This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: NMSb+nuq63KJAkjQIiv4liOD0rUpVftwY5MxezsP31A= Subject key identifier: 12:75:32:1A:57:5C:21:02:0C:5D:7E:E4:E1:F0:24:1A:5D:99:CE:92 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: DA Signing time: Sun 21 Dec 2025 04:45:55 +0000 Manifest this update: Sun 21 Dec 2025 04:45:55 +0000 Manifest next update: Sun 28 Dec 2025 04:45:55 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: RX88/MbHWN/xIWKL85grMW2V1/E9Vj4AQ+09pdgAANQ=) 2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: qSH5h5rhfF2GxCdM6cfWpd9BiagkUdZKPfSn4h0sbnw=) 3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: QPPTXA+ALXUhXbBS6N6EbcLL1inNfd3655N4UckWgIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Dec 21 04:45:55 2025 GMT Not After : Dec 28 04:45:55 2025 GMT Subject: CN=69477b83-7f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:0d:af:30:04:22:bd:aa:4d:8e:7a:33:6c: be:9d:cd:7a:80:f8:de:93:e8:c0:79:6d:fc:e2:ba: 79:67:6e:32:5d:16:60:70:c3:c0:6f:4a:5a:9a:30: f3:e0:90:84:14:6a:ed:96:cb:e7:d5:be:73:a3:31: e2:c5:44:94:83:e2:87:ca:bb:fa:70:3f:9b:cb:49: cf:e7:74:11:bd:9d:9a:cf:66:b8:a3:6f:c0:8b:14: 25:4e:c9:a4:49:7e:23:71:59:1d:b4:83:c2:29:f7: 79:b1:2b:66:3d:85:2d:99:2f:1b:b5:fd:f5:4e:09: 47:d0:e2:b2:bb:d2:c9:c0:5e:1d:64:76:61:33:13: 9d:48:09:4e:7d:08:76:fb:12:1e:33:37:87:29:3f: a4:2e:ed:41:40:f5:5e:52:d0:05:e1:a9:a5:3d:35: d3:69:67:ba:38:f8:3b:60:cc:28:50:91:20:7f:e4: 34:19:70:9a:80:5a:23:69:3f:90:52:7f:ce:63:21: 88:f9:04:d6:52:24:33:ee:57:b3:d2:28:f3:c0:77: 29:09:ee:74:02:d7:2e:e9:08:29:4f:90:ac:86:b8: 54:f4:69:b5:87:b4:78:ce:81:6f:ef:cd:d0:7c:a3: e8:c3:a9:4d:9a:c5:69:1c:77:a9:e4:61:9c:75:e0: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:75:32:1A:57:5C:21:02:0C:5D:7E:E4:E1:F0:24:1A:5D:99:CE:92 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a6:2a:69:e5:f2:8a:87:3f:46:cc:e5:a7:79:ba:7a:63:d4: 43:5c:89:9c:6a:22:4b:5b:c6:68:2a:b5:d6:75:8f:00:53:63: 3a:65:67:cc:ec:01:f1:af:3e:6f:2f:ec:83:f8:af:23:eb:ff: c8:2b:40:a3:e4:17:7a:50:0c:5c:37:24:27:f0:71:12:92:24: f4:65:df:61:ae:96:90:80:b3:11:48:49:d6:b1:2d:26:68:9b: 28:51:ad:36:48:76:a6:15:7c:55:c4:f5:00:98:ca:25:d0:75: 98:9c:6c:9d:91:07:c8:d9:e7:ff:e7:d9:80:98:f7:a2:c2:bc: 94:8d:25:2c:92:be:3f:1b:4a:8d:c9:de:2a:2c:fa:5a:d6:ae: eb:eb:2a:0f:c2:05:52:8c:63:dc:cf:0e:c7:24:38:a7:2d:0d: 4d:41:e8:4b:40:c3:9b:3b:77:51:34:e8:49:2e:a4:53:93:4c: b6:42:37:3f:e6:88:1d:8c:a7:dc:c0:6f:fd:d3:7a:f4:f8:80: 24:e8:b6:14:b3:76:fd:58:ed:ca:c3:c8:dc:74:57:a7:79:2f: de:05:d8:7a:0e:67:a7:50:30:dd:8b:7e:82:5b:b7:75:14:4d: 9d:45:d5:8b:02:af:2a:17:26:4b:53:81:c7:f1:87:bd:03:a1: 49:eb:ef:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjUxMjIxMDQ0NTU1WhcNMjUxMjI4MDQ0NTU1WjAYMRYwFAYD VQQDDA02OTQ3N2I4My03ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMwNrzAEIr2qTY56M2y+nc16gPjek+jAeW384rp5Z24yXRZgcMPAb0pamjDz 4JCEFGrtlsvn1b5zozHixUSUg+KHyrv6cD+by0nP53QRvZ2az2a4o2/AixQlTsmk SX4jcVkdtIPCKfd5sStmPYUtmS8btf31TglH0OKyu9LJwF4dZHZhMxOdSAlOfQh2 +xIeMzeHKT+kLu1BQPVeUtAF4amlPTXTaWe6OPg7YMwoUJEgf+Q0GXCagFojaT+Q Un/OYyGI+QTWUiQz7lez0ijzwHcpCe50Atcu6QgpT5CshrhU9Gm1h7R4zoFv783Q fKPow6lNmsVpHHep5GGcdeD0JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ1MhpX XCECDF1+5OHwJBpdmc6SMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3pipp5fKKhz9GzOWnebp6Y9RDXImcaiJLW8ZoKrXWdY8AU2M6ZWfM 7AHxrz5vL+yD+K8j6//IK0Cj5Bd6UAxcNyQn8HESkiT0Zd9hrpaQgLMRSEnWsS0m aJsoUa02SHamFXxVxPUAmMol0HWYnGydkQfI2ef/59mAmPeiwryUjSUskr4/G0qN yd4qLPpa1q7r6yoPwgVSjGPczw7HJDinLQ1NQehLQMObO3dRNOhJLqRTk0y2Qjc/ 5ogdjKfcwG/903r0+IAk6LYUs3b9WO3Kw8jcdFeneS/eBdh6DmenUDDdi36CW7d1 FE2dRdWLAq8qFyZLU4HH8Ye9A6FJ6++/ -----END CERTIFICATE-----Generated at Tue Dec 23 00:50:17 2025 by rpki-client