This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: 94Bh/LWRqiDcIH+xQ2PkcTBo+Rd13ngZ2TbyeCnshIM= Subject key identifier: 47:6A:1B:D1:D7:7D:FE:67:75:13:A8:13:E6:FF:F5:A8:C1:5E:5D:47 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0985 Signing time: Tue 30 Dec 2025 19:29:56 +0000 Manifest this update: Tue 30 Dec 2025 19:29:55 +0000 Manifest next update: Tue 06 Jan 2026 19:29:55 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: TipQkiKphQ4yr9C1IMcAZ9qFpPY5fYXcmp+dXnuozX8=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 19:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Dec 30 19:29:55 2025 GMT Not After : Jan 6 19:29:55 2026 GMT Subject: CN=69542833-3df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:fb:db:7f:43:36:46:09:cb:1d:95:00:02: 5b:47:2f:9d:a6:c7:e1:48:87:0f:90:d1:16:2f:f1: 53:e7:87:01:83:ca:71:e9:52:24:01:93:cb:c9:5e: 52:47:1a:6a:b5:65:48:86:90:99:50:7e:2c:b4:5c: 2f:90:0c:99:7a:5a:0d:1c:9f:35:bd:01:ed:3d:3e: 37:fa:3e:27:4c:38:31:0a:1e:ac:20:e4:a1:d9:1d: 80:ca:b8:bc:ca:26:d6:26:13:00:2e:4c:32:cf:3c: 26:a1:de:d3:de:ea:21:8e:fc:65:fe:01:6f:b3:f5: 74:39:b7:a7:6e:d9:5c:d3:48:07:af:62:1f:4a:8f: 83:01:e1:53:c4:b6:d5:68:48:a8:67:df:2f:6c:88: 7e:e5:d5:34:ff:56:b0:27:4f:86:31:1c:8b:6f:3b: 9c:5a:0a:a7:3f:c3:89:0a:6e:1e:5c:49:b7:05:a7: 9d:4c:2e:c2:4d:78:05:97:d7:53:03:08:9e:17:97: e7:0a:79:6a:33:30:16:9e:cb:ad:ce:47:76:91:13: 66:1c:7a:7d:ee:ff:91:98:a1:77:bb:74:a9:86:6b: 0a:20:06:8d:38:e2:b1:8c:ec:2e:dc:7f:8c:f5:ec: 19:69:37:3a:5e:65:93:b3:bc:70:6a:34:1a:12:d4: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6A:1B:D1:D7:7D:FE:67:75:13:A8:13:E6:FF:F5:A8:C1:5E:5D:47 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:36:2a:3a:82:bf:e8:b3:4c:35:9e:85:12:a7:af:56:1c:2f: 4e:43:53:26:16:03:6b:80:87:91:a5:e1:0e:aa:f5:7a:ae:9d: 07:9e:6b:66:9e:05:a9:12:55:d8:7a:e2:38:fa:85:e1:b1:ca: 68:63:1f:6c:b1:70:a9:66:69:04:b3:2d:e2:b9:8e:4b:26:a7: 88:8f:76:9f:e9:d2:96:9b:b9:05:70:60:46:40:e2:c5:77:33: 43:ac:09:41:cb:7b:84:2c:54:49:68:ba:f0:6d:e2:e4:bc:6a: 8e:83:4c:3b:8e:42:61:34:a0:95:73:a1:4e:70:d1:be:41:c7: 36:a5:a8:fb:41:e7:f9:30:76:27:34:46:c8:f1:9c:2b:48:da: 22:a2:4e:5c:c6:a6:7e:2c:e6:95:dd:eb:9f:32:5a:78:5f:30: 98:f9:81:61:c3:65:96:fa:cc:ca:13:6f:5e:f9:64:6b:4f:0b: be:df:bd:e9:77:4a:08:14:1c:81:17:46:b8:2d:95:4e:ff:fa: bc:7c:01:a9:b6:76:63:6a:51:2d:7d:46:bf:7a:54:1a:28:c1: 79:27:fa:f9:2e:51:e0:bd:41:21:0d:0f:ba:3e:6b:e0:2b:c3: 96:31:ea:96:12:a0:b0:0f:e1:b8:75:d1:52:bb:44:48:3b:ae: 88:52:97:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUxMjMwMTkyOTU1WhcNMjYwMTA2MTkyOTU1WjAYMRYwFAYD VQQDDA02OTU0MjgzMy0zZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslr7239DNkYJyx2VAAJbRy+dpsfhSIcPkNEWL/FT54cBg8px6VIkAZPLyV5S RxpqtWVIhpCZUH4stFwvkAyZeloNHJ81vQHtPT43+j4nTDgxCh6sIOSh2R2Ayri8 yibWJhMALkwyzzwmod7T3uohjvxl/gFvs/V0Obenbtlc00gHr2IfSo+DAeFTxLbV aEioZ98vbIh+5dU0/1awJ0+GMRyLbzucWgqnP8OJCm4eXEm3BaedTC7CTXgFl9dT AwieF5fnCnlqMzAWnsutzkd2kRNmHHp97v+RmKF3u3SphmsKIAaNOOKxjOwu3H+M 9ewZaTc6XmWTs7xwajQaEtTwBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdqG9HX ff5ndROoE+b/9ajBXl1HMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcNio6gr/os0w1noUSp69WHC9OQ1MmFgNrgIeRpeEOqvV6rp0Hnmtm ngWpElXYeuI4+oXhscpoYx9ssXCpZmkEsy3iuY5LJqeIj3af6dKWm7kFcGBGQOLF dzNDrAlBy3uELFRJaLrwbeLkvGqOg0w7jkJhNKCVc6FOcNG+Qcc2paj7Qef5MHYn NEbI8ZwrSNoiok5cxqZ+LOaV3eufMlp4XzCY+YFhw2WW+szKE29e+WRrTwu+373p d0oIFByBF0a4LZVO//q8fAGptnZjalEtfUa/elQaKMF5J/r5LlHgvUEhDQ+6Pmvg K8OWMeqWEqCwD+G4ddFSu0RIO66IUpdA -----END CERTIFICATE-----Generated at Wed Dec 31 01:47:15 2025 by rpki-client