This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: LNYtI/33GzG58/CS2ULOIY8UsQA8kJbWwdQDdQDj4Aw= Subject key identifier: 39:C7:7D:75:F5:73:EB:55:70:BC:53:17:06:EE:08:70:6D:BF:9A:B6 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 145D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 1400 Signing time: Sat 20 Dec 2025 16:41:13 +0000 Manifest this update: Sat 20 Dec 2025 16:41:13 +0000 Manifest next update: Sat 27 Dec 2025 16:41:13 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: QnlnCJqX1wUkrdrQm4nnBfeTntjCaYRvcPkKk41ybyo=) 2: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: PEQx20rXW3wWd56B/SVjtbMpJcwzQ8D6MiDi0J0Jbek=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: HUiyLswpuxKdbNSVPaGfLSYEn6DWoC29PelmwIAjJ5Y=) 4: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: V1iSNQB8ve6x07QbL++7FcG93VsgUWiOli7wIFWtTZY=) 5: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: Flu+OB6NSXTr2/DICAFpHEHutk0iqrBQ5kD9GJPbb90=) 6: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: lBRDtES/HZOfboWNM5sziaPImTLADmv7HDwM0/uuCvk=) 7: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: nHJYnVN764I+a01wg+TzZ5hfwKIk6KrVw4NGUGzTSaE=) 8: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0=) 9: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: OqEEQNcYyBCDgQL1llF0AYlCqLNvN3uXPMeNJtc0cyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5213 (0x145d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Dec 20 16:41:13 2025 GMT Not After : Dec 27 16:41:13 2025 GMT Subject: CN=6946d1a9-953d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ba:6d:73:57:d2:7d:5d:79:cf:90:7f:1c:b7: 44:f8:3a:0e:0d:0c:22:d2:d0:b6:ae:f6:37:2f:d3: e7:a1:59:58:36:45:7c:ce:42:75:a2:45:2b:82:23: 1d:d4:ef:c8:e0:84:48:6e:18:e3:e0:d5:62:fa:24: 9e:50:2a:53:a5:d9:c8:93:d7:75:19:a5:bd:38:62: 35:a5:5f:4f:9e:a5:11:e9:15:86:f5:ac:4d:0a:f9: c1:a1:a5:92:96:79:31:fa:85:39:77:88:9c:37:de: 72:45:1c:cf:9e:7d:64:d6:43:6d:9f:b6:1f:06:27: 38:3f:11:bb:19:8f:dd:c4:ca:ae:26:8f:cc:8b:ba: ed:1c:3b:7c:92:6c:4a:0b:38:88:83:12:6d:6a:d3: cb:8b:8e:0c:97:0c:1e:fe:08:d2:16:02:7b:6c:a4: af:86:2c:65:0c:ba:01:f1:b5:1d:a1:5a:29:30:01: 50:f9:aa:76:38:52:5d:7f:30:bb:10:c5:4c:9d:33: d3:b9:b7:e8:83:a0:db:21:70:d7:0f:60:21:87:c2: b3:b8:b5:ea:d9:09:a9:bb:0c:d6:75:63:63:aa:e1: e3:c8:85:3f:e4:c1:82:40:7a:91:ca:2f:9c:f7:25: 89:24:c7:3a:e8:fe:3a:2f:76:14:7c:0e:5d:27:57: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C7:7D:75:F5:73:EB:55:70:BC:53:17:06:EE:08:70:6D:BF:9A:B6 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:1a:44:ba:b7:95:45:29:e1:f7:eb:e1:09:16:85:3f:d5:c3: e6:ce:80:71:90:cc:37:69:5b:b1:3f:b2:6a:ef:17:f4:e9:e6: df:d8:86:85:20:44:66:95:95:54:03:28:07:2f:97:c5:55:c1: 6d:cf:37:67:89:e1:81:f1:58:00:26:08:ce:34:bb:cc:44:b2: c7:3a:76:62:b6:57:cb:fb:7e:da:c7:e2:74:28:f0:02:3a:11: d3:db:29:14:75:ce:47:a7:12:f0:39:d9:61:3c:3a:76:ac:3e: fe:e6:ac:26:4d:f7:6e:50:b2:e7:fc:79:4e:43:89:cb:23:68: 50:a2:91:b3:fa:95:a1:71:56:21:06:62:52:d1:85:99:9f:f1: cf:68:54:71:b7:e4:83:d5:e6:0f:96:f4:a5:b3:21:81:d0:cb: ad:62:d5:10:06:52:62:77:74:7d:9e:d2:15:3d:4e:b3:aa:cf: 43:86:b6:fe:73:2e:b1:d2:84:e2:fa:e8:b2:d5:36:2b:d4:8f: 9d:90:97:de:a4:fa:98:9f:74:5e:58:ed:2c:b1:72:3a:b1:1c: 5f:87:b3:31:68:d0:04:5b:07:76:29:13:c2:77:98:07:31:4b: 38:a8:57:93:3a:cf:7c:dc:62:46:0a:21:98:9b:98:e1:e7:21: d2:3f:59:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUxMjIwMTY0MTEzWhcNMjUxMjI3MTY0MTEzWjAYMRYwFAYD VQQDDA02OTQ2ZDFhOS05NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbptc1fSfV15z5B/HLdE+DoODQwi0tC2rvY3L9PnoVlYNkV8zkJ1okUrgiMd 1O/I4IRIbhjj4NVi+iSeUCpTpdnIk9d1GaW9OGI1pV9PnqUR6RWG9axNCvnBoaWS lnkx+oU5d4icN95yRRzPnn1k1kNtn7YfBic4PxG7GY/dxMquJo/Mi7rtHDt8kmxK CziIgxJtatPLi44Mlwwe/gjSFgJ7bKSvhixlDLoB8bUdoVopMAFQ+ap2OFJdfzC7 EMVMnTPTubfog6DbIXDXD2Ahh8KzuLXq2QmpuwzWdWNjquHjyIU/5MGCQHqRyi+c 9yWJJMc66P46L3YUfA5dJ1cOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnHfXX1 c+tVcLxTFwbuCHBtv5q2MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRGkS6t5VFKeH36+EJFoU/1cPmzoBxkMw3aVuxP7Jq7xf06ebf2IaF IERmlZVUAygHL5fFVcFtzzdnieGB8VgAJgjONLvMRLLHOnZitlfL+37ax+J0KPAC OhHT2ykUdc5HpxLwOdlhPDp2rD7+5qwmTfduULLn/HlOQ4nLI2hQopGz+pWhcVYh BmJS0YWZn/HPaFRxt+SD1eYPlvSlsyGB0MutYtUQBlJid3R9ntIVPU6zqs9Dhrb+ cy6x0oTi+uiy1TYr1I+dkJfepPqYn3ReWO0ssXI6sRxfh7MxaNAEWwd2KRPCd5gH MUs4qFeTOs983GJGCiGYm5jh5yHSP1mx -----END CERTIFICATE-----Generated at Sun Dec 21 06:56:01 2025 by rpki-client