This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: y54uGcDybbI82j2C7FOVMIVlozL/ArliJH+yJgdzdp4= Subject key identifier: 2F:84:50:4C:F1:57:66:4C:2B:86:64:3F:B2:10:FF:64:20:85:AB:15 Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: D4 Signing time: Tue 23 Dec 2025 04:39:58 +0000 Manifest this update: Tue 23 Dec 2025 04:39:57 +0000 Manifest next update: Tue 30 Dec 2025 04:39:57 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: EgucGDNE2dDX3ov6bW6KuHEN9HQX92Jelsp3QcNeU8Y=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: Yj2V8/6jOgitXcRoNNna3W/sKqY/mfOcuez+bXMF3yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Dec 23 04:39:57 2025 GMT Not After : Dec 30 04:39:57 2025 GMT Subject: CN=694a1d1e-7de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:50:bd:1b:2f:95:9b:79:4d:e6:03:73:60: 86:4c:4f:59:ae:d4:3b:9e:cc:80:d0:79:09:6e:77: 7d:ab:ec:d5:c2:84:e9:26:23:73:8c:67:a4:cc:69: cb:56:f5:e0:bf:4a:9e:ea:2f:e4:22:63:09:eb:e9: 66:c3:fb:c0:39:0d:32:a7:06:1a:f4:78:11:5d:e8: e5:de:f6:ed:d2:b7:2d:72:36:81:f3:05:3c:6b:4f: 0c:1c:77:11:90:68:e3:35:42:5b:43:bc:bf:c4:5e: f8:29:72:4a:e4:5d:3b:df:a7:09:1a:7c:14:f4:13: 57:bb:24:fc:7f:c2:24:34:44:fd:75:8b:2d:a8:34: 7f:6d:a4:71:71:db:b6:8a:9c:a4:c7:73:8d:d9:24: 4b:52:60:f4:91:dd:e2:00:1b:d6:d2:23:f7:23:67: 9d:fb:65:a0:96:a0:93:df:c3:c3:4b:5d:9a:25:4e: d0:28:f4:ed:95:21:07:8d:f8:d3:a6:22:c9:0d:5f: fb:9c:db:30:46:c0:ae:14:fc:4c:1c:86:fc:b4:a5: 0d:dc:b5:bb:8b:9a:96:c4:61:10:25:c1:7b:c4:a5: 0f:43:cd:a2:ca:9d:7c:f0:82:60:42:d0:e9:14:79: c0:ad:24:6e:46:a4:8b:de:a5:bf:3b:2a:ce:44:61: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:84:50:4C:F1:57:66:4C:2B:86:64:3F:B2:10:FF:64:20:85:AB:15 X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:9a:a0:b0:dd:da:40:95:85:c2:55:e5:cb:fc:d2:02:e5:6a: e2:70:3d:5f:06:8f:ba:15:d7:2a:0f:65:e7:72:3a:19:42:e9: 45:75:6b:ea:0f:15:76:e2:55:e7:4f:b3:a7:36:b6:eb:e4:64: d7:12:9a:c3:11:1c:fa:1d:2a:fe:b5:27:19:f0:bc:1f:40:8a: 87:8c:78:40:cb:aa:d0:7c:f1:ce:39:1a:cf:74:8a:70:7a:f5: 08:5d:0c:63:af:70:c5:88:f9:2f:ab:5e:db:5e:57:ce:ad:45: 37:19:3c:e5:ee:98:d2:52:c3:36:48:b1:cb:5b:dc:df:73:8a: 1f:20:e1:3f:fe:6e:a5:75:55:27:e7:ef:6c:35:76:be:5c:33: 68:07:fa:ff:4d:dc:76:09:63:f4:f2:d3:d5:b6:d5:75:b3:91: cc:18:96:67:10:76:c7:72:0a:74:52:07:80:f1:3c:5c:13:e2: 34:6b:76:6d:21:52:68:09:b1:bc:51:fb:b4:27:5d:72:12:9e: 72:b3:c0:0d:ad:6c:7e:e6:f0:31:18:a2:22:c6:dc:a1:44:9a: 82:de:e9:25:7e:92:84:0b:07:6a:38:81:43:e4:30:9a:59:c5: 8d:5e:d8:59:16:0c:b9:b1:20:04:79:e9:a6:4a:c8:3c:8d:a3: f5:91:56:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKEIyRTlEQTVFQjM4OTZCRUZDMERGRDVBN0VCMzBEQjI5 MzE0QkJBMTIwHhcNMjUxMjIzMDQzOTU3WhcNMjUxMjMwMDQzOTU3WjAYMRYwFAYD VQQDDA02OTRhMWQxZS03ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaBQvRsvlZt5TeYDc2CGTE9ZrtQ7nsyA0HkJbnd9q+zVwoTpJiNzjGekzGnL VvXgv0qe6i/kImMJ6+lmw/vAOQ0ypwYa9HgRXejl3vbt0rctcjaB8wU8a08MHHcR kGjjNUJbQ7y/xF74KXJK5F0736cJGnwU9BNXuyT8f8IkNET9dYstqDR/baRxcdu2 ipykx3ON2SRLUmD0kd3iABvW0iP3I2ed+2WglqCT38PDS12aJU7QKPTtlSEHjfjT piLJDV/7nNswRsCuFPxMHIb8tKUN3LW7i5qWxGEQJcF7xKUPQ82iyp188IJgQtDp FHnArSRuRqSL3qW/OyrORGFO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+EUEzx V2ZMK4ZkP7IQ/2QghasVMB8GA1UdIwQYMBaAFLLp2l6ziWvvwN/Vp+sw2ykxS7oS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85M0FDQUI2NEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEtX0EzOVduNnpEYktURkx1 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85M0FDQUI2NEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEt X0EzOVduNnpEYktURkx1aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMmqCw3dpAlYXCVeXL/NIC5WricD1fBo+6FdcqD2XncjoZQulFdWvq DxV24lXnT7OnNrbr5GTXEprDERz6HSr+tScZ8LwfQIqHjHhAy6rQfPHOORrPdIpw evUIXQxjr3DFiPkvq17bXlfOrUU3GTzl7pjSUsM2SLHLW9zfc4ofIOE//m6ldVUn 5+9sNXa+XDNoB/r/Tdx2CWP08tPVttV1s5HMGJZnEHbHcgp0UgeA8TxcE+I0a3Zt IVJoCbG8Ufu0J11yEp5ys8ANrWx+5vAxGKIixtyhRJqC3uklfpKECwdqOIFD5DCa WcWNXthZFgy5sSAEeemmSsg8jaP1kVab -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:21 2025 by rpki-client