This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: gdJG4phf31TJBVbXFjWynAr64woVRbKVsNtP9gPHs/M= Subject key identifier: 38:62:8C:39:6A:CF:34:41:6F:43:26:C6:D6:2F:CE:3E:54:B2:94:CD Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 0502 Signing time: Sat 20 Dec 2025 15:42:35 +0000 Manifest this update: Sat 20 Dec 2025 15:42:34 +0000 Manifest next update: Sat 27 Dec 2025 15:42:34 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: HkquJigECJ3ceEMbYVinWmae3aLhAFKXBE18EV85b0E=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Dec 20 15:42:34 2025 GMT Not After : Dec 27 15:42:34 2025 GMT Subject: CN=6946c3eb-ab4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:f8:78:e9:7e:62:77:ac:7e:db:29:bd:f9: 36:88:f5:db:cb:38:f1:5f:49:a8:31:f4:6d:14:a3: f9:76:29:8d:0c:d8:92:96:16:a7:5d:a7:3d:3f:97: 2d:c3:26:10:c9:d0:b5:87:7d:33:7b:85:f6:3f:25: 7f:4f:77:3a:29:cc:fa:1c:15:cb:92:30:e7:75:14: 5a:cb:79:d4:18:f7:91:a0:5b:a2:1e:5c:4d:df:e8: bc:0f:0f:9e:bf:ab:23:f1:4e:57:ef:a6:bb:9d:62: 75:59:75:e7:d9:cc:06:50:52:21:77:04:ef:36:6f: de:c7:68:bd:a9:d4:2f:57:47:b3:9d:96:fc:d7:42: ad:86:bd:fa:12:ee:4f:3a:71:35:45:72:67:69:77: b8:e9:00:d9:44:df:40:c5:8b:d7:11:3f:c0:d4:39: bb:16:51:e5:82:3b:80:5d:f8:14:46:dc:e2:57:90: 25:37:39:dd:25:b4:84:fb:42:3d:76:dc:51:14:33: f7:75:d2:c7:8e:1c:4d:47:89:c0:28:bb:80:db:20: 09:4a:34:21:c7:bf:8c:e4:45:d2:f4:fe:85:dc:f4: 12:93:2f:66:d1:00:0a:5b:e8:14:1e:4a:03:df:99: 83:e2:3a:82:ec:c5:3e:d6:ba:fe:36:63:84:4e:ad: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:62:8C:39:6A:CF:34:41:6F:43:26:C6:D6:2F:CE:3E:54:B2:94:CD X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d3:b1:35:3d:07:05:c2:a2:67:d8:25:4e:0b:0e:e0:d4:85: 83:1e:7d:e9:1a:0a:86:15:aa:20:be:76:88:84:45:a7:ba:c4: 06:53:10:34:af:97:0d:14:46:41:99:fb:82:b2:2c:be:b5:a3: ac:cd:74:c2:ac:17:14:59:9b:49:a2:b9:e3:f5:29:63:fc:3f: 49:92:67:ee:a4:64:68:b0:54:1b:45:18:34:87:da:2b:7d:dd: 19:94:e8:f1:18:b9:c8:c9:42:f3:a5:be:c2:42:80:3a:05:a9: ea:c6:38:d4:30:10:ad:95:dd:ad:94:e3:6f:e0:ff:6a:9a:1c: e4:4c:c6:3b:f8:dc:61:08:03:a9:e9:34:75:f5:fe:5e:be:24: e8:17:5a:69:9b:cc:9e:f9:50:f9:21:ea:38:34:99:ef:72:3f: 80:23:b4:c3:03:f6:f1:65:a1:f7:52:49:8a:1c:e0:51:5e:e7: 48:00:85:4b:87:c6:ce:45:24:83:21:f5:99:24:27:e3:33:ac: 44:ee:51:2d:59:81:54:ce:0b:51:40:82:49:27:80:f9:79:30: 9a:e1:95:af:7e:75:d1:a1:01:4a:4e:07:c6:b4:5b:04:31:c9: 52:34:32:7d:e1:87:55:9e:7c:4d:41:83:2b:42:9c:d4:e2:da: 3a:8c:7a:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUxMjIwMTU0MjM0WhcNMjUxMjI3MTU0MjM0WjAYMRYwFAYD VQQDDA02OTQ2YzNlYi1hYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXP4eOl+Ynesftspvfk2iPXbyzjxX0moMfRtFKP5dimNDNiSlhanXac9P5ct wyYQydC1h30ze4X2PyV/T3c6Kcz6HBXLkjDndRRay3nUGPeRoFuiHlxN3+i8Dw+e v6sj8U5X76a7nWJ1WXXn2cwGUFIhdwTvNm/ex2i9qdQvV0eznZb810Kthr36Eu5P OnE1RXJnaXe46QDZRN9AxYvXET/A1Dm7FlHlgjuAXfgURtziV5AlNzndJbSE+0I9 dtxRFDP3ddLHjhxNR4nAKLuA2yAJSjQhx7+M5EXS9P6F3PQSky9m0QAKW+gUHkoD 35mD4jqC7MU+1rr+NmOETq3gQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhijDlq zzRBb0MmxtYvzj5UspTNMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB407E1PQcFwqJn2CVOCw7g1IWDHn3pGgqGFaogvnaIhEWnusQGUxA0 r5cNFEZBmfuCsiy+taOszXTCrBcUWZtJornj9Slj/D9JkmfupGRosFQbRRg0h9or fd0ZlOjxGLnIyULzpb7CQoA6BanqxjjUMBCtld2tlONv4P9qmhzkTMY7+NxhCAOp 6TR19f5eviToF1ppm8ye+VD5Ieo4NJnvcj+AI7TDA/bxZaH3UkmKHOBRXudIAIVL h8bORSSDIfWZJCfjM6xE7lEtWYFUzgtRQIJJJ4D5eTCa4ZWvfnXRoQFKTgfGtFsE MclSNDJ94YdVnnxNQYMrQpzU4to6jHru -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:59 2025 by rpki-client