This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: 2U/Gl6bTx/2nuJEmADVu/4ERJPi9JWDo1z+RywPdEFc= Subject key identifier: 32:E7:AD:A3:36:6E:0D:77:B0:8D:55:61:0A:E2:04:61:80:6C:E6:A8 Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 34F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 34F1 Signing time: Fri 26 Dec 2025 15:09:12 +0000 Manifest this update: Fri 26 Dec 2025 15:09:11 +0000 Manifest next update: Fri 02 Jan 2026 15:09:11 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: 2b+1rtmW/uMuHXEVp3fVU6WN1wwv8R2h66E5la8f6Ts=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 15:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Dec 26 15:09:11 2025 GMT Not After : Jan 2 15:09:11 2026 GMT Subject: CN=694ea517-c65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:f8:2b:f2:76:25:20:06:e5:95:67:32:4e: 39:1f:a4:39:9d:11:9b:7a:b4:f7:29:9b:42:4a:06: 4b:ca:71:ff:d8:d1:d4:cc:22:da:94:d9:26:74:82: 07:14:22:5b:0d:30:5f:16:df:1c:47:71:d4:92:2b: 72:94:88:57:03:0e:08:2a:46:07:4f:97:67:65:ac: f1:87:48:da:2b:8f:94:0c:6d:06:9c:1b:f5:93:b2: ed:0f:01:f2:4f:c6:9e:8e:4f:41:40:15:f8:60:5e: f9:c0:7e:52:eb:88:99:d4:82:3b:60:10:ae:88:16: bd:da:6a:dc:9d:f6:60:35:59:5f:ee:58:54:e0:98: 64:d6:dd:eb:68:de:41:c7:c4:51:b7:ae:34:f5:be: 6f:56:89:35:b0:a2:07:89:89:34:70:8c:86:e6:a6: 1d:2b:dd:2e:8b:d3:06:9d:72:a2:70:83:79:2f:28: 50:9d:da:65:cb:3a:8e:6c:c4:dc:0b:98:4c:91:ee: 91:c8:2b:cf:5b:07:7d:66:91:ea:9f:e2:80:11:ae: 81:a5:73:c7:01:7f:02:c7:75:b0:80:69:e7:94:d4: 8e:03:18:3d:43:10:91:90:4c:8d:91:4a:d8:4f:bf: e1:50:80:d2:1c:8d:79:65:33:e2:b4:86:e6:a4:e1: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:AD:A3:36:6E:0D:77:B0:8D:55:61:0A:E2:04:61:80:6C:E6:A8 X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:64:67:e6:19:55:9e:f2:8e:af:9b:00:8d:ca:5a:cf:06:7b: 81:d4:d1:0d:2f:65:01:34:26:0b:58:19:8c:e6:8f:65:f9:5a: ff:84:3e:6e:ff:1f:2b:81:fa:a4:39:5f:0e:e4:ed:7b:98:87: 70:14:73:9a:e5:cf:05:b3:dc:bb:6d:88:89:e8:ed:80:90:05: fc:ff:27:74:67:86:f2:6a:a5:84:d6:98:d9:3b:5e:8d:05:1f: d2:f0:ce:18:4b:e6:b6:4d:08:72:90:3c:af:a8:1e:ae:f2:53: 85:32:c6:32:19:20:16:60:bf:4d:76:33:9e:6a:c5:fc:aa:d0: 5a:dd:8d:42:34:37:e1:d9:25:04:43:1a:8a:f5:29:ac:12:bb: 26:2e:62:a2:de:37:a8:49:c1:3e:6d:fd:a0:de:b1:69:df:11: aa:95:4e:4a:8f:75:59:1e:a6:69:a5:f5:9d:51:77:e8:3b:6f: 40:da:c2:d0:4e:28:c3:af:68:a8:a4:95:f3:9d:ec:88:f5:95: ee:5a:b9:bc:bc:ae:54:e8:78:64:d8:7c:bc:1a:c6:42:94:72: 2b:39:a5:22:ae:c5:60:f0:a1:4f:1a:d9:db:ab:62:24:b0:27: 9c:2e:ac:5b:b2:3a:54:ba:f5:fc:c3:e9:4f:1c:07:6d:93:85: d7:12:8e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUxMjI2MTUwOTExWhcNMjYwMTAyMTUwOTExWjAYMRYwFAYD VQQDDA02OTRlYTUxNy1jNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujD4K/J2JSAG5ZVnMk45H6Q5nRGberT3KZtCSgZLynH/2NHUzCLalNkmdIIH FCJbDTBfFt8cR3HUkitylIhXAw4IKkYHT5dnZazxh0jaK4+UDG0GnBv1k7LtDwHy T8aejk9BQBX4YF75wH5S64iZ1II7YBCuiBa92mrcnfZgNVlf7lhU4Jhk1t3raN5B x8RRt6409b5vVok1sKIHiYk0cIyG5qYdK90ui9MGnXKicIN5LyhQndplyzqObMTc C5hMke6RyCvPWwd9ZpHqn+KAEa6BpXPHAX8Cx3WwgGnnlNSOAxg9QxCRkEyNkUrY T7/hUIDSHI15ZTPitIbmpOGSGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLnraM2 bg13sI1VYQriBGGAbOaoMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmZGfmGVWe8o6vmwCNylrPBnuB1NENL2UBNCYLWBmM5o9l+Vr/hD5u /x8rgfqkOV8O5O17mIdwFHOa5c8Fs9y7bYiJ6O2AkAX8/yd0Z4byaqWE1pjZO16N BR/S8M4YS+a2TQhykDyvqB6u8lOFMsYyGSAWYL9NdjOeasX8qtBa3Y1CNDfh2SUE QxqK9SmsErsmLmKi3jeoScE+bf2g3rFp3xGqlU5Kj3VZHqZppfWdUXfoO29A2sLQ TijDr2iopJXzneyI9ZXuWrm8vK5U6Hhk2Hy8GsZClHIrOaUirsVg8KFPGtnbq2Ik sCecLqxbsjpUuvX8w+lPHAdtk4XXEo4y -----END CERTIFICATE-----Generated at Sun Dec 28 00:07:10 2025 by rpki-client