This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: RE4FscuPlSlV/FJQ7/2HvQ8ZLTQtUBwbVOmjBY8K4I4= Subject key identifier: 95:9E:63:CE:9B:2E:A2:31:01:0F:D6:67:87:61:96:B3:6A:06:6F:E1 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 01CA Signing time: Mon 29 Dec 2025 02:08:48 +0000 Manifest this update: Mon 29 Dec 2025 02:08:48 +0000 Manifest next update: Mon 05 Jan 2026 02:08:48 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: 2OnYhAKsBK/mURSQk4MgHT7KdCoJ0K30MwLmKNlMQfs=) 2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: UyfMMb1+MxfY9sz24UI+SyQxwGOXE8nJHXlCf8yhy2I=) 3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: d0hrWabvEDExci5t6WU7rsD4gdFR7O4tRXZR37UM1GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Dec 29 02:08:48 2025 GMT Not After : Jan 5 02:08:48 2026 GMT Subject: CN=6951e2b0-6c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:7b:61:d3:81:e2:b0:4e:99:bb:f5:60:12: 5e:33:01:2f:82:34:4c:80:a9:90:e2:70:a9:90:dd: 86:ed:11:2e:18:85:97:06:31:a9:c8:52:83:c3:7d: cb:38:b1:67:88:f2:e4:68:33:d8:a9:5b:6b:7f:a2: a8:2e:0e:85:e4:ac:00:32:5e:ba:d0:14:fe:61:24: 6c:a0:47:05:ce:c7:89:ed:8c:d3:9e:88:7f:90:6b: da:68:ab:4f:d2:a0:a7:82:94:84:63:06:7c:17:3d: 55:43:de:2c:17:ae:3b:d4:de:36:e6:29:8e:7c:ae: 11:9b:67:de:37:09:94:5a:16:98:87:0a:2b:aa:7b: 7a:bf:d7:0a:ce:fb:b6:8d:e9:f3:7a:e6:b4:9f:bc: 6c:d6:21:df:84:6d:bb:89:f6:2f:bc:37:e7:9a:b0: 50:2e:28:a1:61:58:b2:37:bb:e6:67:e8:f5:2d:58: cb:fe:62:b4:df:63:16:a6:75:fb:a8:a6:b1:6e:de: 53:39:55:63:bb:ba:09:4c:6a:1d:61:01:af:3e:18: 63:84:04:80:db:a4:fb:e8:d4:df:e8:b7:84:b3:d2: 76:9c:67:30:0d:ad:91:5a:33:06:c3:e0:1e:59:99: 87:c4:a7:2d:47:8c:82:a5:b8:a6:16:92:6a:b7:bf: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:63:CE:9B:2E:A2:31:01:0F:D6:67:87:61:96:B3:6A:06:6F:E1 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f8:50:59:76:c5:d4:b0:5e:b8:32:42:bf:85:0a:a3:49:99: 7c:da:4f:43:87:14:36:6a:a9:88:18:f8:b1:c3:77:8b:db:23: bf:bd:5d:af:3f:10:06:5b:65:53:be:db:52:5d:1e:b1:8e:55: f4:5e:16:68:72:cf:cc:e1:8e:71:87:5d:0f:54:19:cc:b8:87: 0d:ed:32:10:d2:73:e9:03:30:7d:98:13:a2:89:96:cc:24:42: 05:66:5a:a8:bd:ff:fe:47:dd:80:15:df:cd:85:f7:b9:b0:53: ec:d9:83:6c:33:07:96:08:c5:e9:95:93:f8:25:d1:b9:19:35: 21:18:92:26:e0:3b:34:0c:c5:92:1c:12:17:59:5d:30:a7:7c: 49:48:4d:ff:93:3c:d8:67:2f:a2:4b:54:f5:87:3d:6c:83:bc: 1a:fe:40:bc:9c:45:b5:16:9f:21:e2:55:06:f3:c0:5b:98:e6: 80:cd:92:b3:49:20:96:97:c6:50:05:f7:2b:21:dd:ff:14:fa: 47:56:a0:fc:02:41:8b:9c:cd:98:a6:53:72:e4:1e:12:12:55: ae:e0:01:e4:14:fb:9b:82:2c:1a:b0:1f:8d:c8:69:93:17:a2: 81:b8:9a:86:48:38:ee:0a:51:75:16:a8:f4:b7:1e:44:f1:f9: d8:9c:da:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUxMjI5MDIwODQ4WhcNMjYwMTA1MDIwODQ4WjAYMRYwFAYD VQQDDA02OTUxZTJiMC02Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr197YdOB4rBOmbv1YBJeMwEvgjRMgKmQ4nCpkN2G7REuGIWXBjGpyFKDw33L OLFniPLkaDPYqVtrf6KoLg6F5KwAMl660BT+YSRsoEcFzseJ7YzTnoh/kGvaaKtP 0qCngpSEYwZ8Fz1VQ94sF6471N425imOfK4Rm2feNwmUWhaYhworqnt6v9cKzvu2 jenzeua0n7xs1iHfhG27ifYvvDfnmrBQLiihYViyN7vmZ+j1LVjL/mK032MWpnX7 qKaxbt5TOVVju7oJTGodYQGvPhhjhASA26T76NTf6LeEs9J2nGcwDa2RWjMGw+Ae WZmHxKctR4yCpbimFpJqt7+PDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWeY86b LqIxAQ/WZ4dhlrNqBm/hMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR+FBZdsXUsF64MkK/hQqjSZl82k9DhxQ2aqmIGPixw3eL2yO/vV2v PxAGW2VTvttSXR6xjlX0XhZocs/M4Y5xh10PVBnMuIcN7TIQ0nPpAzB9mBOiiZbM JEIFZlqovf/+R92AFd/Nhfe5sFPs2YNsMweWCMXplZP4JdG5GTUhGJIm4Ds0DMWS HBIXWV0wp3xJSE3/kzzYZy+iS1T1hz1sg7wa/kC8nEW1Fp8h4lUG88BbmOaAzZKz SSCWl8ZQBfcrId3/FPpHVqD8AkGLnM2YplNy5B4SElWu4AHkFPubgiwasB+NyGmT F6KBuJqGSDjuClF1Fqj0tx5E8fnYnNpo -----END CERTIFICATE-----Generated at Mon Dec 29 06:20:26 2025 by rpki-client