This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json) Hash identifier: wrw3CFu4yrfUisnS/C86cSZ6DKDDqCRxXJrbMAo4cPA= Subject key identifier: 6C:4F:DA:24:22:02:AE:CF:39:80:AA:AA:FE:97:F3:2D:9C:81:C8:3F Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 08EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft Manifest number: 08E1 Signing time: Thu 18 Dec 2025 19:56:32 +0000 Manifest this update: Thu 18 Dec 2025 19:56:32 +0000 Manifest next update: Thu 25 Dec 2025 19:56:32 +0000 Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: mD1y0aNmxcy4T9zt276hvEU06Xyy+xLbrMWAIZFG18g=) 2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: /a+ZA2ERE3wFJg9UM9vnT7hTqkW6cEzxlPnScilW2Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Dec 18 19:56:32 2025 GMT Not After : Dec 25 19:56:32 2025 GMT Subject: CN=69445c70-a64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:60:69:57:7c:c3:84:0d:3f:15:b1:90:14: fe:22:fa:07:b8:8b:d5:ec:2f:99:6b:d4:51:0f:4b: 82:32:58:0e:32:be:ee:1b:ae:8d:64:27:6a:8a:fd: b2:94:a7:7f:34:72:28:be:0e:fc:ef:4a:99:d4:30: 71:a7:aa:d3:14:fd:fe:2d:f3:9a:57:53:15:b7:c0: 75:8f:33:7b:ea:0b:d3:a5:27:88:15:8d:e3:0b:9d: 34:ed:d1:0d:38:29:5d:6a:07:fa:48:38:3a:a9:a1: ed:d0:a6:57:41:d1:59:94:b8:9b:d5:ec:19:4e:8d: dd:eb:6e:70:b4:b7:1e:71:64:f6:25:ea:3f:02:97: 6f:71:fe:fd:bf:0d:7d:80:f0:98:b7:3a:8c:6c:5b: fa:90:02:8c:0c:44:1c:c7:c7:bc:e6:b4:ac:e9:bd: 14:7c:8d:a4:ce:25:93:c6:22:5d:68:0a:23:2b:01: f4:23:7a:fc:54:90:13:44:56:59:3f:25:3b:0a:33: f6:9e:0f:74:c2:aa:54:db:b2:a3:bb:23:ca:f6:fc: 43:96:43:d5:cd:b1:4d:d4:4d:1f:a2:1d:82:c0:a0: 13:10:e2:3a:37:19:4c:95:7c:0c:5a:32:51:2e:0a: 8a:90:8f:de:6c:0b:d6:04:af:8d:16:4b:c0:18:32: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:DA:24:22:02:AE:CF:39:80:AA:AA:FE:97:F3:2D:9C:81:C8:3F X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:68:54:57:dd:0a:0e:4e:a0:6f:fc:a2:82:79:54:f1:c8:5e: 4c:10:cd:bc:e0:19:44:90:c7:a9:96:3b:7d:34:5d:7f:1e:f6: d4:73:62:26:2b:7a:ae:47:2f:52:70:9b:c2:76:40:c6:ac:6c: b5:4c:4b:7d:9e:87:d2:7b:9c:54:ca:78:ee:b3:c3:8a:0c:67: fb:5f:6f:9b:f9:bb:d8:38:50:96:83:c3:d6:91:0f:d1:79:a8: 40:f1:d7:f0:2b:cf:11:49:94:28:10:c2:7c:2b:14:f2:36:ae: 95:fe:ae:85:fd:9f:b9:d1:d1:db:f3:8b:ed:25:53:a3:d7:7d: 0e:59:68:14:93:92:54:1f:d0:84:31:6d:88:8a:f7:06:a6:39: 29:bf:b2:36:e8:f3:cb:5a:86:e6:9d:b1:26:71:7e:db:b5:b2: 7e:fc:fd:18:95:49:5d:a9:85:a5:c9:4f:e6:24:e9:c0:c7:cc: e5:52:cb:4c:a1:00:0b:0a:08:a3:32:64:3f:9e:49:3b:80:37: 99:35:8b:31:d6:b1:14:88:5e:cf:83:13:7b:a4:77:5c:fe:a9: 7c:ec:93:75:58:93:66:58:58:89:d9:24:65:44:67:e5:5d:46: 4f:e1:ac:ec:31:11:9b:78:d8:91:ee:fd:2c:b2:53:a8:78:97: 37:e1:a2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjUxMjE4MTk1NjMyWhcNMjUxMjI1MTk1NjMyWjAYMRYwFAYD VQQDDA02OTQ0NWM3MC1hNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L5gaVd8w4QNPxWxkBT+IvoHuIvV7C+Za9RRD0uCMlgOMr7uG66NZCdqiv2y lKd/NHIovg7870qZ1DBxp6rTFP3+LfOaV1MVt8B1jzN76gvTpSeIFY3jC5007dEN OCldagf6SDg6qaHt0KZXQdFZlLib1ewZTo3d625wtLcecWT2Jeo/Apdvcf79vw19 gPCYtzqMbFv6kAKMDEQcx8e85rSs6b0UfI2kziWTxiJdaAojKwH0I3r8VJATRFZZ PyU7CjP2ng90wqpU27KjuyPK9vxDlkPVzbFN1E0foh2CwKATEOI6NxlMlXwMWjJR LgqKkI/ebAvWBK+NFkvAGDId3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxP2iQi Aq7POYCqqv6X8y2cgcg/MB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtaFRX3QoOTqBv/KKCeVTxyF5MEM284BlEkMepljt9NF1/HvbUc2Im K3quRy9ScJvCdkDGrGy1TEt9nofSe5xUynjus8OKDGf7X2+b+bvYOFCWg8PWkQ/R eahA8dfwK88RSZQoEMJ8KxTyNq6V/q6F/Z+50dHb84vtJVOj130OWWgUk5JUH9CE MW2IivcGpjkpv7I26PPLWobmnbEmcX7btbJ+/P0YlUldqYWlyU/mJOnAx8zlUstM oQALCgijMmQ/nkk7gDeZNYsx1rEUiF7PgxN7pHdc/ql87JN1WJNmWFiJ2SRlRGfl XUZP4azsMRGbeNiR7v0sslOoeJc34aIR -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:22 2025 by rpki-client