This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: K4QaGLB2ZeQeSs8oBR8fsEaDf93x5E5VUfBd2h+tdXE= Subject key identifier: 5D:EC:EE:C3:5B:A8:2B:8E:EB:0B:29:57:6E:83:3B:FE:E2:50:12:DC Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 0209 Signing time: Sun 21 Dec 2025 01:41:07 +0000 Manifest this update: Sun 21 Dec 2025 01:41:07 +0000 Manifest next update: Sun 28 Dec 2025 01:41:07 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: bERE5bD3f4aWGeGvpzQzeEvrXNp3rCfPYiJhZpouanQ=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Dec 21 01:41:07 2025 GMT Not After : Dec 28 01:41:07 2025 GMT Subject: CN=69475033-b999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:2a:22:96:02:fe:85:e6:f8:25:34:8e:c3: de:d9:be:ef:1b:b4:ed:3c:a7:95:ca:96:02:ea:0e: 11:c7:7a:e6:33:51:5d:33:eb:3c:d6:b9:ab:27:1f: 7a:f7:99:32:b5:4d:27:92:5a:d3:91:65:af:ac:9d: 4d:d8:a3:6f:22:af:27:16:a9:5f:a2:f5:de:bb:3e: b5:3f:26:a0:fa:62:2b:ef:c5:19:02:55:aa:90:7d: aa:0e:c0:c4:e7:10:e8:8c:a0:12:3d:04:12:f3:2c: b8:f8:7a:d0:cc:e0:f3:37:b4:a3:85:7a:4e:de:7b: 4a:a8:7c:40:7f:1a:12:39:61:42:ea:b5:51:43:7d: 49:ad:f0:60:9f:35:98:71:1e:b9:cf:d7:2b:3b:9d: 8f:3a:70:ea:05:ec:7f:19:68:d9:f8:91:7c:f0:01: 29:f5:81:74:0e:83:5a:96:0b:bf:ff:a2:a0:04:69: 43:1e:7b:ca:1e:26:0e:f8:50:08:63:66:ce:7d:93: 36:5d:99:a1:73:af:03:a3:ab:1f:89:81:9a:cb:35: a1:db:95:f6:0a:31:98:9c:bb:ba:7a:fb:af:fe:6e: 2c:c5:ba:c5:37:6e:ff:8a:ac:08:ae:09:4f:5a:8a: cd:5d:90:b6:2f:3b:f0:2d:62:54:90:21:8a:98:65: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EC:EE:C3:5B:A8:2B:8E:EB:0B:29:57:6E:83:3B:FE:E2:50:12:DC X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c6:83:ea:bf:dd:d6:6a:0d:d2:8e:d9:5f:66:08:73:ce:e8: 7d:3d:c0:27:5f:8a:3d:40:74:8e:05:21:3e:13:f9:bc:7e:43: 54:a9:bb:52:9e:b9:05:af:36:ce:8f:9a:80:9c:d1:d2:a3:e2: 53:df:df:72:c3:8f:2b:39:3a:49:4a:3e:9e:45:bf:30:62:35: d4:fd:6a:86:62:18:bd:2f:35:76:ed:53:59:ac:5a:76:d0:ce: 1c:5b:f6:e8:13:aa:3b:cc:74:09:8a:b5:ce:96:ab:22:3e:a4: dd:33:20:16:1a:28:f8:18:3e:57:4b:40:ce:fa:66:1a:02:9e: 4a:c3:39:35:7b:0d:dc:d8:1a:6f:d6:a6:86:5f:cd:cc:98:1b: fa:22:12:31:b8:9e:ed:e5:43:4b:1c:7e:bb:15:28:95:a8:f5: fe:49:12:4b:36:a5:e6:0e:74:e1:02:b7:c6:16:e7:d0:6b:c3: fc:03:fa:68:33:10:d1:32:77:66:53:c8:c0:58:85:02:56:2d: 03:5f:f7:33:7f:45:30:ec:ad:b5:53:d0:e2:17:f6:d4:40:2c: 22:ac:33:e0:02:0b:50:a0:0a:c8:a2:21:87:e0:1c:43:05:ac: 47:b8:33:37:5a:fb:68:2c:b2:bc:9e:28:db:a4:bc:1c:3f:25: b0:35:5a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjUxMjIxMDE0MTA3WhcNMjUxMjI4MDE0MTA3WjAYMRYwFAYD VQQDDA02OTQ3NTAzMy1iOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpoqIpYC/oXm+CU0jsPe2b7vG7TtPKeVypYC6g4Rx3rmM1FdM+s81rmrJx96 95kytU0nklrTkWWvrJ1N2KNvIq8nFqlfovXeuz61Pyag+mIr78UZAlWqkH2qDsDE 5xDojKASPQQS8yy4+HrQzODzN7SjhXpO3ntKqHxAfxoSOWFC6rVRQ31JrfBgnzWY cR65z9crO52POnDqBex/GWjZ+JF88AEp9YF0DoNalgu//6KgBGlDHnvKHiYO+FAI Y2bOfZM2XZmhc68Do6sfiYGayzWh25X2CjGYnLu6evuv/m4sxbrFN27/iqwIrglP WorNXZC2LzvwLWJUkCGKmGWKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3s7sNb qCuO6wspV26DO/7iUBLcMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSxoPqv93Wag3SjtlfZghzzuh9PcAnX4o9QHSOBSE+E/m8fkNUqbtS nrkFrzbOj5qAnNHSo+JT399yw48rOTpJSj6eRb8wYjXU/WqGYhi9LzV27VNZrFp2 0M4cW/boE6o7zHQJirXOlqsiPqTdMyAWGij4GD5XS0DO+mYaAp5Kwzk1ew3c2Bpv 1qaGX83MmBv6IhIxuJ7t5UNLHH67FSiVqPX+SRJLNqXmDnThArfGFufQa8P8A/po MxDRMndmU8jAWIUCVi0DX/czf0Uw7K21U9DiF/bUQCwirDPgAgtQoArIoiGH4BxD BaxHuDM3WvtoLLK8nijbpLwcPyWwNVrv -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:30 2025 by rpki-client