This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: vNpLRvJ9r6tOnHF6ABOPRdKkQQ7mN0WWsohVWl9PJ8o= Subject key identifier: A3:16:E2:91:E1:E0:B6:D8:45:7B:F5:3E:C3:2F:E3:F0:5D:F5:AA:05 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 040F Signing time: Sat 20 Dec 2025 23:41:00 +0000 Manifest this update: Sat 20 Dec 2025 23:40:59 +0000 Manifest next update: Sat 27 Dec 2025 23:40:59 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: jxTxHnPa5DiURuB0wTtm4NCJyRfVYr2tvVQpK+Bwams=) 2: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 3: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Dec 20 23:40:59 2025 GMT Not After : Dec 27 23:40:59 2025 GMT Subject: CN=6947340c-2749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:d1:f5:5d:3d:84:44:1d:ec:30:21:ef:0a: f1:11:79:93:a7:af:fd:ea:77:20:6f:f1:56:8a:ff: 55:16:4e:b5:f8:ad:56:03:d4:e8:6e:97:6f:ff:ae: 27:68:da:85:99:8f:eb:25:b3:03:2c:54:b0:5d:27: 24:94:b3:69:ed:ce:25:82:f0:1d:1f:a2:c2:6a:a7: f8:d5:91:a2:78:ed:ab:9b:53:58:f1:ea:0a:4a:48: e5:7f:e2:f0:ec:0b:74:b6:71:a1:ce:bf:bd:24:d9: 22:4e:84:83:44:23:91:c1:57:ce:fd:13:c6:76:d8: 37:7e:91:7d:4d:8f:6c:08:da:0e:38:9e:ce:8e:1e: bd:f4:88:d9:90:d8:9d:ef:25:18:7c:16:54:65:47: 3d:a6:43:4f:5c:54:87:88:29:62:37:99:85:0e:42: 4c:9a:20:ce:ef:4b:3a:0f:3f:43:92:a5:68:49:1e: 6e:08:b8:f4:ff:f4:dd:85:40:cc:5d:6b:6e:4a:03: 74:e1:5d:11:56:94:f0:d4:47:7c:59:d8:2f:82:4c: 17:42:ad:a4:c6:d9:18:b1:e4:11:91:59:05:f7:5f: 1e:3d:dc:6c:5a:44:04:f9:65:0f:3d:21:d8:74:4a: 63:b7:df:12:48:39:9f:13:e1:4e:ac:8c:55:76:c7: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:16:E2:91:E1:E0:B6:D8:45:7B:F5:3E:C3:2F:E3:F0:5D:F5:AA:05 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:81:0c:13:d5:c8:c0:8a:f0:06:aa:23:7b:5c:57:03:05:be: 2e:d6:2a:33:df:e8:8b:31:e2:b2:0a:60:e7:37:57:7b:a2:06: 36:48:d8:8c:db:7e:94:07:68:aa:36:3e:85:f6:f4:65:49:0d: 54:79:70:35:e5:ad:50:8f:43:0a:96:78:b2:1c:ae:e8:61:9d: b3:1f:13:33:bc:72:64:48:d3:1a:bd:9a:3a:12:44:19:d5:e9: b6:a8:9a:ca:90:49:0a:4d:e8:4e:9a:5b:d8:98:03:45:81:8f: 10:db:8a:22:14:9d:31:7f:46:a9:80:fe:34:4d:16:0a:bc:6d: b0:d6:a0:d4:63:02:91:52:68:60:74:af:98:19:a0:7c:88:46: 2f:fa:72:84:c5:28:89:7c:34:12:4f:36:7d:dd:9a:45:49:73: 46:68:1b:02:f8:45:6a:bb:21:0a:b0:d1:36:f9:c8:61:c7:6c: a9:5b:91:67:a0:72:96:33:76:32:46:06:77:39:39:59:a3:c0: c0:cb:ff:21:0a:17:81:e0:80:4c:56:1a:f7:c8:78:a7:ee:1b: 7c:d5:1b:25:de:50:b9:f5:9d:70:62:d3:dd:09:f8:57:f5:39: 0f:e7:aa:01:2f:e6:91:99:4f:53:60:72:54:23:53:f5:5d:41: 6a:17:c7:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUxMjIwMjM0MDU5WhcNMjUxMjI3MjM0MDU5WjAYMRYwFAYD VQQDDA02OTQ3MzQwYy0yNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPjR9V09hEQd7DAh7wrxEXmTp6/96ncgb/FWiv9VFk61+K1WA9Tobpdv/64n aNqFmY/rJbMDLFSwXScklLNp7c4lgvAdH6LCaqf41ZGieO2rm1NY8eoKSkjlf+Lw 7At0tnGhzr+9JNkiToSDRCORwVfO/RPGdtg3fpF9TY9sCNoOOJ7Ojh699IjZkNid 7yUYfBZUZUc9pkNPXFSHiCliN5mFDkJMmiDO70s6Dz9DkqVoSR5uCLj0//TdhUDM XWtuSgN04V0RVpTw1Ed8WdgvgkwXQq2kxtkYseQRkVkF918ePdxsWkQE+WUPPSHY dEpjt98SSDmfE+FOrIxVdseOQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMW4pHh 4LbYRXv1PsMv4/Bd9aoFMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbgQwT1cjAivAGqiN7XFcDBb4u1ioz3+iLMeKyCmDnN1d7ogY2SNiM 236UB2iqNj6F9vRlSQ1UeXA15a1Qj0MKlniyHK7oYZ2zHxMzvHJkSNMavZo6EkQZ 1em2qJrKkEkKTehOmlvYmANFgY8Q24oiFJ0xf0apgP40TRYKvG2w1qDUYwKRUmhg dK+YGaB8iEYv+nKExSiJfDQSTzZ93ZpFSXNGaBsC+EVquyEKsNE2+chhx2ypW5Fn oHKWM3YyRgZ3OTlZo8DAy/8hCheB4IBMVhr3yHin7ht81Rsl3lC59Z1wYtPdCfhX 9TkP56oBL+aRmU9TYHJUI1P1XUFqF8cq -----END CERTIFICATE-----Generated at Sun Dec 21 06:33:59 2025 by rpki-client