This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: yV9qui8DtQ4rk06hsZ6ONrEERJmEBxnCGDKxAbh5SU8= Subject key identifier: DB:00:A7:65:56:D1:FA:74:ED:F0:1D:E5:4C:38:B5:47:30:D3:C1:CE Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 04C3 Signing time: Wed 24 Dec 2025 23:06:54 +0000 Manifest this update: Wed 24 Dec 2025 23:06:54 +0000 Manifest next update: Wed 31 Dec 2025 23:06:54 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: OO+GVXnMQ62yIhAVqkHnHt7qshn+FvYmvJtWyHjrnlg=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 23:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Dec 24 23:06:54 2025 GMT Not After : Dec 31 23:06:54 2025 GMT Subject: CN=694c720e-73ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:0f:3e:f4:6a:ab:fe:c0:34:af:b6:83:93: 9c:2f:96:ff:45:af:ac:87:d8:8a:21:2c:99:34:94: ae:6d:73:b0:56:85:8f:12:c6:22:26:53:62:69:e3: 7f:23:61:80:54:0e:1d:6f:f2:bc:51:1f:7c:fd:20: 3b:7c:a4:5a:e2:bf:d0:39:ab:60:6d:71:b6:35:e2: 7e:94:89:ad:2e:ce:95:6c:cc:af:da:24:72:24:ee: 04:09:69:dd:17:e7:05:6f:73:8a:1d:8d:84:46:02: 36:9c:28:e7:91:72:56:27:e8:b1:a9:c7:4e:fa:6b: 2a:86:b0:c4:c9:ce:46:71:a7:a3:1d:49:a6:82:46: ef:db:46:87:1e:89:48:7a:ec:c2:4a:d6:4a:6c:22: 65:e6:5c:8b:39:17:88:8e:fa:6f:ad:18:46:e5:db: 2e:31:2a:49:0e:2a:4a:78:ac:39:4c:d3:f8:2b:92: f0:e7:8f:b6:f1:f9:08:d5:b2:7b:3a:72:d2:87:f1: 1d:db:52:17:46:59:b4:12:3e:43:a3:9a:de:df:41: a2:f0:18:b0:1a:7b:c8:e6:90:fb:d6:19:16:50:60: 41:3f:b8:c4:23:d7:c0:e7:7d:ac:2e:f8:3a:41:53: e5:3f:ce:5e:5c:cc:b2:bb:6c:93:ce:93:13:ce:66: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:A7:65:56:D1:FA:74:ED:F0:1D:E5:4C:38:B5:47:30:D3:C1:CE X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:55:e8:22:32:cd:70:9a:ff:11:0a:d1:ca:65:35:6e:b2:82: 13:4a:13:67:ba:33:8d:14:c7:94:f0:30:c8:75:1b:36:7c:7e: db:a0:7f:bb:54:e9:75:c3:94:9e:63:b3:09:67:8a:a6:a0:d2: 2b:57:f0:57:82:19:e4:51:22:a0:f5:4d:54:d7:eb:84:97:19: c1:fe:ec:54:65:ce:04:f4:99:19:50:96:bd:ea:f0:89:3c:78: 4a:83:10:fa:2c:89:86:9f:c3:41:3d:17:2e:40:98:3a:ee:65: 15:be:4e:86:18:a1:4a:1a:a8:50:b5:d2:b7:7b:57:81:f9:43: 31:f3:1b:fa:94:26:64:5c:fa:63:8b:09:ed:73:3c:b9:46:2f: 4f:5e:d6:eb:4b:40:4b:de:e9:e0:63:aa:74:be:8f:0e:44:b2: 75:bc:e1:9c:d9:8d:1f:bc:da:ff:9a:5e:37:dc:1a:ea:15:26: b6:d6:e3:4e:cc:a6:39:31:24:2b:e9:03:c1:fd:c0:f3:b2:34: c5:86:75:44:f8:d5:e3:60:4f:43:bf:92:17:ee:1a:7a:eb:5e: 4c:e0:c8:16:8d:ce:c3:e9:d7:bd:ed:b8:7e:ab:0a:a3:d9:0b: ae:1e:cf:5d:9d:f7:cb:68:ff:66:05:0f:65:aa:fb:a1:11:6b: 38:09:c5:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjUxMjI0MjMwNjU0WhcNMjUxMjMxMjMwNjU0WjAYMRYwFAYD VQQDDA02OTRjNzIwZS03M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOkPPvRqq/7ANK+2g5OcL5b/Ra+sh9iKISyZNJSubXOwVoWPEsYiJlNiaeN/ I2GAVA4db/K8UR98/SA7fKRa4r/QOatgbXG2NeJ+lImtLs6VbMyv2iRyJO4ECWnd F+cFb3OKHY2ERgI2nCjnkXJWJ+ixqcdO+msqhrDEyc5GcaejHUmmgkbv20aHHolI euzCStZKbCJl5lyLOReIjvpvrRhG5dsuMSpJDipKeKw5TNP4K5Lw54+28fkI1bJ7 OnLSh/Ed21IXRlm0Ej5Do5re30Gi8BiwGnvI5pD71hkWUGBBP7jEI9fA532sLvg6 QVPlP85eXMyyu2yTzpMTzmZv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsAp2VW 0fp07fAd5Uw4tUcw08HOMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATVegiMs1wmv8RCtHKZTVusoITShNnujONFMeU8DDIdRs2fH7boH+7 VOl1w5SeY7MJZ4qmoNIrV/BXghnkUSKg9U1U1+uElxnB/uxUZc4E9JkZUJa96vCJ PHhKgxD6LImGn8NBPRcuQJg67mUVvk6GGKFKGqhQtdK3e1eB+UMx8xv6lCZkXPpj iwntczy5Ri9PXtbrS0BL3ungY6p0vo8ORLJ1vOGc2Y0fvNr/ml433BrqFSa21uNO zKY5MSQr6QPB/cDzsjTFhnVE+NXjYE9Dv5IX7hp6615M4MgWjc7D6de97bh+qwqj 2QuuHs9dnffLaP9mBQ9lqvuhEWs4CcXL -----END CERTIFICATE-----Generated at Fri Dec 26 12:51:38 2025 by rpki-client