This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: Uk91xYYv1jMF0NRiMZ1dKwUGXIIfYRRwDmGMdMmm67I= Subject key identifier: 63:DC:E2:39:51:65:81:BC:48:B4:14:DA:01:C6:42:69:0A:FB:AD:66 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2AE0 Signing time: Sat 20 Dec 2025 15:26:16 +0000 Manifest this update: Sat 20 Dec 2025 15:26:15 +0000 Manifest next update: Sat 27 Dec 2025 15:26:15 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: dXFUAAy2pP7RghImzW6kilidf7FdnGT0VWBA96Q2Ct4=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: hRXVDS2SOPtJ34LPdCH4GrMLjogwv7F/rCNwzymK5NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10999 (0x2af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Dec 20 15:26:15 2025 GMT Not After : Dec 27 15:26:15 2025 GMT Subject: CN=6946c018-64cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:44:f7:0d:20:4a:3e:b7:67:70:59:be:2b: 47:c3:09:ef:ab:cf:2a:ea:b8:da:51:4e:5a:68:52: 2b:c9:9c:b5:a9:f9:a8:c3:c4:d3:57:54:f1:af:7d: c7:09:26:f6:81:e4:fc:c2:ac:e4:02:36:c8:39:fd: 9f:34:5e:f7:f7:2e:5e:df:90:0f:26:4c:9a:14:cc: 94:2b:e9:4b:d2:7f:60:c7:c4:78:fe:fc:1c:4a:e9: 59:c1:52:fb:b0:2f:a7:f2:b7:d3:b0:1d:4f:74:46: 37:c3:d4:34:62:e8:68:32:ee:e8:a6:6b:37:57:46: 03:60:ab:f9:60:65:78:0a:cd:b4:5c:5c:95:39:e5: 2d:02:2e:56:0d:3e:b1:69:90:98:de:bc:09:23:ba: e1:37:fc:27:9b:ff:f5:d5:4a:15:fa:bf:a6:72:2c: 6a:36:97:1f:9d:86:86:1d:d0:c3:54:01:af:56:07: 20:f3:06:af:e4:d6:da:5f:62:a5:40:75:2c:d6:c8: fb:ae:20:8b:12:5f:bd:eb:07:d9:df:5a:9a:a6:88: 69:d4:23:fb:5a:3a:cd:f1:0a:7b:83:f1:b0:ce:35: 5d:fb:c3:23:51:0c:04:ea:b1:c4:5d:f1:1b:d9:5e: b6:14:81:9d:0c:c5:4a:5b:32:d3:88:92:31:ea:86: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DC:E2:39:51:65:81:BC:48:B4:14:DA:01:C6:42:69:0A:FB:AD:66 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0e:b0:b5:cc:69:d9:c3:ea:9d:91:2d:e1:cb:71:41:32:7e: 03:c5:5f:13:d7:25:2a:e3:76:51:65:bd:09:2f:01:0f:dc:ae: 75:d9:cc:b9:51:1c:47:68:2a:af:0f:d9:8c:58:b3:ab:3f:b7: c2:c6:7d:c4:4a:60:36:60:4f:30:aa:e8:0e:dd:a6:4d:a4:19: e1:92:e1:8b:68:ad:ea:37:f6:5e:6d:cc:e8:ba:94:5b:aa:0c: 53:91:3f:4d:d1:6b:c2:34:f4:6a:91:ff:33:99:90:bb:3c:30: c0:d4:92:4c:bb:05:12:0c:0d:6b:e4:b7:c7:a0:31:38:7b:1a: 88:92:5e:a4:2d:fa:80:09:6e:ff:5f:96:3a:87:55:03:fe:cf: 75:71:a2:84:b9:77:41:51:ac:5c:21:d7:02:32:30:54:bf:f7: 5d:3d:3a:84:ab:55:22:57:d0:90:37:76:f9:03:f7:23:91:35: 69:73:14:8a:45:04:47:f4:09:43:9c:b7:df:23:5b:b4:c2:51: cf:05:72:1b:bb:2c:59:ae:db:6a:5b:23:29:69:56:a4:e4:5d: b4:7e:10:71:6a:5e:c4:97:98:ad:a3:dc:9f:71:f8:2e:35:81: 9d:18:40:d1:fb:15:83:7f:2c:67:3e:83:2b:63:ea:f8:c1:9c: e8:f7:87:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUxMjIwMTUyNjE1WhcNMjUxMjI3MTUyNjE1WjAYMRYwFAYD VQQDDA02OTQ2YzAxOC02NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi4FE9w0gSj63Z3BZvitHwwnvq88q6rjaUU5aaFIryZy1qfmow8TTV1Txr33H CSb2geT8wqzkAjbIOf2fNF739y5e35APJkyaFMyUK+lL0n9gx8R4/vwcSulZwVL7 sC+n8rfTsB1PdEY3w9Q0YuhoMu7opms3V0YDYKv5YGV4Cs20XFyVOeUtAi5WDT6x aZCY3rwJI7rhN/wnm//11UoV+r+mcixqNpcfnYaGHdDDVAGvVgcg8wav5NbaX2Kl QHUs1sj7riCLEl+96wfZ31qapohp1CP7WjrN8Qp7g/GwzjVd+8MjUQwE6rHEXfEb 2V62FIGdDMVKWzLTiJIx6oZ9nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPc4jlR ZYG8SLQU2gHGQmkK+61mMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWDrC1zGnZw+qdkS3hy3FBMn4DxV8T1yUq43ZRZb0JLwEP3K512cy5 URxHaCqvD9mMWLOrP7fCxn3ESmA2YE8wqugO3aZNpBnhkuGLaK3qN/ZebczoupRb qgxTkT9N0WvCNPRqkf8zmZC7PDDA1JJMuwUSDA1r5LfHoDE4exqIkl6kLfqACW7/ X5Y6h1UD/s91caKEuXdBUaxcIdcCMjBUv/ddPTqEq1UiV9CQN3b5A/cjkTVpcxSK RQRH9AlDnLffI1u0wlHPBXIbuyxZrttqWyMpaVak5F20fhBxal7El5ito9yfcfgu NYGdGEDR+xWDfyxnPoMrY+r4wZzo94fd -----END CERTIFICATE-----Generated at Sat Dec 20 17:19:07 2025 by rpki-client