC6MTmk+6JL+FM4r5LLkWncg3nsdV tZu/U9HQVpg6rgwTkJ1gbEEPzoS1kgmT7kJjDkZdGxT0C8rv6opXXPIyiT4q8Orm S3OH5hhFMPUnNEKPvlW4RZvUIOv6CJtrTkRajopq7ZgG0jLmdna0CDHf9V3+1lVf 7t5L6Pf8SnuVqfpQGjn527gk9hIsoRUk -----END CERTIFICATE-----Generated at Sun Dec 21 17:52:03 2025 by rpki-client