This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: 72eK7pE3v9bbqVVRqSmF3MjbuEgEjBXNTRALODUvhyI= Subject key identifier: CD:E0:10:77:AD:09:E0:39:75:90:1A:CB:24:C1:B9:75:CC:7A:BD:FF Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 061B Signing time: Thu 18 Dec 2025 22:10:51 +0000 Manifest this update: Thu 18 Dec 2025 22:10:51 +0000 Manifest next update: Thu 25 Dec 2025 22:10:51 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: q/6DJRtGD7BR6ahBMv/nnaR1OXRiqQaVD6CinOTDrE8=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Dec 18 22:10:51 2025 GMT Not After : Dec 25 22:10:51 2025 GMT Subject: CN=69447beb-c646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:17:29:61:11:2e:91:84:c8:20:83:da:47: 62:c3:c7:52:20:49:32:81:96:13:16:ba:b9:90:6c: 7c:9a:be:a6:78:f2:99:cd:50:f1:3d:79:5d:1a:bf: a0:ca:03:8c:f3:04:2e:3c:ba:9b:df:bb:fd:c8:55: 71:a2:7c:3a:02:35:0a:46:1b:23:40:e0:c4:9f:43: ce:b1:c3:14:68:fe:03:9b:99:7f:95:fb:f2:10:57: 21:b7:e1:de:d1:37:cc:55:e8:7d:59:03:44:d3:5f: 24:d6:9b:26:aa:58:47:8d:3a:45:7f:d8:33:62:57: 71:84:ac:c5:38:13:b0:d0:de:32:6f:0d:e8:d3:79: 9d:2d:9d:bb:0f:68:88:78:f1:3d:5a:6a:d8:c0:8c: db:c1:fd:cd:dd:27:61:70:06:f5:45:da:eb:da:dd: 81:88:04:6a:d9:84:26:37:3e:d2:0a:39:1d:bd:bb: bd:d4:67:bc:37:48:c0:64:2c:ec:d1:7d:a4:5d:41: 21:7a:cc:60:ee:d9:2d:f1:74:b8:8c:be:6e:d6:93: ad:80:71:58:83:0d:2f:ff:55:88:59:23:0e:da:d4: f5:c9:d7:33:d9:f6:bb:98:ab:32:6f:3e:7a:5b:03: b9:38:0c:a8:cb:77:e0:a9:11:86:0e:04:ff:55:4a: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:10:77:AD:09:E0:39:75:90:1A:CB:24:C1:B9:75:CC:7A:BD:FF X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:16:1c:a6:99:42:47:a3:8d:f2:cd:6f:c1:e2:9a:12:fa:f7: 3d:c8:b6:bb:c7:bf:8e:ba:fc:72:dc:25:2c:da:e1:ad:25:ad: 6e:d5:77:81:e4:95:07:b9:9c:d7:17:ae:4c:4d:f6:36:10:17: 5d:fe:68:c0:a0:4e:3e:b2:92:d0:21:a7:9b:36:54:61:72:2a: 2c:c7:9a:a3:94:55:14:b3:a1:8b:e0:77:d2:99:8b:43:7d:79: 89:ec:6f:63:da:6a:67:0a:f0:a1:cc:d8:8e:18:b3:25:27:aa: 97:86:7e:61:e1:9c:33:c1:97:bb:93:4e:27:89:90:3e:c2:d4: 18:b0:5f:86:db:da:60:71:8a:e4:99:bf:12:35:f8:10:b9:aa: 2b:d0:e7:92:7a:4e:e4:1c:9a:ca:01:e3:f7:d1:30:ca:9f:6b: c9:6c:3a:3d:07:81:65:be:d5:60:6f:f9:d3:59:2a:ae:85:eb: a8:2f:a5:63:d9:9d:ba:b6:2c:ad:ce:03:77:27:a4:fb:04:6e: 57:7f:1a:ed:d0:a7:b9:ee:90:f1:3b:dc:a1:c5:9d:9b:1f:b4: b7:d8:a7:da:82:97:3a:91:dd:6b:1b:d6:b1:af:83:a4:46:ea: 45:31:57:b5:2e:2e:49:a8:7f:9b:94:05:7a:05:67:68:48:f6: d1:fa:10:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUxMjE4MjIxMDUxWhcNMjUxMjI1MjIxMDUxWjAYMRYwFAYD VQQDDA02OTQ0N2JlYi1jNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXcXKWERLpGEyCCD2kdiw8dSIEkygZYTFrq5kGx8mr6mePKZzVDxPXldGr+g ygOM8wQuPLqb37v9yFVxonw6AjUKRhsjQODEn0POscMUaP4Dm5l/lfvyEFcht+He 0TfMVeh9WQNE018k1psmqlhHjTpFf9gzYldxhKzFOBOw0N4ybw3o03mdLZ27D2iI ePE9WmrYwIzbwf3N3SdhcAb1Rdrr2t2BiARq2YQmNz7SCjkdvbu91Ge8N0jAZCzs 0X2kXUEhesxg7tkt8XS4jL5u1pOtgHFYgw0v/1WIWSMO2tT1ydcz2fa7mKsybz56 WwO5OAyoy3fgqRGGDgT/VUqJ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3gEHet CeA5dZAayyTBuXXMer3/MB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2FhymmUJHo43yzW/B4poS+vc9yLa7x7+Ouvxy3CUs2uGtJa1u1XeB 5JUHuZzXF65MTfY2EBdd/mjAoE4+spLQIaebNlRhciosx5qjlFUUs6GL4HfSmYtD fXmJ7G9j2mpnCvChzNiOGLMlJ6qXhn5h4ZwzwZe7k04niZA+wtQYsF+G29pgcYrk mb8SNfgQuaor0OeSek7kHJrKAeP30TDKn2vJbDo9B4FlvtVgb/nTWSquheuoL6Vj 2Z26tiytzgN3J6T7BG5Xfxrt0Ke57pDxO9yhxZ2bH7S32Kfagpc6kd1rG9axr4Ok RupFMVe1Li5JqH+blAV6BWdoSPbR+hDn -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:51 2025 by rpki-client