This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json) Hash identifier: a9HAriDnN+YQagn9yBdyZsnLcXOBepyLWfjXVay/lAM= Subject key identifier: 08:44:0F:7A:1A:88:A7:C7:B6:98:6D:BD:F9:98:9A:07:5F:32:25:17 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft Manifest number: 0825 Signing time: Wed 24 Dec 2025 20:21:19 +0000 Manifest this update: Wed 24 Dec 2025 20:21:18 +0000 Manifest next update: Wed 31 Dec 2025 20:21:18 +0000 Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: avskDkPnIAOSPuiklbbB7cLGiYqD/AIb7LqNTqHR9lM=) 2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: 9BCurgsmPpYkZs9pPB9R4G/BbkWck+cVJq8Vox5uiKY=) 3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: zemkN5BROCdSUhbupRjiSnNtwcSlinI7FQCHVicj5PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Dec 24 20:21:18 2025 GMT Not After : Dec 31 20:21:18 2025 GMT Subject: CN=694c4b3f-2cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:d8:b7:12:16:43:3b:bd:d8:c8:fb:06:b6: d6:66:87:ad:e9:fd:62:7d:f4:c9:0e:86:d1:68:ea: a6:74:b8:08:f1:ef:96:72:cd:aa:4d:a0:d9:b4:43: 4b:0b:00:63:9f:cd:79:43:2e:f3:db:be:59:70:2c: 3f:a2:a5:46:24:fe:ee:0e:fb:b3:7a:b1:27:fc:f7: 53:62:da:a3:52:c8:c3:1e:59:f6:22:67:60:6f:9d: da:aa:60:9b:69:7e:5e:19:7a:2e:ca:4a:9d:30:00: 1d:19:3f:cf:b7:8d:5d:51:7b:36:6f:ba:87:0e:9f: e8:d1:3f:c5:d5:a2:e7:6c:72:3e:d9:61:86:73:d2: 1e:2f:f5:be:51:a6:6a:6d:a2:d9:34:a2:67:b0:1c: b1:72:94:c6:95:ac:45:ef:b4:ac:e8:f3:ca:90:88: 40:f9:a8:d2:95:7f:a7:24:0e:e0:e3:1b:d5:69:25: e6:0e:f0:a1:37:b9:1f:2e:90:c7:e6:24:4c:a0:08: 83:49:1d:3d:11:e1:7e:a5:ec:08:1a:25:5c:a0:06: 4b:a9:85:66:5b:dd:b3:ee:b5:2b:27:6d:25:f8:99: 00:9c:4a:3e:b5:a7:4c:d5:83:5b:be:9e:eb:93:34: 8e:f6:ce:b8:08:14:68:4f:c4:f9:27:be:01:5c:1d: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:44:0F:7A:1A:88:A7:C7:B6:98:6D:BD:F9:98:9A:07:5F:32:25:17 X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ae:78:b7:f0:03:d7:3e:d6:c2:e9:c5:24:17:3d:9c:ba:c6: b8:a9:fb:fb:ca:43:36:1c:98:73:d0:69:92:a0:b1:5f:85:50: cb:8d:8c:c9:25:0d:00:ab:e9:98:1f:45:a3:84:a5:7b:57:7d: b5:0f:24:aa:65:bf:98:cb:62:a9:65:25:5a:ec:fc:2a:eb:e9: 4a:68:69:60:2f:dc:2c:67:d1:bc:13:af:bc:84:1b:9e:f1:31: 96:3a:4d:ca:9f:aa:63:fc:84:ae:70:f6:85:31:f0:35:a8:69: d4:ed:5d:ce:cf:dd:a3:db:ab:1b:8c:72:3b:b6:0d:b8:02:6c: 2b:f8:ff:24:11:df:b2:50:26:90:b0:c1:b6:91:f3:78:97:a7: 85:56:f5:23:f0:3d:79:0e:de:bb:21:29:d5:b7:8c:e0:60:f4: 18:f8:e3:f3:32:0f:8e:7a:7d:f1:28:e1:7c:5d:02:92:bb:b2: c2:79:37:ca:c3:24:f7:4e:28:ce:75:95:1d:91:f7:0b:95:73: ce:cf:79:0d:18:75:df:b2:0e:fd:6f:97:7e:9c:ad:c2:09:6c: 5d:40:5a:3d:f6:d5:15:b2:78:18:19:aa:0c:63:37:f3:46:46: 9a:b3:6c:b2:2d:28:04:94:05:fc:8e:1e:ac:92:6a:79:60:f1: 3e:36:3a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjUxMjI0MjAyMTE4WhcNMjUxMjMxMjAyMTE4WjAYMRYwFAYD VQQDDA02OTRjNGIzZi0yY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkXvYtxIWQzu92Mj7BrbWZoet6f1iffTJDobRaOqmdLgI8e+Wcs2qTaDZtENL CwBjn815Qy7z275ZcCw/oqVGJP7uDvuzerEn/PdTYtqjUsjDHln2Imdgb53aqmCb aX5eGXouykqdMAAdGT/Pt41dUXs2b7qHDp/o0T/F1aLnbHI+2WGGc9IeL/W+UaZq baLZNKJnsByxcpTGlaxF77Ss6PPKkIhA+ajSlX+nJA7g4xvVaSXmDvChN7kfLpDH 5iRMoAiDSR09EeF+pewIGiVcoAZLqYVmW92z7rUrJ20l+JkAnEo+tadM1YNbvp7r kzSO9s64CBRoT8T5J74BXB2NMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhED3oa iKfHtphtvfmYmgdfMiUXMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlrni38APXPtbC6cUkFz2cusa4qfv7ykM2HJhz0GmSoLFfhVDLjYzJ JQ0Aq+mYH0WjhKV7V321DySqZb+Yy2KpZSVa7Pwq6+lKaGlgL9wsZ9G8E6+8hBue 8TGWOk3Kn6pj/ISucPaFMfA1qGnU7V3Oz92j26sbjHI7tg24Amwr+P8kEd+yUCaQ sMG2kfN4l6eFVvUj8D15Dt67ISnVt4zgYPQY+OPzMg+Oen3xKOF8XQKSu7LCeTfK wyT3TijOdZUdkfcLlXPOz3kNGHXfsg79b5d+nK3CCWxdQFo99tUVsngYGaoMYzfz Rkaas2yyLSgElAX8jh6skmp5YPE+Njq4 -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:42 2025 by rpki-client