This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: GNUfhXophjGn+IyXiAua+sZS3X1LYDUXFETlrxWiSyc= Subject key identifier: B7:54:2E:B9:6A:A8:95:1D:91:45:C0:1E:0D:4E:42:F2:03:A9:3A:53 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: 0179 Signing time: Fri 19 Dec 2025 03:03:52 +0000 Manifest this update: Fri 19 Dec 2025 03:03:51 +0000 Manifest next update: Fri 26 Dec 2025 03:03:51 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: lpaRBofxcnV+sxPgLpM6+lJAKXZsQd5KVRvQdfHRKDA=) 2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: KVS4ATYh4TS7yChddKe7JYCz2e2be+NQL5wWOUa+G3g=) 3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: 6V1ULB2afDlEq59NkQuqJB6JSmFq0Z+I0yfXV4LcD7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Dec 19 03:03:51 2025 GMT Not After : Dec 26 03:03:51 2025 GMT Subject: CN=6944c098-e202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:d6:b5:c9:0d:c7:69:e3:35:57:13:24:17: 75:2b:a8:17:53:1b:a1:02:ba:d8:b9:5c:e1:bb:26: b2:b2:fe:d8:ef:09:f2:e3:73:8e:5a:da:2b:7f:09: e5:0a:28:b3:96:62:92:77:3e:77:4c:41:0f:c9:d1: 35:e1:b6:90:86:06:0a:c5:82:89:13:69:fc:fb:cc: 40:eb:f2:51:11:11:39:a6:09:4d:74:08:4b:4a:ee: 9b:41:68:d5:d3:e5:6f:07:0e:3f:36:ce:28:eb:27: 1c:d3:2c:d6:28:f1:4b:61:3f:bf:c7:32:62:7d:42: 5f:c4:17:45:10:90:69:a4:3a:3e:7c:27:1d:30:dc: ca:b7:4d:52:36:60:7e:9b:f7:26:ed:4f:8e:fb:a5: ad:3b:e1:19:aa:16:4a:15:55:cd:de:3a:2f:f3:1e: 30:33:78:13:1c:60:1b:25:4d:b8:23:62:d6:a4:d3: e8:70:35:bf:c5:30:5d:08:fc:d5:0c:63:3e:78:a6: 35:70:fd:7b:7f:6b:1f:af:39:da:17:93:2c:e8:0e: 31:4a:3f:99:fb:71:aa:26:01:30:8d:0a:7c:8b:da: 9a:0f:a1:d4:e2:29:26:33:78:c4:23:d6:26:28:ae: 38:e5:6e:ce:3d:80:19:7e:52:3e:a2:71:7a:ed:2b: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:54:2E:B9:6A:A8:95:1D:91:45:C0:1E:0D:4E:42:F2:03:A9:3A:53 X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1f:72:8b:f6:2b:67:00:51:7e:08:c4:bc:41:e4:d3:0a:fc: bb:95:9b:de:e6:8b:a9:ab:24:be:5b:ef:ed:7f:b9:c6:0f:52: 8b:1c:ca:69:fa:e0:35:f8:a2:ed:13:16:c1:2c:11:f9:67:d3: b5:12:15:35:03:b5:b2:08:36:3d:51:b2:70:fe:90:c1:4a:3f: dd:1c:d6:ce:99:51:15:4f:19:96:17:5e:c2:9e:cc:01:59:8b: 0c:f6:bd:80:46:5d:2c:a4:c4:58:94:c4:db:aa:24:8b:8b:16: 74:37:0e:a6:0e:aa:50:ae:19:17:ca:7a:bc:16:07:8a:d0:c5: d3:79:e4:a7:0e:10:4b:a5:35:86:a0:84:3f:ba:ca:03:36:b0: 62:85:79:3a:ae:6f:0f:ab:5b:07:05:60:80:aa:05:1c:a2:3f: 5b:63:0f:83:c0:55:37:30:28:81:dd:88:fa:54:72:95:de:49: 14:d3:d8:74:3f:33:bc:8b:5c:cc:67:d4:86:af:71:46:9b:cc: 94:3e:a9:36:20:b4:8d:5d:d3:b6:87:b8:bb:23:44:2f:cb:4c: 6e:74:a4:dd:65:10:55:64:d6:5a:cc:fc:d1:fc:7a:31:83:c0: f5:92:1c:8d:f6:f3:a4:07:16:48:f9:30:e7:34:0f:58:c2:4c: 4d:08:37:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5 QTg5REEyQzkwHhcNMjUxMjE5MDMwMzUxWhcNMjUxMjI2MDMwMzUxWjAYMRYwFAYD VQQDDA02OTQ0YzA5OC1lMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjbvWtckNx2njNVcTJBd1K6gXUxuhArrYuVzhuyaysv7Y7wny43OOWtorfwnl CiizlmKSdz53TEEPydE14baQhgYKxYKJE2n8+8xA6/JRERE5pglNdAhLSu6bQWjV 0+VvBw4/Ns4o6ycc0yzWKPFLYT+/xzJifUJfxBdFEJBppDo+fCcdMNzKt01SNmB+ m/cm7U+O+6WtO+EZqhZKFVXN3jov8x4wM3gTHGAbJU24I2LWpNPocDW/xTBdCPzV DGM+eKY1cP17f2sfrznaF5Ms6A4xSj+Z+3GqJgEwjQp8i9qaD6HU4ikmM3jEI9Ym KK445W7OPYAZflI+onF67StaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdULrlq qJUdkUXAHg1OQvIDqTpTMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh aDBSaWNWY0c1cXFhaWRvc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpH3KL9itnAFF+CMS8QeTTCvy7lZve5oupqyS+W+/tf7nGD1KLHMpp +uA1+KLtExbBLBH5Z9O1EhU1A7WyCDY9UbJw/pDBSj/dHNbOmVEVTxmWF17CnswB WYsM9r2ARl0spMRYlMTbqiSLixZ0Nw6mDqpQrhkXynq8FgeK0MXTeeSnDhBLpTWG oIQ/usoDNrBihXk6rm8Pq1sHBWCAqgUcoj9bYw+DwFU3MCiB3Yj6VHKV3kkU09h0 PzO8i1zMZ9SGr3FGm8yUPqk2ILSNXdO2h7i7I0Qvy0xudKTdZRBVZNZazPzR/Hox g8D1khyN9vOkBxZI+TDnNA9YwkxNCDfP -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:22 2025 by rpki-client