This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: 4ypM0n2KLW9FTUEcz0bimIwt1uK44NaBbRV0KjX4JY4= Subject key identifier: 0F:CC:1B:2A:30:9A:E8:C1:69:70:92:2B:B8:80:45:56:50:A3:0F:4C Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 018E Signing time: Mon 29 Dec 2025 02:38:05 +0000 Manifest this update: Mon 29 Dec 2025 02:38:04 +0000 Manifest next update: Mon 05 Jan 2026 02:38:04 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: QPeagUP8WfXZUtIUeKAlaIiYvTvuSetzv5nM2W+CYeg=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: V7HVXcdZqekDWFKQPL+tYLxRmvuZTdFk8E168KA3XsM=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Dec 29 02:38:04 2025 GMT Not After : Jan 5 02:38:04 2026 GMT Subject: CN=6951e98d-26b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:15:85:f0:4e:46:c5:06:80:82:16:ed:5a: ef:34:cc:1d:48:9a:ce:fa:d7:c6:c5:fc:de:63:87: e0:2d:1a:ba:31:bb:19:fb:22:f5:ea:a2:56:9c:ff: 5e:23:56:de:06:b7:77:84:ab:98:90:a0:a0:c4:b6: 66:e4:60:08:01:68:66:44:d9:c2:77:c9:2e:bf:d7: e3:d3:4e:38:23:c3:73:aa:c6:77:0a:f8:a2:30:c8: 41:e4:1a:1e:0d:95:27:fc:5e:6f:59:f2:41:fa:17: 16:63:79:6e:66:01:29:95:2a:d8:14:87:2e:24:a5: 1a:74:90:97:6a:e2:78:77:5e:45:4f:e9:af:dd:f9: 92:ec:8e:eb:45:37:87:cc:87:36:28:59:b6:92:e5: 20:ed:1f:43:22:bb:f6:0f:0a:62:a8:36:4c:17:7e: 3e:4d:45:c2:5f:a9:22:0b:bf:e0:5e:29:94:2e:6d: 5a:88:a4:63:2d:61:dc:c5:ca:09:bf:5d:51:c5:79: c7:19:2a:de:48:b4:dd:eb:b4:5a:15:e3:21:11:51: 91:52:60:4a:d7:18:16:28:80:3e:90:bc:bd:4a:c0: 0f:38:99:0a:c8:15:49:05:6e:b9:c1:d5:d6:88:56: fa:69:3b:29:5a:a7:b7:39:36:a3:c3:18:09:fb:91: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CC:1B:2A:30:9A:E8:C1:69:70:92:2B:B8:80:45:56:50:A3:0F:4C X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:b1:24:92:0a:3e:7f:a3:1e:e4:4c:98:fe:83:bf:3a:83:96: ef:35:7a:91:5f:dd:ff:1c:77:4b:83:48:1c:1e:72:7e:9e:ba: 53:e1:a3:7d:d9:6a:ae:18:73:b2:1b:57:c3:a1:96:ce:49:e6: 79:73:76:3d:23:63:8c:a0:e8:b9:3d:9b:b8:0b:46:f4:75:ec: 02:86:5f:18:80:87:c6:ba:a7:35:ef:25:4c:d1:44:32:06:38: 2d:33:3f:8d:ab:67:97:fa:44:94:b1:eb:79:cf:f8:5b:94:2d: 35:91:9f:ad:d4:2d:62:3c:fe:98:a7:76:9e:5f:49:8d:2a:aa: 02:90:53:e9:31:cc:5a:9f:b9:cd:59:3c:ec:c7:74:23:d4:91: 51:52:5b:17:00:f3:54:18:35:f1:6b:92:93:d2:3b:8f:04:d8: 8a:29:da:80:3f:f9:69:75:e9:30:48:63:8a:10:89:db:45:78: 82:66:75:b7:5a:ac:be:df:0c:ea:9a:01:82:e9:e8:0e:62:e3: 20:b1:6b:a7:ce:b0:f3:39:b4:27:04:ac:15:89:14:77:21:90: 5c:91:cb:b5:71:ac:00:e3:16:ba:d0:e5:32:6a:65:26:94:0e: d1:1d:b7:23:6b:4f:b8:a7:36:dd:19:0d:82:29:75:b0:ca:9e: f8:41:c6:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUxMjI5MDIzODA0WhcNMjYwMTA1MDIzODA0WjAYMRYwFAYD VQQDDA02OTUxZTk4ZC0yNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r4VhfBORsUGgIIW7VrvNMwdSJrO+tfGxfzeY4fgLRq6MbsZ+yL16qJWnP9e I1beBrd3hKuYkKCgxLZm5GAIAWhmRNnCd8kuv9fj0044I8NzqsZ3CviiMMhB5Boe DZUn/F5vWfJB+hcWY3luZgEplSrYFIcuJKUadJCXauJ4d15FT+mv3fmS7I7rRTeH zIc2KFm2kuUg7R9DIrv2DwpiqDZMF34+TUXCX6kiC7/gXimULm1aiKRjLWHcxcoJ v11RxXnHGSreSLTd67RaFeMhEVGRUmBK1xgWKIA+kLy9SsAPOJkKyBVJBW65wdXW iFb6aTspWqe3OTajwxgJ+5G+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/MGyow mujBaXCSK7iARVZQow9MMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSsSSSCj5/ox7kTJj+g786g5bvNXqRX93/HHdLg0gcHnJ+nrpT4aN9 2WquGHOyG1fDoZbOSeZ5c3Y9I2OMoOi5PZu4C0b0dewChl8YgIfGuqc17yVM0UQy BjgtMz+Nq2eX+kSUset5z/hblC01kZ+t1C1iPP6Yp3aeX0mNKqoCkFPpMcxan7nN WTzsx3Qj1JFRUlsXAPNUGDXxa5KT0juPBNiKKdqAP/lpdekwSGOKEInbRXiCZnW3 Wqy+3wzqmgGC6egOYuMgsWunzrDzObQnBKwViRR3IZBckcu1cawA4xa60OUyamUm lA7RHbcja0+4pzbdGQ2CKXWwyp74QcZS -----END CERTIFICATE-----Generated at Wed Dec 31 01:53:07 2025 by rpki-client