This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: hfeQKx2J2Px+UFWT9V1A460YvONocb/ePcdXiTqmQe8= Subject key identifier: 0D:47:60:7B:84:3B:2E:81:B8:5F:DA:73:2F:AC:9B:61:EA:27:47:8B Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1A08 Signing time: Sat 20 Dec 2025 17:01:29 +0000 Manifest this update: Sat 20 Dec 2025 17:01:29 +0000 Manifest next update: Sat 27 Dec 2025 17:01:29 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: mZ6eRolh5gLrEbyxucMu4VuMehH1OsMglUDJEOJEixY=) 2: 52703058B29211F0A466572FC4F9AE02.roa (hash: EAnnXLdoBap6sg9ETuzgpTeeWcNHp5G/1/Gi4frw3fU=) 3: A460F59AB30111F0870CBA50C4F9AE02.roa (hash: OniChjyeEXj5cVvVwWs//hBr0jYalsY+nH9sGBE3ExQ=) 4: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: I0UwUhNOM9UD9C8spTt2KELyT5sspCh/FuCrUf/DLxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Dec 20 17:01:29 2025 GMT Not After : Dec 27 17:01:29 2025 GMT Subject: CN=6946d669-1830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:5d:93:05:8e:19:31:00:2a:34:f1:d2:99: a7:d3:48:aa:20:d3:73:03:e1:2f:9f:33:d7:de:be: f9:70:e6:f5:97:25:0e:c7:09:11:65:c1:a2:8d:15: 8c:80:3b:62:ac:11:03:d9:f1:60:fb:57:05:a1:71: 21:9f:3e:71:87:6e:d2:e4:0f:34:62:a1:00:04:4f: 7c:fb:de:40:aa:6e:d7:32:54:50:d2:c3:68:bb:6e: 32:d4:d1:95:da:28:7c:64:5f:14:4e:22:89:f4:0d: 8c:11:96:5b:9b:c2:66:05:25:9c:85:57:e8:96:d2: 19:1d:be:5a:0c:a5:8c:71:9d:11:c1:dc:b3:81:f9: 00:b8:74:e5:06:ad:73:87:f4:22:db:39:a6:bf:27: 28:db:4b:41:a1:01:99:d4:64:ad:b9:bf:56:6e:24: c3:a5:90:20:a0:50:5f:e9:0c:b4:97:a6:3d:69:3f: bd:c7:7a:bc:a6:f1:aa:7e:3b:ae:29:6f:5e:b2:37: a7:68:e1:52:12:f0:47:01:bb:8e:fe:c2:35:3e:d8: 5c:6b:8a:c7:dd:29:b1:7c:8c:d7:8e:13:16:c6:d6: c9:73:fe:52:0e:b4:b7:bb:40:ab:22:ea:4a:45:97: 16:f9:d4:19:16:2e:a2:6f:19:d5:17:04:88:e2:a0: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:47:60:7B:84:3B:2E:81:B8:5F:DA:73:2F:AC:9B:61:EA:27:47:8B X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1a:66:01:82:32:0c:9f:62:69:5f:83:cd:ed:dd:e4:cf:04: 1c:41:b8:6e:cb:af:37:94:92:e7:87:ae:68:ca:68:03:9f:2b: 43:7a:13:85:30:60:f9:84:a3:ad:33:47:7a:22:68:ac:ec:ea: 21:1d:59:91:bb:1b:aa:de:55:30:a1:d4:ce:2d:d6:e3:76:ff: df:ea:41:75:e0:06:e9:29:ac:76:2c:e3:6b:6d:1b:09:54:de: c8:5e:83:3a:94:f3:30:68:c6:b9:71:57:72:8d:19:d2:10:c6: 0a:48:30:8e:56:cc:e6:17:c3:07:f6:8e:ee:73:29:36:67:10: 65:34:ef:df:20:8a:b4:4d:48:08:3c:c7:c3:1b:99:8c:36:df: 6d:68:7e:96:58:82:4f:73:0c:98:fb:99:0a:80:76:2d:47:73: 9d:70:ec:c2:86:23:72:dd:2e:06:73:e5:0f:c1:ea:47:ed:a1: 3a:72:c2:2e:62:d5:88:7c:03:65:92:00:c5:49:ab:29:a1:a7: 8d:ac:3c:6d:8f:ba:23:b4:bb:49:c2:0f:6d:db:d4:47:71:10: ee:26:89:f2:52:19:5d:de:3d:f2:80:7c:4e:8c:44:ea:ad:0e: f3:6f:84:10:68:cb:03:5b:05:2e:ba:a7:82:5a:59:b4:22:99: 53:55:e8:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUxMjIwMTcwMTI5WhcNMjUxMjI3MTcwMTI5WjAYMRYwFAYD VQQDDA02OTQ2ZDY2OS0xODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/ldkwWOGTEAKjTx0pmn00iqINNzA+EvnzPX3r75cOb1lyUOxwkRZcGijRWM gDtirBED2fFg+1cFoXEhnz5xh27S5A80YqEABE98+95Aqm7XMlRQ0sNou24y1NGV 2ih8ZF8UTiKJ9A2MEZZbm8JmBSWchVfoltIZHb5aDKWMcZ0RwdyzgfkAuHTlBq1z h/Qi2zmmvyco20tBoQGZ1GStub9WbiTDpZAgoFBf6Qy0l6Y9aT+9x3q8pvGqfjuu KW9esjenaOFSEvBHAbuO/sI1Pthca4rH3SmxfIzXjhMWxtbJc/5SDrS3u0CrIupK RZcW+dQZFi6ibxnVFwSI4qCrcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1HYHuE Oy6BuF/acy+sm2HqJ0eLMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqGmYBgjIMn2JpX4PN7d3kzwQcQbhuy683lJLnh65oymgDnytDehOF MGD5hKOtM0d6Imis7OohHVmRuxuq3lUwodTOLdbjdv/f6kF14AbpKax2LONrbRsJ VN7IXoM6lPMwaMa5cVdyjRnSEMYKSDCOVszmF8MH9o7ucyk2ZxBlNO/fIIq0TUgI PMfDG5mMNt9taH6WWIJPcwyY+5kKgHYtR3OdcOzChiNy3S4Gc+UPwepH7aE6csIu YtWIfANlkgDFSaspoaeNrDxtj7ojtLtJwg9t29RHcRDuJonyUhld3j3ygHxOjETq rQ7zb4QQaMsDWwUuuqeCWlm0IplTVehO -----END CERTIFICATE-----Generated at Sun Dec 21 21:33:58 2025 by rpki-client