This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: XDKnHadmq5ugh3+q4SjhviaudrjpyRGzNOeng+f8f0k= Subject key identifier: F9:02:96:85:94:D1:5C:16:3B:63:D4:5E:27:89:A8:F0:5C:00:CF:D2 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 3501 Signing time: Sat 20 Dec 2025 14:41:45 +0000 Manifest this update: Sat 20 Dec 2025 14:41:44 +0000 Manifest next update: Sat 27 Dec 2025 14:41:44 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: 1GzKufm5rYF4dKjQZSD1SFUBme6PI8DzF1nHs2mu2WI=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: gFJk3bH7mXlCaj14z9kV9xuGKxMKaTna9ngpZWUJXOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13584 (0x3510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Dec 20 14:41:44 2025 GMT Not After : Dec 27 14:41:44 2025 GMT Subject: CN=6946b5a9-b643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:d5:dc:ba:44:2a:52:52:9c:72:71:5a:5e: 97:c9:1a:34:1a:54:92:f3:db:38:ac:fb:33:4b:eb: 8f:6c:ae:54:0f:f4:23:4a:f5:7b:d7:ed:e3:d7:99: f2:74:0c:c1:52:90:79:18:af:63:2e:25:7a:5a:18: 29:9b:0c:a5:b3:58:e7:2f:ae:d7:08:4e:56:80:d0: cf:61:2b:2f:0f:e9:47:62:94:a6:4e:ef:4a:51:cb: 82:5b:ed:5d:33:31:59:aa:1c:6d:f6:25:ac:13:c9: 01:71:a8:c0:1f:cf:7f:5e:d0:64:e5:5f:6e:ca:38: 59:8c:53:1e:5f:59:42:8a:85:d8:4f:92:db:d2:83: 9f:14:1c:66:1d:37:62:76:19:28:27:72:6e:35:05: 31:6a:51:46:c9:80:ea:67:ca:91:66:10:99:15:2c: 71:ba:ad:be:cb:32:ac:09:fa:e7:63:2f:ac:93:d5: 95:14:2f:69:7c:97:11:c0:61:ee:79:22:95:3e:87: 44:b8:e1:04:48:73:a7:07:99:58:20:d3:f5:9d:fb: 90:5b:8d:b0:79:c3:d8:db:93:5e:f9:dd:ac:82:de: a8:3f:be:52:58:f3:43:37:10:84:47:1f:29:a2:ce: 94:a3:bd:de:a4:c7:98:2e:14:f1:2e:c3:b3:95:a3: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:02:96:85:94:D1:5C:16:3B:63:D4:5E:27:89:A8:F0:5C:00:CF:D2 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2b:d8:91:ab:66:19:67:c3:7b:db:ca:8b:d2:c8:95:a8:10: 55:58:dc:51:03:f7:aa:06:fe:2e:8f:14:13:53:95:89:3f:6c: 91:cf:9c:b1:e7:24:87:9b:68:e9:82:46:2e:5b:9c:05:6b:ba: b8:f0:d2:5f:87:88:6d:1a:ff:96:82:22:03:05:7d:80:91:74: 92:f2:8a:b8:4c:a2:1e:43:b8:d7:0f:e6:fa:11:88:d5:11:36: ac:c9:57:4d:e8:47:25:33:43:33:7d:34:a8:73:21:50:bf:c6: b9:89:e6:4d:76:17:e5:3a:5a:b2:7c:d9:b6:c4:69:95:15:15: 9d:e2:25:74:cb:06:28:d5:97:c0:f5:8c:9b:40:aa:4f:99:dc: 58:26:f0:15:72:67:ce:4e:f7:d7:ad:18:df:e4:93:f0:d4:70: d7:19:29:0d:49:0a:1b:0f:7b:2c:c5:43:ac:fd:1b:c2:24:8a: af:b3:56:84:46:d0:db:00:01:5e:27:db:2b:42:c9:86:4f:d8: 39:a1:19:82:82:18:2e:a2:28:e2:65:fb:83:07:31:98:8a:ba: 19:30:82:84:ea:d6:a8:5e:10:af:8a:27:59:8a:a7:6a:57:b1: 22:37:ea:7c:62:90:67:df:b1:2d:85:fb:56:1d:a0:ec:9e:b1: 6b:bc:3e:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUxMjIwMTQ0MTQ0WhcNMjUxMjI3MTQ0MTQ0WjAYMRYwFAYD VQQDDA02OTQ2YjVhOS1iNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRXV3LpEKlJSnHJxWl6XyRo0GlSS89s4rPszS+uPbK5UD/QjSvV71+3j15ny dAzBUpB5GK9jLiV6Whgpmwyls1jnL67XCE5WgNDPYSsvD+lHYpSmTu9KUcuCW+1d MzFZqhxt9iWsE8kBcajAH89/XtBk5V9uyjhZjFMeX1lCioXYT5Lb0oOfFBxmHTdi dhkoJ3JuNQUxalFGyYDqZ8qRZhCZFSxxuq2+yzKsCfrnYy+sk9WVFC9pfJcRwGHu eSKVPodEuOEESHOnB5lYINP1nfuQW42wecPY25Ne+d2sgt6oP75SWPNDNxCERx8p os6Uo73epMeYLhTxLsOzlaNSMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkCloWU 0VwWO2PUXieJqPBcAM/SMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXK9iRq2YZZ8N728qL0siVqBBVWNxRA/eqBv4ujxQTU5WJP2yRz5yx 5ySHm2jpgkYuW5wFa7q48NJfh4htGv+WgiIDBX2AkXSS8oq4TKIeQ7jXD+b6EYjV ETasyVdN6EclM0MzfTSocyFQv8a5ieZNdhflOlqyfNm2xGmVFRWd4iV0ywYo1ZfA 9YybQKpPmdxYJvAVcmfOTvfXrRjf5JPw1HDXGSkNSQobD3ssxUOs/RvCJIqvs1aE RtDbAAFeJ9srQsmGT9g5oRmCghguoijiZfuDBzGYiroZMIKE6taoXhCviidZiqdq V7EiN+p8YpBn37EthftWHaDsnrFrvD68 -----END CERTIFICATE-----Generated at Mon Dec 22 15:46:04 2025 by rpki-client