This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: 9P2YCP7l2eaMhbu86usyS0la9yVw6k7IOTZsIArGmiw= Subject key identifier: 3D:5F:E3:7D:FB:99:F6:36:1E:C7:61:29:A5:A6:29:A8:0E:7A:81:97 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 057C Signing time: Mon 22 Dec 2025 22:26:44 +0000 Manifest this update: Mon 22 Dec 2025 22:26:44 +0000 Manifest next update: Mon 29 Dec 2025 22:26:44 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: pZA0dGvUEM0zD295Ms9PGMGicquAnebU8ktmA/MbKS0=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: oVtoN+E5ZyRj5IanIEy9OruScApwiNCgt2Cj41NAG60=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 0vZEihrEiMOTrqZx3qCnY1CqP36ZOjzC0GFn4Q1L7IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Dec 22 22:26:44 2025 GMT Not After : Dec 29 22:26:44 2025 GMT Subject: CN=6949c5a4-4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:49:55:45:94:53:ba:5c:04:a5:f0:ae:bb: 5a:96:72:13:f6:9c:58:83:7c:ad:0b:0b:ea:95:46: 3c:b7:cf:25:bd:74:86:f4:eb:b4:77:f6:d0:3b:fe: 68:2a:5d:c7:a1:4d:58:b2:f3:7f:c8:8c:86:f0:d9: 47:55:62:4e:33:c5:92:23:e9:60:05:03:24:11:f9: 78:2f:f3:61:bd:03:6d:42:09:f4:66:24:30:02:6d: b4:15:f2:ab:5e:ca:cb:9d:33:98:c2:fd:f1:14:5c: d6:84:18:4e:79:fc:b2:ea:ab:a7:57:94:a8:a4:7f: 51:bd:7b:80:d9:81:af:35:61:b9:ad:5e:d9:43:8f: 17:ca:30:34:41:44:d4:cb:99:a5:30:6b:99:03:04: bb:e0:78:9a:69:a2:7b:74:29:dd:67:9e:05:04:27: 71:58:83:78:ed:ce:44:68:c3:69:90:15:d1:5b:64: b8:88:72:e1:79:17:ff:42:4a:2a:19:a2:9a:70:07: f5:59:21:da:c4:35:b6:de:04:a0:23:08:81:c0:6f: 57:38:a3:1a:ae:4f:05:9c:2c:4f:97:46:62:fc:07: 2b:b7:bd:12:a6:fd:5d:48:fa:d1:af:da:8f:06:64: 8f:59:b8:b0:37:1a:e2:8d:55:d6:2a:26:f9:b0:04: 4f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5F:E3:7D:FB:99:F6:36:1E:C7:61:29:A5:A6:29:A8:0E:7A:81:97 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d6:d5:5b:c2:82:cc:89:e7:85:3c:41:19:78:9d:50:d9:66: 41:89:a8:16:e4:3d:a7:40:ac:3c:89:04:f9:e6:1e:1a:18:5e: 56:84:97:f7:8f:e7:c1:64:68:da:22:81:51:60:e3:be:1d:14: 3e:fb:1d:5b:99:ca:62:01:d9:09:81:73:a4:a2:1e:17:90:f8: 82:e3:7d:29:3b:43:0f:12:d5:32:05:77:db:54:73:d7:07:76: 4a:33:d4:37:c4:53:37:13:0b:5b:e7:f7:d0:c8:dd:90:59:bd: ee:86:35:64:df:e7:f1:55:c2:e0:52:f5:e5:24:d2:9c:10:f5: 24:ef:0a:2e:cd:93:00:9e:fb:b8:df:77:6d:1b:93:78:ab:e6: 3c:48:41:72:19:24:3e:36:05:9c:0c:c6:64:80:b6:c2:92:71: 08:e6:2b:18:70:26:e0:b5:20:b0:17:d1:f8:1f:7f:d6:c5:5f: 7c:9b:15:f0:1a:e3:a7:2a:88:9e:85:88:41:70:ef:ea:6e:4f: 2d:c1:03:85:6d:14:55:92:aa:a3:86:59:3e:b0:c6:e0:27:3b: 49:fe:00:9e:35:a3:06:8e:74:df:5a:78:50:ea:f7:34:02:ca: d8:0b:f3:0d:aa:d0:69:bc:b7:6e:85:2f:a6:e0:86:57:a4:ed: 69:9b:5e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUxMjIyMjIyNjQ0WhcNMjUxMjI5MjIyNjQ0WjAYMRYwFAYD VQQDDA02OTQ5YzVhNC00ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooVJVUWUU7pcBKXwrrtalnIT9pxYg3ytCwvqlUY8t88lvXSG9Ou0d/bQO/5o Kl3HoU1YsvN/yIyG8NlHVWJOM8WSI+lgBQMkEfl4L/NhvQNtQgn0ZiQwAm20FfKr XsrLnTOYwv3xFFzWhBhOefyy6qunV5SopH9RvXuA2YGvNWG5rV7ZQ48XyjA0QUTU y5mlMGuZAwS74HiaaaJ7dCndZ54FBCdxWIN47c5EaMNpkBXRW2S4iHLheRf/Qkoq GaKacAf1WSHaxDW23gSgIwiBwG9XOKMark8FnCxPl0Zi/Acrt70Spv1dSPrRr9qP BmSPWbiwNxrijVXWKib5sARPRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1f4337 mfY2HsdhKaWmKagOeoGXMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV1tVbwoLMieeFPEEZeJ1Q2WZBiagW5D2nQKw8iQT55h4aGF5WhJf3 j+fBZGjaIoFRYOO+HRQ++x1bmcpiAdkJgXOkoh4XkPiC430pO0MPEtUyBXfbVHPX B3ZKM9Q3xFM3Ewtb5/fQyN2QWb3uhjVk3+fxVcLgUvXlJNKcEPUk7wouzZMAnvu4 33dtG5N4q+Y8SEFyGSQ+NgWcDMZkgLbCknEI5isYcCbgtSCwF9H4H3/WxV98mxXw GuOnKoiehYhBcO/qbk8twQOFbRRVkqqjhlk+sMbgJztJ/gCeNaMGjnTfWnhQ6vc0 AsrYC/MNqtBpvLduhS+m4IZXpO1pm15o -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:16 2025 by rpki-client