This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: rzPcwo6fH2oioBI/XDvRuD5/EzC0kR85CUZXZHIrUcE= Subject key identifier: 04:8F:50:E7:04:68:6D:2C:29:92:6F:9E:A8:98:92:35:D3:2C:3C:96 Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 08F7 Signing time: Wed 24 Dec 2025 19:47:27 +0000 Manifest this update: Wed 24 Dec 2025 19:47:26 +0000 Manifest next update: Wed 31 Dec 2025 19:47:26 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: uGcVtzvArE6iGqtqbJt7T1YpUQnkkAsFZEeNJWzbQMU=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: PLkHHx8GaTekc9dmC5heFwXjJ3zz86/8Y8QSgJQ+mrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 19:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: Dec 24 19:47:26 2025 GMT Not After : Dec 31 19:47:26 2025 GMT Subject: CN=694c434f-ec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:ad:4f:25:1e:ce:a0:6a:5f:ba:5f:4b:cf: f6:79:7d:60:67:ad:1d:2f:c3:52:49:98:e9:f5:55: 52:05:f8:8a:49:d9:54:da:e9:42:68:13:2a:20:1b: ab:26:ca:46:66:43:79:16:75:74:fc:84:80:ba:d2: 6d:a8:7e:cb:e1:eb:37:a9:dc:82:89:aa:ff:f2:2a: c0:8b:57:eb:b5:1a:59:c4:36:ad:c4:31:47:8b:07: 9f:6f:d5:4f:fc:b0:7f:80:be:a2:dc:6d:26:5b:dc: 5e:0c:b7:6a:19:89:8d:a3:55:5e:45:0a:1e:ae:38: 5f:eb:2b:2c:be:63:44:1a:1e:58:22:de:75:2d:7a: 3f:e9:51:5d:fa:ee:c6:64:3f:42:e2:c7:e6:14:fe: a6:1c:ff:70:eb:04:a6:0c:fd:38:27:20:0e:34:83: d7:8c:ce:a0:9a:bf:02:bb:eb:b2:c4:f3:48:47:31: c0:c8:67:69:37:80:ae:42:5b:27:a2:6b:02:74:c6: ac:17:37:1e:b0:32:7c:a3:4b:9b:04:a8:a9:93:48: 75:00:f3:6f:01:43:f6:66:a7:37:a4:4e:78:ed:e3: ad:68:4d:c7:ff:8b:d7:d1:0d:50:17:9d:44:f7:27: ab:ab:e6:91:fe:44:1a:18:f8:8d:f7:3b:c8:b0:6f: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8F:50:E7:04:68:6D:2C:29:92:6F:9E:A8:98:92:35:D3:2C:3C:96 X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b6:91:53:55:1f:b0:fc:48:34:6d:4f:c9:38:49:f6:55:69: 1f:ef:52:8f:3e:c5:d0:c8:5b:ba:67:c8:d3:e9:02:b7:c1:4a: 62:4b:2d:1a:cb:8a:cd:73:8b:45:9e:02:a8:54:6a:68:f1:61: fe:2a:0b:fe:65:b6:cf:b9:d2:df:2b:c8:4a:cf:91:46:96:7c: ed:dc:90:39:42:1b:bb:9a:cd:fc:be:80:bf:4c:b6:6d:01:99: 11:9a:56:3b:57:62:32:c1:aa:52:39:ec:d0:4d:94:20:56:bc: ce:9b:16:e7:57:42:97:c0:eb:69:65:98:4c:27:03:67:89:88: 63:59:50:45:49:91:cc:ec:32:a4:4e:1e:17:b3:37:60:68:42: 02:a0:15:e0:fa:b0:62:56:04:f9:07:60:ef:fc:0f:e9:ca:5e: ae:f2:52:07:a9:a9:e5:68:ca:ad:dd:90:65:55:38:c2:6a:a0: 2e:5a:89:87:69:0f:ec:7e:d6:d1:62:56:0e:fa:47:78:10:ad: b4:b7:03:4e:17:61:05:a5:0e:9e:0e:ae:63:c7:67:25:3a:70: 68:48:51:66:dd:81:c2:97:93:0b:02:bc:27:70:74:fb:19:48: e6:a6:f4:4c:19:1e:a0:d8:cd:eb:f9:fb:d9:ac:ae:8a:03:c5: ed:33:2a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjUxMjI0MTk0NzI2WhcNMjUxMjMxMTk0NzI2WjAYMRYwFAYD VQQDDA02OTRjNDM0Zi1lYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGStTyUezqBqX7pfS8/2eX1gZ60dL8NSSZjp9VVSBfiKSdlU2ulCaBMqIBur JspGZkN5FnV0/ISAutJtqH7L4es3qdyCiar/8irAi1frtRpZxDatxDFHiwefb9VP /LB/gL6i3G0mW9xeDLdqGYmNo1VeRQoerjhf6yssvmNEGh5YIt51LXo/6VFd+u7G ZD9C4sfmFP6mHP9w6wSmDP04JyAONIPXjM6gmr8Cu+uyxPNIRzHAyGdpN4CuQlsn omsCdMasFzcesDJ8o0ubBKipk0h1APNvAUP2Zqc3pE547eOtaE3H/4vX0Q1QF51E 9yerq+aR/kQaGPiN9zvIsG9ZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASPUOcE aG0sKZJvnqiYkjXTLDyWMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2tpFTVR+w/Eg0bU/JOEn2VWkf71KPPsXQyFu6Z8jT6QK3wUpiSy0a y4rNc4tFngKoVGpo8WH+Kgv+ZbbPudLfK8hKz5FGlnzt3JA5Qhu7ms38voC/TLZt AZkRmlY7V2IywapSOezQTZQgVrzOmxbnV0KXwOtpZZhMJwNniYhjWVBFSZHM7DKk Th4XszdgaEICoBXg+rBiVgT5B2Dv/A/pyl6u8lIHqanlaMqt3ZBlVTjCaqAuWomH aQ/sftbRYlYO+kd4EK20twNOF2EFpQ6eDq5jx2clOnBoSFFm3YHCl5MLArwncHT7 GUjmpvRMGR6g2M3r+fvZrK6KA8XtMypr -----END CERTIFICATE-----Generated at Wed Dec 24 23:21:39 2025 by rpki-client