This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: Lu79aSsSomCeuVzRLeGAKOYiFM4QgJFVM8zKtckaZOE= Subject key identifier: 14:6C:C6:E3:04:75:A2:9E:B9:35:20:DD:A3:71:F2:B7:D4:E4:FF:F3 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 097F Signing time: Thu 18 Dec 2025 19:37:17 +0000 Manifest this update: Thu 18 Dec 2025 19:37:16 +0000 Manifest next update: Thu 25 Dec 2025 19:37:16 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: p7/l4HxRKyGKhEXGqI7cdMwYL8mFg7vFYBcpEOYO0V4=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Dec 18 19:37:16 2025 GMT Not After : Dec 25 19:37:16 2025 GMT Subject: CN=694457ed-f95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:22:51:b0:38:95:f6:c6:68:b9:5e:4c:e8: 39:7d:5e:2e:c0:80:b2:a5:91:35:b3:32:d0:b0:9f: 8e:4d:3a:e9:95:57:76:84:f0:a3:a8:8b:fc:3a:0b: 24:58:4d:74:58:18:4c:16:73:c7:77:fe:70:fc:e7: 51:f6:db:8b:88:13:e8:4c:ee:f5:99:5e:80:8b:b3: f2:9a:d4:a4:fd:42:e5:0b:40:27:ca:19:d2:a3:42: 97:4c:de:b2:54:bf:9b:42:e0:b4:fa:d8:09:90:0e: 88:03:4d:ce:4f:e0:c2:59:d3:58:02:08:9d:99:5a: 98:69:9b:d9:84:09:39:21:ae:ba:d6:2e:53:32:3a: e3:76:96:37:98:77:75:ab:b1:d6:93:b7:76:5b:d8: 18:7a:ed:9f:e2:8c:cc:03:7d:3c:fd:42:75:1d:ee: 72:02:d8:45:ff:d6:f8:cf:40:bc:49:cd:9a:02:ce: b9:b7:9a:64:01:8d:bd:ec:f1:99:0d:d4:97:1a:e9: ae:56:5a:3d:10:13:82:db:5f:d9:e5:82:20:29:58: 73:0d:c1:e7:24:e6:da:39:c7:dc:cf:7e:18:e6:9d: 34:8c:5b:e3:af:74:5f:91:d4:65:9d:e9:b4:9e:ba: 1f:02:0f:11:a7:b6:3b:66:38:bd:b7:27:39:3b:88: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:C6:E3:04:75:A2:9E:B9:35:20:DD:A3:71:F2:B7:D4:E4:FF:F3 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a4:50:e9:5d:9c:02:90:48:2d:7a:e4:b8:36:b7:bd:cb:2e: b0:b8:a6:2c:b3:5f:90:2c:a3:6f:69:e3:2d:d4:61:21:8c:b7: 03:42:9d:61:25:6e:6a:5a:d6:fa:a7:bd:5b:00:1f:0f:65:a9: cc:60:9a:80:84:ca:55:7e:9b:ea:3b:86:2b:82:1a:e5:da:0f: 7c:8a:6a:ef:1a:ec:9c:94:ca:c9:34:1b:8b:14:04:d8:88:0e: f4:71:68:28:a8:80:9d:8c:dd:55:88:f2:85:25:6f:3e:0a:1d: 3f:ed:b9:96:35:80:35:01:6d:9b:6c:75:d4:c1:c6:58:43:19: 7b:29:4a:df:ab:73:f6:79:93:23:f7:8d:17:ed:e4:b6:6b:78: 1a:39:b5:44:e7:a7:d2:fc:43:6b:e1:c4:c8:5c:cd:83:25:60: c5:57:a8:6e:f2:db:d9:8e:30:10:23:44:69:08:71:4e:14:35: 63:43:e5:e4:30:3a:89:c7:bb:05:07:ba:3e:da:c8:d9:80:9c: 65:99:a2:d5:4d:d9:a7:33:52:b7:85:8b:de:59:86:40:13:ca: 28:ed:a7:24:19:d3:99:4e:03:31:aa:d1:27:e7:a1:74:4f:5c: 59:1c:20:f6:60:d6:6d:bc:38:4f:84:62:71:ce:c8:ef:d0:d2: c6:8f:f0:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUxMjE4MTkzNzE2WhcNMjUxMjI1MTkzNzE2WjAYMRYwFAYD VQQDDA02OTQ0NTdlZC1mOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmgiUbA4lfbGaLleTOg5fV4uwICypZE1szLQsJ+OTTrplVd2hPCjqIv8Ogsk WE10WBhMFnPHd/5w/OdR9tuLiBPoTO71mV6Ai7PymtSk/ULlC0AnyhnSo0KXTN6y VL+bQuC0+tgJkA6IA03OT+DCWdNYAgidmVqYaZvZhAk5Ia661i5TMjrjdpY3mHd1 q7HWk7d2W9gYeu2f4ozMA308/UJ1He5yAthF/9b4z0C8Sc2aAs65t5pkAY297PGZ DdSXGumuVlo9EBOC21/Z5YIgKVhzDcHnJObaOcfcz34Y5p00jFvjr3RfkdRlnem0 nrofAg8Rp7Y7Zji9tyc5O4hkiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRsxuME daKeuTUg3aNx8rfU5P/zMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGpFDpXZwCkEgteuS4Nre9yy6wuKYss1+QLKNvaeMt1GEhjLcDQp1h JW5qWtb6p71bAB8PZanMYJqAhMpVfpvqO4Yrghrl2g98imrvGuyclMrJNBuLFATY iA70cWgoqICdjN1ViPKFJW8+Ch0/7bmWNYA1AW2bbHXUwcZYQxl7KUrfq3P2eZMj 940X7eS2a3gaObVE56fS/ENr4cTIXM2DJWDFV6hu8tvZjjAQI0RpCHFOFDVjQ+Xk MDqJx7sFB7o+2sjZgJxlmaLVTdmnM1K3hYveWYZAE8oo7ackGdOZTgMxqtEn56F0 T1xZHCD2YNZtvDhPhGJxzsjv0NLGj/Cy -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:10 2025 by rpki-client