This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: LTpd4k9pCasPB5P+nXW453qhXV596dMXSibUGd4UHiE= Subject key identifier: FC:A6:B7:A0:14:EE:53:78:B4:53:A9:F6:7F:C9:0E:18:4C:3F:16:D4 Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 0248 Signing time: Fri 19 Dec 2025 01:02:07 +0000 Manifest this update: Fri 19 Dec 2025 01:02:07 +0000 Manifest next update: Fri 26 Dec 2025 01:02:07 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: ZtuAX97W1T3OHONYz+cAgHogTRDBNdxpN1qVJDisOoc=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: N+dN6EXW9kLpuaXIDcRP+SypH2TkoWeKEFt5XA9cnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Dec 19 01:02:07 2025 GMT Not After : Dec 26 01:02:07 2025 GMT Subject: CN=6944a40f-f997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:33:8b:8b:26:03:e3:93:ca:23:95:e4:09: fd:b3:b0:b0:98:74:5f:8e:d7:df:fa:84:23:85:d7: df:0c:3d:d4:a5:0b:c3:40:8a:f5:87:68:fc:43:38: 8c:e9:ba:71:b2:19:0f:04:7b:d1:82:40:83:4d:59: 10:a8:6e:66:65:0e:19:ef:d9:a1:92:7b:7b:ba:ed: 7f:89:18:12:54:ba:77:54:bd:b0:84:b8:2d:55:96: 6c:7d:a1:35:9e:89:48:9b:a2:de:3e:eb:d3:d8:ae: 2d:cb:5d:0c:99:ca:5f:c7:82:fc:c6:9b:8a:97:d8: e2:8f:1b:db:19:ae:7c:3b:2b:14:1b:ca:1e:6c:7a: d5:a7:fd:24:e1:46:08:7d:1f:ce:52:50:d1:84:84: b7:c1:75:43:89:3f:1d:8b:6c:f9:7d:7f:d5:09:59: 08:f3:87:35:62:dc:63:43:3c:dd:5c:8b:47:90:f6: bb:a7:c3:dd:f3:77:39:ba:d7:b5:a2:fd:92:f0:78: 22:40:a9:02:87:a9:ba:09:06:38:b3:5a:f6:8d:8d: 43:e7:cf:72:9e:fb:5d:c8:2c:45:bb:f0:7f:0a:ec: 9b:9f:af:3d:af:c1:a6:6d:49:ae:82:03:86:0e:8f: 81:3f:2d:97:0f:0a:af:21:6b:d6:de:cf:98:75:b9: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:B7:A0:14:EE:53:78:B4:53:A9:F6:7F:C9:0E:18:4C:3F:16:D4 X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e5:67:d1:5e:34:d5:08:af:73:bf:4a:47:da:0c:44:03:43: e0:b2:42:d7:80:1a:88:9b:dc:e9:1e:3d:8f:b2:1e:d0:0c:99: 83:8a:1d:aa:bf:ce:14:bf:ed:40:41:1d:ad:a6:20:f9:c1:24: 1d:07:99:fe:13:50:c8:77:3f:63:b6:51:b8:b7:8e:48:f3:17: 16:b8:4d:d8:a8:a3:16:eb:ab:6b:6b:44:7b:a2:1d:38:43:73: f4:b7:76:ac:27:9a:69:94:93:d7:b5:37:62:9c:44:d4:84:6f: fb:28:38:c7:a1:73:b0:98:75:2f:f3:52:26:23:30:76:d7:e2: d6:c8:30:8e:2a:29:a1:c1:33:e8:4f:87:a6:ff:42:04:a4:72: 35:b5:b2:26:f1:67:83:06:66:63:9b:4d:d2:98:cc:bf:2e:95: 88:1c:d6:09:66:24:83:6c:70:82:b2:50:71:a9:11:10:d6:1a: 99:cc:c2:f0:54:fc:5e:95:ca:2d:aa:38:0e:e6:a6:74:4c:f8: 37:a8:14:25:28:ef:0d:6a:ce:36:b4:28:11:e9:c5:eb:6c:08: 24:29:e0:c1:a0:53:84:58:10:45:8e:28:06:77:74:f8:65:89: de:2f:50:be:ff:62:ea:55:ec:b7:20:d0:24:d6:2e:87:48:9b: c2:73:19:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjUxMjE5MDEwMjA3WhcNMjUxMjI2MDEwMjA3WjAYMRYwFAYD VQQDDA02OTQ0YTQwZi1mOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Mzi4smA+OTyiOV5An9s7CwmHRfjtff+oQjhdffDD3UpQvDQIr1h2j8QziM 6bpxshkPBHvRgkCDTVkQqG5mZQ4Z79mhknt7uu1/iRgSVLp3VL2whLgtVZZsfaE1 nolIm6LePuvT2K4ty10Mmcpfx4L8xpuKl9jijxvbGa58OysUG8oebHrVp/0k4UYI fR/OUlDRhIS3wXVDiT8di2z5fX/VCVkI84c1YtxjQzzdXItHkPa7p8Pd83c5ute1 ov2S8HgiQKkCh6m6CQY4s1r2jY1D589ynvtdyCxFu/B/Cuybn689r8GmbUmuggOG Do+BPy2XDwqvIWvW3s+Ydbm4ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPymt6AU 7lN4tFOp9n/JDhhMPxbUMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk5WfRXjTVCK9zv0pH2gxEA0PgskLXgBqIm9zpHj2Psh7QDJmDih2q v84Uv+1AQR2tpiD5wSQdB5n+E1DIdz9jtlG4t45I8xcWuE3YqKMW66tra0R7oh04 Q3P0t3asJ5pplJPXtTdinETUhG/7KDjHoXOwmHUv81ImIzB21+LWyDCOKimhwTPo T4em/0IEpHI1tbIm8WeDBmZjm03SmMy/LpWIHNYJZiSDbHCCslBxqREQ1hqZzMLw VPxelcotqjgO5qZ0TPg3qBQlKO8Nas42tCgR6cXrbAgkKeDBoFOEWBBFjigGd3T4 ZYneL1C+/2LqVey3INAk1i6HSJvCcxl0 -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:19 2025 by rpki-client