This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: X888dkjVbUc6UtIwFNZWJmqwKXC4PpZncSTgPy4J6W4= Subject key identifier: 7F:3C:B3:A2:97:20:99:89:2B:8B:7A:54:7B:05:98:9C:F3:80:FA:97 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 08FD Signing time: Sat 20 Dec 2025 19:45:46 +0000 Manifest this update: Sat 20 Dec 2025 19:45:45 +0000 Manifest next update: Sat 27 Dec 2025 19:45:45 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: cX4+U3A/+EJZ8skcrIA3G2TBCzOuVwX+OAwz64m+r7w=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: f4udCcisFsQWGXJxlj4yAW3MNSfW4g1HYUDDKGCbXqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Dec 20 19:45:45 2025 GMT Not After : Dec 27 19:45:45 2025 GMT Subject: CN=6946fcea-fb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:d7:18:07:aa:3c:fa:12:da:4f:da:20:3b: 16:08:0c:bf:07:62:bc:75:04:70:ba:6b:0e:95:94: 99:bb:7e:14:0d:36:2a:18:eb:ec:b2:99:ba:18:51: 5c:d5:22:11:81:b4:95:98:e5:86:10:4c:9f:42:64: 57:d3:3a:39:17:e3:d1:e2:ec:98:c9:51:26:3f:4f: 12:1f:c7:7d:05:04:3a:16:ab:a6:be:37:61:10:78: dd:ad:9e:70:6b:9b:f4:53:27:c6:15:f3:db:67:df: 0c:b3:83:95:ba:ea:19:76:be:c3:69:57:d4:64:2b: a0:31:11:dd:2f:f2:88:17:44:6c:9d:9d:0b:d2:7b: 53:ef:c9:ad:0e:fc:a8:a2:e3:68:dd:a0:25:8b:19: 6a:9d:e3:2e:55:c0:1d:df:fe:9c:7a:f3:5b:c1:d9: ab:f9:03:e8:f6:ac:59:70:94:45:6c:01:26:39:43: e4:b7:65:10:49:b5:11:83:69:90:8f:a9:a1:df:e0: 45:22:6d:fb:e4:9b:72:ac:04:fd:1c:e6:d7:7a:a7: 33:58:ca:2c:d3:d3:30:a0:33:05:ac:72:9b:48:39: e6:ea:f1:9a:7a:81:74:e3:1c:c1:bf:c6:e5:4c:27: 5d:03:66:88:ab:52:45:ac:1b:e3:8f:a8:60:7d:e0: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:B3:A2:97:20:99:89:2B:8B:7A:54:7B:05:98:9C:F3:80:FA:97 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:32:e7:85:d0:16:20:fb:06:8a:ab:9e:d3:75:f6:55:de: 42:e1:4a:96:1a:f7:b0:5c:ca:60:18:bd:69:18:eb:3f:1c:a1: 55:a2:07:d2:7f:38:05:ae:4b:5a:a6:a1:22:89:e3:88:c5:42: f2:92:20:b0:70:c3:10:48:2b:eb:83:b4:2a:c1:b3:51:c5:b6: 04:82:70:78:de:99:66:b5:4e:c4:4b:28:c9:90:46:f6:f3:00: 29:cf:ac:49:1a:da:77:e9:ca:55:21:73:60:cc:33:ed:9e:15: 44:35:40:e5:ca:dc:43:9d:52:47:c6:20:50:34:45:35:a2:fc: b8:20:3d:d2:ad:a1:7a:73:d9:ba:05:2e:5e:89:e0:59:39:47: bc:4c:d6:57:dc:be:d8:80:d7:72:db:e4:8d:a1:a9:84:a8:b9: 8e:14:ac:fd:41:6e:7d:a0:e1:db:7a:7f:c5:80:40:59:a5:05: e3:1a:bc:5e:35:a6:88:13:c1:75:74:99:f8:ce:a4:1c:01:60: 49:2b:d0:d3:8c:48:78:84:13:70:f1:c9:c1:92:82:c8:b4:f8: 62:1f:db:ab:95:1b:15:39:02:90:c7:b6:85:c5:6e:b5:78:47: ab:d1:88:03:03:3f:20:5f:3e:54:7a:e9:0e:5c:62:72:4c:c7: 87:4e:3c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjUxMjIwMTk0NTQ1WhcNMjUxMjI3MTk0NTQ1WjAYMRYwFAYD VQQDDA02OTQ2ZmNlYS1mYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4TXGAeqPPoS2k/aIDsWCAy/B2K8dQRwumsOlZSZu34UDTYqGOvsspm6GFFc 1SIRgbSVmOWGEEyfQmRX0zo5F+PR4uyYyVEmP08SH8d9BQQ6FqumvjdhEHjdrZ5w a5v0UyfGFfPbZ98Ms4OVuuoZdr7DaVfUZCugMRHdL/KIF0RsnZ0L0ntT78mtDvyo ouNo3aAlixlqneMuVcAd3/6cevNbwdmr+QPo9qxZcJRFbAEmOUPkt2UQSbURg2mQ j6mh3+BFIm375JtyrAT9HObXeqczWMos09MwoDMFrHKbSDnm6vGaeoF04xzBv8bl TCddA2aIq1JFrBvjj6hgfeBU2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH88s6KX IJmJK4t6VHsFmJzzgPqXMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABDzLnhdAWIPsGique03X2Vd5C4UqWGvewXMpgGL1pGOs/HKFVogfS fzgFrktapqEiieOIxULykiCwcMMQSCvrg7QqwbNRxbYEgnB43plmtU7ESyjJkEb2 8wApz6xJGtp36cpVIXNgzDPtnhVENUDlytxDnVJHxiBQNEU1ovy4ID3SraF6c9m6 BS5eieBZOUe8TNZX3L7YgNdy2+SNoamEqLmOFKz9QW59oOHben/FgEBZpQXjGrxe NaaIE8F1dJn4zqQcAWBJK9DTjEh4hBNw8cnBkoLItPhiH9urlRsVOQKQx7aFxW61 eEer0YgDAz8gXz5UeukOXGJyTMeHTjy6 -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:31 2025 by rpki-client