This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: pnKU8Xh7LM4qe4zuRlIevnn7F4rHaD747xkgCxph+Jg= Subject key identifier: 52:AA:69:88:65:BF:46:3A:0B:CF:7F:99:7A:E4:E8:D8:01:6D:0E:4E Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 09CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0960 Signing time: Sat 20 Dec 2025 19:47:53 +0000 Manifest this update: Sat 20 Dec 2025 19:47:53 +0000 Manifest next update: Sat 27 Dec 2025 19:47:53 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: y6O7beHluEgR3WhSdb7SUxhEqarqo6thdSMyfGQzLXw=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 3: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 5: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 6: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=) 8: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2510 (0x9ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Dec 20 19:47:53 2025 GMT Not After : Dec 27 19:47:53 2025 GMT Subject: CN=6946fd69-e873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:36:1a:ee:e8:b2:a0:75:bb:6d:14:36:0e: 37:8a:99:3e:ed:80:5a:2d:72:9c:dc:c4:62:a9:3b: b4:fe:07:f6:85:3a:1a:47:dd:28:e9:a0:ea:09:c5: 27:9a:dd:00:38:70:11:e8:fd:db:5f:6b:fe:fa:a1: 43:24:70:2e:67:26:f4:a4:74:66:c4:e6:c7:aa:6a: ad:45:4f:f1:6a:12:6b:0c:e9:2e:85:c6:95:4b:89: 90:d9:c2:4c:62:bb:4a:b4:3f:28:c8:32:a0:14:12: aa:80:2d:ea:f6:6d:37:f0:ed:b9:01:3e:3d:64:f1: 59:08:75:d7:6e:f9:6d:66:72:11:c4:ac:f2:10:c0: 89:56:50:71:9a:53:3d:7b:c4:56:b3:ee:74:07:bb: 57:a3:0f:82:1a:b7:33:9c:84:db:fe:2a:bf:fa:21: 7c:15:e6:00:11:e1:d1:0b:ea:b3:14:1e:d4:5e:7d: 98:f2:0c:fa:a1:11:53:3f:39:12:d7:b7:99:af:14: 6b:9f:85:e0:84:fe:32:88:11:90:1f:eb:09:8d:35: 69:37:27:2d:39:30:34:c5:51:69:51:7d:79:5c:a8: ec:81:bb:d8:8e:cc:35:3d:d1:0e:04:70:cb:41:85: a4:75:13:39:6b:b3:c8:b3:d0:6d:70:36:c9:2e:0b: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AA:69:88:65:BF:46:3A:0B:CF:7F:99:7A:E4:E8:D8:01:6D:0E:4E X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:9c:cc:cc:f1:93:2c:76:ea:75:9f:0d:10:c3:7d:0d:4a:ad: 43:b7:db:1f:06:e7:95:21:b5:8f:93:2d:fd:7a:93:e6:8a:ce: 6d:d3:1e:46:dc:77:5b:da:4c:bf:a9:7a:28:5e:60:3b:bb:30: ca:a4:ba:19:08:1b:35:c9:11:ad:c1:2e:db:c7:95:0d:84:f5: ee:86:68:a1:c1:81:ca:00:f7:3b:81:00:e5:4c:10:bb:c1:77: 37:2c:f9:d6:24:3b:39:65:11:53:9b:eb:9b:a9:da:b6:32:82: d8:11:32:43:82:18:06:73:fd:e9:11:99:3d:63:aa:45:fd:c0: 1d:23:42:b9:ec:f2:26:be:b2:12:e8:33:ae:00:e3:0e:c9:63: 38:87:74:9b:6d:fb:3e:d8:66:f6:90:a9:16:22:19:55:cf:89: 8e:aa:67:3a:9e:e0:2e:3f:ce:3c:bf:c0:6a:d7:24:eb:63:8b: e2:13:cd:d7:93:44:f2:a6:df:ee:58:d0:36:ec:af:80:dc:fd: 7b:96:87:38:c1:b5:8a:1b:7d:ad:5c:9c:04:51:74:cc:8f:de: eb:df:c4:a3:52:20:fc:42:31:e0:ac:ed:20:d0:0d:3b:09:77: 7b:0b:0d:b4:b7:fb:b9:a6:d1:03:85:80:f1:3d:61:d6:bf:d4: c4:d7:6d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUxMjIwMTk0NzUzWhcNMjUxMjI3MTk0NzUzWjAYMRYwFAYD VQQDDA02OTQ2ZmQ2OS1lODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4w2Gu7osqB1u20UNg43ipk+7YBaLXKc3MRiqTu0/gf2hToaR90o6aDqCcUn mt0AOHAR6P3bX2v++qFDJHAuZyb0pHRmxObHqmqtRU/xahJrDOkuhcaVS4mQ2cJM YrtKtD8oyDKgFBKqgC3q9m038O25AT49ZPFZCHXXbvltZnIRxKzyEMCJVlBxmlM9 e8RWs+50B7tXow+CGrcznITb/iq/+iF8FeYAEeHRC+qzFB7UXn2Y8gz6oRFTPzkS 17eZrxRrn4XghP4yiBGQH+sJjTVpNyctOTA0xVFpUX15XKjsgbvYjsw1PdEOBHDL QYWkdRM5a7PIs9BtcDbJLgvbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKqaYhl v0Y6C89/mXrk6NgBbQ5OMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCznMzM8ZMsdup1nw0Qw30NSq1Dt9sfBueVIbWPky39epPmis5t0x5G 3Hdb2ky/qXooXmA7uzDKpLoZCBs1yRGtwS7bx5UNhPXuhmihwYHKAPc7gQDlTBC7 wXc3LPnWJDs5ZRFTm+ubqdq2MoLYETJDghgGc/3pEZk9Y6pF/cAdI0K57PImvrIS 6DOuAOMOyWM4h3Sbbfs+2Gb2kKkWIhlVz4mOqmc6nuAuP848v8Bq1yTrY4viE83X k0Typt/uWNA27K+A3P17loc4wbWKG32tXJwEUXTMj97r38SjUiD8QjHgrO0g0A07 CXd7Cw20t/u5ptEDhYDxPWHWv9TE123o -----END CERTIFICATE-----Generated at Sun Dec 21 06:08:19 2025 by rpki-client