This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: xp0efbZQexT8pwqJJ0mvCOL3dDxIxaJss0FxcCFxhmM= Subject key identifier: 60:33:F4:C3:F3:92:78:9C:E8:0C:E9:00:27:BD:54:32:58:D6:D1:83 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 09EB Signing time: Thu 18 Dec 2025 19:01:33 +0000 Manifest this update: Thu 18 Dec 2025 19:01:32 +0000 Manifest next update: Thu 25 Dec 2025 19:01:32 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: W9VsbuhEmb9DyuQImpQJnowO1jZ+ZuZj8CUqocFSETs=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Dec 18 19:01:32 2025 GMT Not After : Dec 25 19:01:32 2025 GMT Subject: CN=69444f8c-790a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:dc:f5:f4:b6:09:1e:66:9b:d6:8a:ea:fe: 33:4d:bd:33:75:e2:70:e1:41:50:e2:52:67:7c:b6: 00:a7:5b:52:e7:a9:8d:86:05:90:91:6e:61:f7:60: 7a:c0:db:5a:d1:1b:90:0d:3c:dc:e4:ae:7a:93:4b: 31:a0:b0:b6:58:e4:f1:e1:9d:83:2e:32:04:52:27: 33:2d:ef:75:16:6d:8f:65:d0:8a:46:72:11:5c:75: 78:3d:8d:cd:b4:84:3b:9e:53:f2:5c:2d:60:9c:a2: 4b:67:3a:68:3f:18:a4:90:79:2a:da:16:b6:7a:54: 87:bb:6c:2b:2c:7e:e2:59:09:ed:4b:f9:b8:bd:12: e3:be:e1:c4:26:84:ef:09:60:64:88:69:94:c8:c5: 8d:2c:3a:2f:83:b3:66:42:05:31:3f:99:91:3c:26: c6:cb:90:7f:30:5b:17:e1:bd:ef:08:c4:6d:6c:f0: 32:d0:e5:54:0e:2c:5c:e3:09:e9:25:b4:93:87:0d: 5d:f5:59:a9:a3:56:96:eb:af:77:3d:5a:33:88:39: 81:d8:cd:48:55:38:74:2a:57:49:ba:b1:af:56:ed: 6a:f0:06:db:39:97:08:f4:c0:49:21:a8:71:64:dc: 43:8f:e0:24:3e:b6:40:09:a0:90:20:9f:08:3f:7f: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:F4:C3:F3:92:78:9C:E8:0C:E9:00:27:BD:54:32:58:D6:D1:83 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d9:40:fa:d4:32:f7:98:c3:ea:d1:e3:83:6d:1f:1b:30:35: ae:2c:72:1b:c1:8d:c5:86:bb:52:92:7f:15:4f:25:01:06:0f: 55:ca:c7:57:0e:0a:e2:39:07:61:fd:04:a5:61:78:b7:9f:05: d9:52:6b:a1:8a:0e:24:be:6e:05:f1:78:3b:00:c0:48:4c:44: d4:e1:7e:a3:9d:50:d9:4f:90:4a:3c:c8:81:ac:ff:2c:eb:a0: 59:75:bd:0a:c3:39:6f:14:c2:78:31:fe:30:61:e8:eb:d0:29: 9d:34:6b:d3:02:f3:c7:ea:94:b4:33:58:e9:18:a0:cb:21:93: d2:49:30:16:63:cb:51:2a:4e:98:ab:01:4a:ab:13:cc:ed:a3: ef:a0:21:0d:9c:51:79:3e:d0:c2:f1:09:6c:56:ca:38:fc:63: 29:6c:8e:b7:8a:f7:b0:12:34:5b:95:b0:ae:e5:c9:bb:b1:34: f8:9e:2b:51:f7:13:2e:9b:df:23:99:10:ea:ce:4e:49:a4:a5: 55:89:15:ae:1f:d5:bb:d0:0c:10:d5:de:37:54:96:cd:4b:68: f9:1d:45:bb:f7:62:03:10:11:44:ba:ff:fe:00:75:cd:a8:76: 9a:14:a3:ca:8a:34:45:9a:40:52:29:f8:57:08:77:32:72:d9: 2b:68:87:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUxMjE4MTkwMTMyWhcNMjUxMjI1MTkwMTMyWjAYMRYwFAYD VQQDDA02OTQ0NGY4Yy03OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh3fc9fS2CR5mm9aK6v4zTb0zdeJw4UFQ4lJnfLYAp1tS56mNhgWQkW5h92B6 wNta0RuQDTzc5K56k0sxoLC2WOTx4Z2DLjIEUiczLe91Fm2PZdCKRnIRXHV4PY3N tIQ7nlPyXC1gnKJLZzpoPxikkHkq2ha2elSHu2wrLH7iWQntS/m4vRLjvuHEJoTv CWBkiGmUyMWNLDovg7NmQgUxP5mRPCbGy5B/MFsX4b3vCMRtbPAy0OVUDixc4wnp JbSThw1d9Vmpo1aW6693PVoziDmB2M1IVTh0KldJurGvVu1q8AbbOZcI9MBJIahx ZNxDj+AkPrZACaCQIJ8IP38bmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAz9MPz knic6AzpACe9VDJY1tGDMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD2UD61DL3mMPq0eODbR8bMDWuLHIbwY3FhrtSkn8VTyUBBg9VysdX DgriOQdh/QSlYXi3nwXZUmuhig4kvm4F8Xg7AMBITETU4X6jnVDZT5BKPMiBrP8s 66BZdb0KwzlvFMJ4Mf4wYejr0CmdNGvTAvPH6pS0M1jpGKDLIZPSSTAWY8tRKk6Y qwFKqxPM7aPvoCENnFF5PtDC8QlsVso4/GMpbI63ivewEjRblbCu5cm7sTT4nitR 9xMum98jmRDqzk5JpKVViRWuH9W70AwQ1d43VJbNS2j5HUW792IDEBFEuv/+AHXN qHaaFKPKijRFmkBSKfhXCHcyctkraIfx -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:47 2025 by rpki-client