This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: xAguewHNp5NVVvcpQ+lp9E6LhNz+1KWFc34yUyMExu4= Subject key identifier: C3:BD:D8:BD:A5:54:4C:D8:27:5D:B6:CA:2C:F9:8B:D2:DE:DE:AE:C4 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 0453 Signing time: Sat 20 Dec 2025 23:30:48 +0000 Manifest this update: Sat 20 Dec 2025 23:30:47 +0000 Manifest next update: Sat 27 Dec 2025 23:30:47 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: 6tK0I927ajOdqEFQ3gJu+0syjkpkMUskthLEBmCx5rM=) 2: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: lvLXESJcuRjSmTnSzTV0gfJc2SXdXizZz5eloJwhEZU=) 3: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Dec 20 23:30:47 2025 GMT Not After : Dec 27 23:30:47 2025 GMT Subject: CN=694731a8-ca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:bc:1e:b3:c5:0f:5d:b7:f0:e2:ed:06:e3: 01:6f:cb:c0:ac:02:6a:63:5e:88:ed:74:95:dc:49: b1:a4:a1:a2:3c:1d:e4:96:23:b5:4c:6d:e2:d2:3a: 59:d9:24:99:de:5c:b0:0d:0b:93:bc:b6:f0:83:fe: 64:08:6b:f8:f1:65:ea:59:a5:68:61:05:0a:58:ee: de:fe:47:50:cc:18:b4:21:14:5f:04:5d:e6:86:3f: 2b:10:d2:75:f6:5f:63:7f:e6:2b:ad:30:0b:d7:29: dd:b4:5d:75:c0:09:63:90:38:dd:41:c6:ed:e5:2a: 54:60:5e:ed:37:9e:c9:8f:0d:07:b3:a8:81:02:a2: 4b:3d:6b:21:b3:fd:6b:0e:b7:aa:d3:bc:a9:32:74: 61:30:f9:fe:90:f3:f4:3b:30:e1:d8:e7:0e:01:ef: 5e:6a:db:68:37:67:d6:99:94:85:1b:e2:5f:fb:fd: ec:4b:1b:26:69:75:d6:a1:ed:03:f7:df:7d:52:80: 90:d7:6a:a5:ae:a6:57:a3:65:1d:8a:13:62:30:f0: 17:4d:51:aa:92:a0:8b:dd:4f:e7:8f:95:e1:4c:39: 2b:4b:4b:38:7d:51:6e:80:11:0c:7a:a3:0b:66:71: e6:55:55:96:a9:87:68:92:fb:a9:78:b5:59:e1:2d: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BD:D8:BD:A5:54:4C:D8:27:5D:B6:CA:2C:F9:8B:D2:DE:DE:AE:C4 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:9f:6b:77:97:99:ec:df:84:f8:d0:10:8a:0b:0e:1a:1c: 0e:66:cd:2c:da:ed:b6:1a:14:f4:c5:86:9f:d1:dc:13:b3:f3: 6a:06:bf:5d:9a:e5:f4:26:1e:13:44:45:f2:50:69:fe:a1:8c: c0:5c:7e:d0:74:d2:89:f1:00:80:7e:12:be:1e:cc:6c:fe:5c: 1b:9b:bb:ee:bf:73:39:cd:50:06:a1:08:83:94:11:e6:02:d6: 74:8d:9b:f0:29:a3:a5:81:c5:b2:37:25:de:fa:dc:50:f2:94: 2a:62:17:57:8d:29:33:34:e9:87:a3:20:f4:c5:d0:49:a8:01: 87:db:64:7e:09:5e:d4:0c:86:db:84:48:10:3a:62:8b:1f:02: b2:39:bb:a9:d7:99:0d:c3:76:d3:37:2f:90:c8:77:99:29:67: f7:3a:ae:f1:cb:b8:0b:b0:80:87:3f:49:fe:de:ce:f5:38:eb: cb:ad:fb:2f:27:1a:d2:fe:fa:5e:69:4b:f3:b6:e2:1d:55:ab: 60:63:f1:12:dc:49:f4:70:cc:74:88:c8:3e:b3:65:fb:80:ff: 1f:65:5a:84:c7:85:6d:07:49:02:78:52:ab:45:07:d9:1d:0d: f7:46:50:fc:a6:1b:ba:3d:9d:c4:dc:a0:bc:63:41:04:d8:61: 7d:94:9a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjUxMjIwMjMzMDQ3WhcNMjUxMjI3MjMzMDQ3WjAYMRYwFAYD VQQDDA02OTQ3MzFhOC1jYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAS8HrPFD1238OLtBuMBb8vArAJqY16I7XSV3EmxpKGiPB3kliO1TG3i0jpZ 2SSZ3lywDQuTvLbwg/5kCGv48WXqWaVoYQUKWO7e/kdQzBi0IRRfBF3mhj8rENJ1 9l9jf+YrrTAL1yndtF11wAljkDjdQcbt5SpUYF7tN57Jjw0Hs6iBAqJLPWshs/1r Dreq07ypMnRhMPn+kPP0OzDh2OcOAe9eattoN2fWmZSFG+Jf+/3sSxsmaXXWoe0D 9999UoCQ12qlrqZXo2UdihNiMPAXTVGqkqCL3U/nj5XhTDkrS0s4fVFugBEMeqML ZnHmVVWWqYdokvupeLVZ4S0D/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO92L2l VEzYJ122yiz5i9Le3q7EMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJvJ9rd5eZ7N+E+NAQigsOGhwOZs0s2u22GhT0xYaf0dwTs/NqBr9d muX0Jh4TREXyUGn+oYzAXH7QdNKJ8QCAfhK+Hsxs/lwbm7vuv3M5zVAGoQiDlBHm AtZ0jZvwKaOlgcWyNyXe+txQ8pQqYhdXjSkzNOmHoyD0xdBJqAGH22R+CV7UDIbb hEgQOmKLHwKyObup15kNw3bTNy+QyHeZKWf3Oq7xy7gLsICHP0n+3s71OOvLrfsv JxrS/vpeaUvztuIdVatgY/ES3En0cMx0iMg+s2X7gP8fZVqEx4VtB0kCeFKrRQfZ HQ33RlD8phu6PZ3E3KC8Y0EE2GF9lJpS -----END CERTIFICATE-----Generated at Sun Dec 21 10:42:11 2025 by rpki-client