This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: XMeP/3SjZg49GIU1WLuzsWCOoDYBWyI7E+p1QvReu1k= Subject key identifier: 65:C4:84:69:27:E2:D9:AD:AA:33:89:D0:F4:47:EC:B7:A0:87:D3:73 Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 075A Signing time: Thu 18 Dec 2025 21:10:25 +0000 Manifest this update: Thu 18 Dec 2025 21:10:25 +0000 Manifest next update: Thu 25 Dec 2025 21:10:25 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: hT0w2z06D0hFNCkYFA+8+vCm3gzgHFuEzuYCZ1ddvUs=) 2: 4DACC668D0CD11F0B1E50143C4F9AE02.roa (hash: MB+r+Os7hTbN09scD5tkwu7u8VbFNM4s1268hWhFhdM=) 3: 4CC8B77AD0CD11F08E0F0143C4F9AE02.roa (hash: iX4sQrcdcnjDqwQaonepmNxC0cUNYw/x7ZNfv1HPYto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Dec 18 21:10:25 2025 GMT Not After : Dec 25 21:10:25 2025 GMT Subject: CN=69446dc1-fbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:99:c9:f1:fb:f9:36:6e:bc:dc:64:ba:18: 01:c8:f3:2e:3f:a1:71:01:69:16:4d:d4:e3:87:1b: 34:a1:1f:c2:92:8c:35:c8:d2:ba:7e:ed:6a:b9:31: 17:b1:9e:77:f9:2a:76:c9:ed:45:71:e8:c0:c8:ac: 97:8c:03:55:80:2c:bc:6d:63:8c:da:fe:d3:25:b0: 76:9e:f3:57:75:2e:7c:40:0e:32:95:69:7a:04:8c: 05:f2:4f:1e:45:16:93:25:fd:00:05:49:9c:42:13: 36:11:64:20:0e:5f:3e:7a:86:c3:16:15:c0:47:58: 35:1a:bc:b8:c5:30:29:b1:c4:4d:9d:de:a4:e8:3a: 2b:bc:e6:02:f7:91:72:bb:48:fe:7c:ca:9c:7d:ba: 7d:bb:6f:c4:12:1f:5c:64:b8:aa:9a:ff:72:d2:ad: 6d:29:41:35:bc:59:3f:64:fb:33:bc:31:a6:91:aa: 88:03:d6:89:c5:f2:d9:b2:ea:95:05:f3:4d:64:b0: b9:a0:a6:71:f4:7f:86:c8:29:b5:33:9d:76:d9:f4: c3:23:3c:13:e2:f8:c8:51:76:ab:d7:42:c8:80:dd: f4:e7:1d:44:f2:30:e9:17:fa:0b:40:48:ff:91:dd: e0:ad:5d:22:91:58:99:f9:15:09:eb:b4:a7:6a:3f: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:84:69:27:E2:D9:AD:AA:33:89:D0:F4:47:EC:B7:A0:87:D3:73 X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:da:5f:06:96:28:cc:cf:81:19:df:bb:30:8f:47:da:80:69: 95:30:c9:b5:0f:79:69:f2:4c:1e:62:21:64:98:61:53:84:93: 53:f9:2b:67:36:a9:95:cf:b3:40:6f:11:2e:dd:29:a2:6e:d0: b3:4e:3f:1a:83:f6:b2:d9:75:f3:e1:0b:ad:63:fe:04:d0:64: 6a:f3:9c:c5:45:08:42:0b:e3:bf:c2:7b:7d:54:68:88:37:c1: d9:b0:09:5e:1f:9a:66:29:b2:a9:34:92:c3:4c:63:9f:4a:cf: 07:b8:3d:7d:b1:4d:c4:d4:fe:13:2a:4e:5a:ae:42:05:0d:05: 4d:54:bc:14:18:c1:8b:f9:a4:e6:6e:e6:7c:d4:85:af:75:9a: 76:86:49:ce:97:46:ac:6f:c2:ef:d1:78:47:03:03:5a:93:61: fa:d3:9d:cd:5c:7c:08:d9:f1:c4:30:72:47:ed:4c:6f:c5:2a: 71:68:2d:a3:93:8f:29:a2:e7:23:8e:f9:b7:ca:de:84:5e:0d: c8:97:01:29:fd:49:b3:7a:4a:81:3a:10:2f:da:a1:6d:a7:47: 33:51:be:4d:a5:b8:d3:60:17:58:38:60:82:b7:de:1f:94:ff: 1b:5c:67:12:3e:86:81:61:3b:f0:63:b1:33:9b:fc:b9:83:59: bc:69:97:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjUxMjE4MjExMDI1WhcNMjUxMjI1MjExMDI1WjAYMRYwFAYD VQQDDA02OTQ0NmRjMS1mYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1qZyfH7+TZuvNxkuhgByPMuP6FxAWkWTdTjhxs0oR/Ckow1yNK6fu1quTEX sZ53+Sp2ye1FcejAyKyXjANVgCy8bWOM2v7TJbB2nvNXdS58QA4ylWl6BIwF8k8e RRaTJf0ABUmcQhM2EWQgDl8+eobDFhXAR1g1Gry4xTApscRNnd6k6DorvOYC95Fy u0j+fMqcfbp9u2/EEh9cZLiqmv9y0q1tKUE1vFk/ZPszvDGmkaqIA9aJxfLZsuqV BfNNZLC5oKZx9H+GyCm1M5122fTDIzwT4vjIUXar10LIgN305x1E8jDpF/oLQEj/ kd3grV0ikViZ+RUJ67Snaj/wGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXEhGkn 4tmtqjOJ0PRH7Legh9NzMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs2l8GlijMz4EZ37swj0fagGmVMMm1D3lp8kweYiFkmGFThJNT+Stn NqmVz7NAbxEu3SmibtCzTj8ag/ay2XXz4QutY/4E0GRq85zFRQhCC+O/wnt9VGiI N8HZsAleH5pmKbKpNJLDTGOfSs8HuD19sU3E1P4TKk5arkIFDQVNVLwUGMGL+aTm buZ81IWvdZp2hknOl0asb8Lv0XhHAwNak2H6053NXHwI2fHEMHJH7UxvxSpxaC2j k48poucjjvm3yt6EXg3IlwEp/UmzekqBOhAv2qFtp0czUb5NpbjTYBdYOGCCt94f lP8bXGcSPoaBYTvwY7Ezm/y5g1m8aZeP -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:41 2025 by rpki-client