This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: UvcHcnlZgHtaeyMK/8eXfAdL4QnNRfIlyP2LhaTG+jI= Subject key identifier: 13:C8:15:E2:A4:8B:86:EB:64:15:E5:51:6D:CE:BC:47:DA:85:AA:9B Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 0823 Signing time: Thu 18 Dec 2025 20:23:38 +0000 Manifest this update: Thu 18 Dec 2025 20:23:37 +0000 Manifest next update: Thu 25 Dec 2025 20:23:37 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: QuLImKJ8NY2XaW1Ll3f/dm7fGcEDjMgAfnKpzS1HBMw=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: HjcVeeuGfQ4vkp/U3mV4vagewWLSC858iVp7rCqO1Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Dec 18 20:23:37 2025 GMT Not After : Dec 25 20:23:37 2025 GMT Subject: CN=694462ca-fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:fb:8d:cb:3a:b0:ad:6a:92:6b:c4:ad:4d: f6:a7:5e:fa:ec:e4:05:54:44:82:3e:df:3f:63:4a: ba:15:c0:8c:9e:9b:7c:5d:06:93:71:5e:92:e8:52: b9:cd:9a:39:34:72:e2:fd:7a:ef:93:38:18:33:52: 62:d1:a0:0d:c0:1f:36:5e:e5:28:2d:06:a2:e9:50: 4c:27:53:d7:17:2b:66:cc:c9:f4:9d:9d:90:d0:e8: 7f:d6:6f:ab:1e:76:d9:51:d1:9e:b1:e1:e3:f4:ce: 9b:06:0e:d8:d2:0a:2b:2a:e5:d4:7e:85:df:4d:33: 42:68:22:2b:90:e9:3f:dd:c5:53:8e:d1:18:ba:c0: 35:c4:c0:b8:24:79:5f:30:97:83:f1:59:b9:79:3f: e8:c0:16:d0:1a:ec:f9:8b:a3:8d:f2:86:68:58:03: c7:79:dd:81:37:62:bc:6a:1f:88:03:aa:03:db:b4: 19:a9:12:03:ea:91:97:24:b8:f5:4f:5d:4e:ac:41: b8:21:a7:32:29:62:7c:56:23:c5:78:cc:d7:25:eb: 48:e1:cd:ca:f3:64:09:74:10:a8:2b:d2:68:49:5f: 7e:11:16:99:f4:47:fe:06:3d:30:c2:a7:69:16:d5: 48:39:0d:d6:9c:a3:5f:3d:61:97:53:84:df:66:d9: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C8:15:E2:A4:8B:86:EB:64:15:E5:51:6D:CE:BC:47:DA:85:AA:9B X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f2:d7:5e:20:5a:3f:43:e9:c9:e7:c7:64:b2:b8:0d:a2:71: 95:0e:1a:ce:b1:de:58:10:76:56:0f:04:c9:8a:fd:27:78:c8: e6:16:e9:f2:d8:c4:ac:75:13:86:2f:18:bf:06:7d:91:c0:44: 8b:8c:0c:94:46:8d:1a:59:69:c3:b7:14:3a:b0:21:97:30:a2: ca:21:23:af:02:20:6f:35:b2:74:50:da:fd:32:c6:e7:94:8f: 2f:54:0e:75:93:5c:06:f3:0b:f1:8c:fe:47:0b:15:23:77:b6: 6a:69:d7:8a:8a:cf:b0:67:5f:cd:12:5a:b3:47:69:45:ea:c4: 95:f7:b2:de:67:eb:de:af:5c:05:23:bd:c4:98:1a:d7:12:89: 78:1f:d5:a4:ab:1a:e4:02:0b:13:f3:56:a3:fa:4c:54:00:7f: 4b:81:2a:94:bc:86:6f:b5:2a:bf:23:26:28:d3:9c:e5:2d:c3: 07:34:8c:9b:5f:42:1b:53:cb:f5:e7:7b:53:2b:c5:3d:2c:1e: f7:6e:f4:dd:18:33:b7:eb:ec:37:fc:f4:fa:1c:67:71:f9:15: 4d:53:f4:2c:90:5f:e2:09:74:2f:e0:4e:17:a0:06:04:0a:f3: 82:b2:5b:66:2d:d0:8f:9f:a5:ee:7a:d7:77:d7:30:7f:9f:10: 46:14:e1:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUxMjE4MjAyMzM3WhcNMjUxMjI1MjAyMzM3WjAYMRYwFAYD VQQDDA02OTQ0NjJjYS1mYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqr7jcs6sK1qkmvErU32p1767OQFVESCPt8/Y0q6FcCMnpt8XQaTcV6S6FK5 zZo5NHLi/XrvkzgYM1Ji0aANwB82XuUoLQai6VBMJ1PXFytmzMn0nZ2Q0Oh/1m+r HnbZUdGeseHj9M6bBg7Y0gorKuXUfoXfTTNCaCIrkOk/3cVTjtEYusA1xMC4JHlf MJeD8Vm5eT/owBbQGuz5i6ON8oZoWAPHed2BN2K8ah+IA6oD27QZqRID6pGXJLj1 T11OrEG4IacyKWJ8ViPFeMzXJetI4c3K82QJdBCoK9JoSV9+ERaZ9Ef+Bj0wwqdp FtVIOQ3WnKNfPWGXU4TfZtk8nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPIFeKk i4brZBXlUW3OvEfahaqbMB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP8tdeIFo/Q+nJ58dksrgNonGVDhrOsd5YEHZWDwTJiv0neMjmFuny 2MSsdROGLxi/Bn2RwESLjAyURo0aWWnDtxQ6sCGXMKLKISOvAiBvNbJ0UNr9Msbn lI8vVA51k1wG8wvxjP5HCxUjd7ZqadeKis+wZ1/NElqzR2lF6sSV97LeZ+ver1wF I73EmBrXEol4H9WkqxrkAgsT81aj+kxUAH9LgSqUvIZvtSq/IyYo05zlLcMHNIyb X0IbU8v153tTK8U9LB73bvTdGDO36+w3/PT6HGdx+RVNU/QskF/iCXQv4E4XoAYE CvOCsltmLdCPn6Xuetd31zB/nxBGFOGg -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:19 2025 by rpki-client