This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: YO2Tbn+MFlaSSHEUMuQ9MAAKTQ8Gap9XgBX/ys+yZfE= Subject key identifier: B1:6B:39:7A:E9:B8:DB:0C:F8:A8:A3:7E:DA:4D:97:1C:DF:A1:0D:AB Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D11 Signing time: Wed 31 Dec 2025 17:49:33 +0000 Manifest this update: Wed 31 Dec 2025 17:49:33 +0000 Manifest next update: Wed 07 Jan 2026 17:49:33 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: +z8HFisSgdv5CHKF6KkEgp0aBXvwNVYzQMQDfZxhQ/0=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: WwXl48vJNivZYV02F4DhTAdSziCXHjo0WT9hGEi74tE=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: odtdAeT3uybzWOWQg7rEN3DZC1Lg8w9hAFA2d8d7ZGI=) 4: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 17:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3364 (0xd24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Dec 31 17:49:33 2025 GMT Not After : Jan 7 17:49:33 2026 GMT Subject: CN=6955622d-087a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:ed:7a:e7:53:d3:37:55:8e:a5:0d:04:23: 60:0c:81:e7:ab:60:60:b8:34:c3:89:05:9f:70:76: c6:09:4e:bd:62:6e:f4:cc:8a:ed:b5:65:08:ae:15: 9d:38:bd:dc:29:c3:50:e1:8d:d1:1a:c6:21:f5:ac: 37:9d:f6:fc:c1:18:2e:e7:64:16:53:be:48:8c:5b: 24:c0:50:3f:76:2b:52:50:fb:35:71:a1:ab:57:2f: 13:62:ef:32:01:ee:99:24:fc:d9:ea:1c:c2:69:39: 7f:49:67:76:37:a4:21:64:25:c9:90:d1:1d:fc:3f: 05:45:8c:c4:ea:14:51:91:b2:05:b6:06:93:c0:bd: da:0d:a2:a1:17:d8:9c:67:3f:31:b2:15:18:1e:66: 4e:26:61:9e:9b:8a:7f:eb:40:12:a2:f5:c4:d2:1d: c5:66:47:c3:78:bc:7f:2a:ea:96:87:43:ec:1a:6d: 4d:79:06:51:65:cc:f7:f0:72:2c:3f:40:67:7e:72: 55:32:01:8b:6c:08:bd:31:eb:1e:2e:36:08:66:67: 9d:7d:97:e7:06:70:f1:d9:9a:06:0a:cf:bb:83:81: d7:70:5b:11:71:54:06:08:7a:e1:76:1f:6e:72:06: 11:65:77:18:43:2f:0f:d3:63:11:d6:49:d6:1f:dd: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6B:39:7A:E9:B8:DB:0C:F8:A8:A3:7E:DA:4D:97:1C:DF:A1:0D:AB X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e8:84:81:c3:40:9b:e3:db:bf:ea:0d:b7:7e:b8:6c:a7:50: 09:7d:ee:a2:4e:f6:8d:0a:df:af:2e:8c:16:5b:e4:64:31:64: bf:7a:f0:be:5e:90:4f:ad:52:28:a9:64:e1:53:11:3e:5e:46: b2:92:d2:76:be:e2:18:06:be:cc:5b:7e:52:1a:97:e5:88:70: 4f:ad:ad:15:3e:04:ea:77:16:00:57:3b:9d:33:b4:a8:ff:95: fd:e6:f4:08:6d:23:59:fe:c8:b0:81:48:41:25:73:5a:88:b6: a1:20:18:bd:7e:a3:0e:88:a5:e3:15:4f:c9:d8:ff:46:61:bd: a7:70:a5:6f:66:9f:91:c1:ca:46:a5:3c:c3:17:ef:bf:cd:29: 4e:4d:3e:5e:a2:c7:be:9d:2f:3e:8f:2e:02:ab:24:f0:4e:59: ed:87:69:49:31:f0:af:d5:12:1c:31:50:e9:99:95:7b:29:c7: dd:61:1b:7b:ab:5b:a0:17:75:0f:25:64:2a:e3:6d:f3:3b:49: 9d:96:a5:b8:e8:11:33:f0:61:51:19:74:00:77:e7:6e:62:98: 8c:e5:2c:cf:b3:03:52:d9:46:fc:ad:08:30:cc:0a:a7:98:b7: ab:71:18:b6:e7:f6:e8:4a:50:05:12:91:e8:de:26:c5:62:00: 3d:86:77:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUxMjMxMTc0OTMzWhcNMjYwMTA3MTc0OTMzWjAYMRYwFAYD VQQDDA02OTU1NjIyZC0wODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ7teudT0zdVjqUNBCNgDIHnq2BguDTDiQWfcHbGCU69Ym70zIrttWUIrhWd OL3cKcNQ4Y3RGsYh9aw3nfb8wRgu52QWU75IjFskwFA/ditSUPs1caGrVy8TYu8y Ae6ZJPzZ6hzCaTl/SWd2N6QhZCXJkNEd/D8FRYzE6hRRkbIFtgaTwL3aDaKhF9ic Zz8xshUYHmZOJmGem4p/60ASovXE0h3FZkfDeLx/KuqWh0PsGm1NeQZRZcz38HIs P0BnfnJVMgGLbAi9MeseLjYIZmedfZfnBnDx2ZoGCs+7g4HXcFsRcVQGCHrhdh9u cgYRZXcYQy8P02MR1knWH92UkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFrOXrp uNsM+KijftpNlxzfoQ2rMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA6ISBw0Cb49u/6g23frhsp1AJfe6iTvaNCt+vLowWW+RkMWS/evC+ XpBPrVIoqWThUxE+XkayktJ2vuIYBr7MW35SGpfliHBPra0VPgTqdxYAVzudM7So /5X95vQIbSNZ/siwgUhBJXNaiLahIBi9fqMOiKXjFU/J2P9GYb2ncKVvZp+RwcpG pTzDF++/zSlOTT5eose+nS8+jy4CqyTwTlnth2lJMfCv1RIcMVDpmZV7KcfdYRt7 q1ugF3UPJWQq423zO0mdlqW46BEz8GFRGXQAd+duYpiM5SzPswNS2Ub8rQgwzAqn mLercRi25/boSlAFEpHo3ibFYgA9hnfu -----END CERTIFICATE-----Generated at Thu Jan 1 02:37:26 2026 by rpki-client