This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: OoywH6FHLdt14EcC9dJadyb3KzDIog+5XUImllsAg2I= Subject key identifier: 63:B9:EE:40:07:F0:96:FA:94:55:25:5C:A1:89:A8:38:B2:BE:36:62 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D7B Signing time: Thu 18 Dec 2025 17:45:11 +0000 Manifest this update: Thu 18 Dec 2025 17:45:11 +0000 Manifest next update: Thu 25 Dec 2025 17:45:11 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: /3y5Eyiktw0xoB3akKdb7qIxn9yE9fK/pa4ScM25MXU=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: jEIejTZE4y5/nDEgx6mik+hQ7BxADqtxZpUBPhdWvAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Dec 18 17:45:11 2025 GMT Not After : Dec 25 17:45:11 2025 GMT Subject: CN=69443da7-3b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:61:7c:46:49:9c:89:14:b2:e7:30:35:12: bb:c9:e1:88:8e:0f:12:a0:80:4d:84:47:78:cb:d1: 33:31:5c:f3:27:4e:b9:9d:8e:69:17:5a:40:87:8c: 2b:72:0d:c7:f4:13:52:fe:06:0f:5c:82:c7:bd:3a: a9:f2:1b:c5:d8:cb:e5:6b:56:38:a1:a0:35:97:9f: 52:c8:b0:c4:b1:06:a3:e6:be:3b:12:42:97:d8:18: f7:c3:d2:35:12:54:d6:8a:42:b4:2d:23:33:8b:d6: 0f:8a:ec:8f:ab:f6:d5:dc:86:8a:a3:65:38:b4:40: 46:61:8b:80:2f:03:87:b4:74:0e:94:88:be:b5:46: ac:a2:e2:ce:70:7f:4c:c8:a1:8a:d7:1d:ec:a8:e3: 8e:53:3b:06:31:fd:d9:c6:17:ac:97:fb:4c:4f:ab: 8e:98:73:ec:08:cc:da:5a:cf:07:44:2a:5d:37:5f: 22:1e:3c:26:a5:e7:e1:13:2b:89:d3:47:e4:e9:41: c3:de:d4:ed:57:cf:7b:2e:16:9e:f4:8a:f1:bf:a1: 26:76:5e:7e:d3:64:1c:34:1d:8b:f1:1c:38:34:fa: dc:5d:6f:53:c0:61:c2:c8:f8:5e:91:f0:56:98:bc: 1a:7c:5e:ff:f3:36:71:e0:f1:a1:2a:6f:ad:4a:9b: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B9:EE:40:07:F0:96:FA:94:55:25:5C:A1:89:A8:38:B2:BE:36:62 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8c:e0:71:23:3c:73:3c:46:50:8e:61:4b:5e:fd:40:da:d4: ec:53:e8:09:ef:60:fc:09:2c:6f:e5:0e:03:58:c9:d9:47:53: ad:6d:4e:ce:c3:93:f9:ad:12:49:1c:5d:3d:37:13:2e:5d:5d: 73:12:ac:f0:56:56:13:e7:9f:dc:b4:9a:00:bb:3d:a2:a0:30: 91:ee:dd:e2:7b:e4:27:27:88:9c:d8:58:1e:b3:3d:cd:99:a8: 5b:6e:7e:fa:27:93:8a:14:8e:86:87:65:d0:71:67:63:f2:fb: 74:f9:b8:a0:5d:5d:1e:92:77:a2:86:85:33:55:af:9d:b3:8d: dc:76:e3:fb:b1:19:9c:ea:ad:32:83:1f:62:c4:08:5e:6e:85: c2:af:16:ce:39:32:f4:de:73:22:05:a3:3e:aa:77:84:2b:cd: b4:1c:ec:ff:52:93:01:5c:3d:8a:93:81:9c:f5:22:b2:20:ee: 75:79:6f:b2:ea:5a:92:ea:90:93:a2:c1:19:c3:be:f5:a6:f1: 80:0a:2f:e1:c1:a0:c0:4a:05:be:21:f7:fc:08:10:ea:67:c7: a3:8b:06:e7:00:f7:3a:38:be:57:be:e2:dc:77:23:ca:1e:69: a1:36:d8:ed:1e:1e:9f:51:58:57:25:1b:3e:c9:56:8a:55:a8: ad:ed:0c:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUxMjE4MTc0NTExWhcNMjUxMjI1MTc0NTExWjAYMRYwFAYD VQQDDA02OTQ0M2RhNy0zYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmshhfEZJnIkUsucwNRK7yeGIjg8SoIBNhEd4y9EzMVzzJ065nY5pF1pAh4wr cg3H9BNS/gYPXILHvTqp8hvF2Mvla1Y4oaA1l59SyLDEsQaj5r47EkKX2Bj3w9I1 ElTWikK0LSMzi9YPiuyPq/bV3IaKo2U4tEBGYYuALwOHtHQOlIi+tUasouLOcH9M yKGK1x3sqOOOUzsGMf3Zxhesl/tMT6uOmHPsCMzaWs8HRCpdN18iHjwmpefhEyuJ 00fk6UHD3tTtV897Lhae9Irxv6Emdl5+02QcNB2L8Rw4NPrcXW9TwGHCyPhekfBW mLwafF7/8zZx4PGhKm+tSps+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO57kAH 8Jb6lFUlXKGJqDiyvjZiMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkjOBxIzxzPEZQjmFLXv1A2tTsU+gJ72D8CSxv5Q4DWMnZR1OtbU7O w5P5rRJJHF09NxMuXV1zEqzwVlYT55/ctJoAuz2ioDCR7t3ie+QnJ4ic2Fgesz3N mahbbn76J5OKFI6Gh2XQcWdj8vt0+bigXV0ekneihoUzVa+ds43cduP7sRmc6q0y gx9ixAheboXCrxbOOTL03nMiBaM+qneEK820HOz/UpMBXD2Kk4Gc9SKyIO51eW+y 6lqS6pCTosEZw771pvGACi/hwaDASgW+Iff8CBDqZ8ejiwbnAPc6OL5XvuLcdyPK HmmhNtjtHh6fUVhXJRs+yVaKVait7QxQ -----END CERTIFICATE-----Generated at Fri Dec 19 19:23:20 2025 by rpki-client