This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: YG+CK3f6a+cewQMu5GqkrJ4tCF8hf3U22yIXXPnmKIc= Subject key identifier: 9F:F2:F5:47:99:EC:1B:06:59:69:95:92:D3:FA:05:FA:79:39:69:68 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 0517 Signing time: Fri 26 Dec 2025 22:44:03 +0000 Manifest this update: Fri 26 Dec 2025 22:44:02 +0000 Manifest next update: Fri 02 Jan 2026 22:44:02 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: dclquDxp+BqcsGCZWrJ5mL1axAM8j80D9aml5Utf7FQ=) 2: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) 3: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Dec 26 22:44:02 2025 GMT Not After : Jan 2 22:44:02 2026 GMT Subject: CN=694f0fb3-c732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:90:4a:f0:78:96:f1:df:1d:dc:0f:82:8d: 16:c6:53:da:05:ab:2e:8a:15:f9:ce:20:97:45:d4: 5e:b7:e1:0d:a3:02:4b:8e:31:62:e9:88:96:ce:0d: d6:ab:a5:90:2c:89:dd:ea:0a:df:cb:ab:62:d8:53: 44:3f:f5:d9:e2:9d:b5:49:29:b8:79:bc:ea:93:28: b4:45:47:6a:44:4e:a6:d1:7d:00:6b:d0:b1:12:62: 62:f3:c7:fe:a7:de:aa:f4:66:4e:3b:ee:68:e0:4a: d6:16:27:39:c0:b1:5b:19:01:72:8c:7f:8b:c0:d9: cd:ed:89:3f:50:41:ad:a1:70:93:9b:d5:f3:8d:33: 4b:40:d2:3a:31:49:7e:2b:b6:57:2b:82:02:92:c4: bc:ce:dd:b4:85:5f:33:82:cc:6b:44:d1:cb:67:57: 6d:43:48:13:68:32:93:90:1e:d1:3e:b1:15:54:76: c8:07:47:4a:98:25:f6:5a:28:7d:6b:75:0f:aa:3c: 35:73:0e:be:f2:2f:e5:05:5a:b7:81:5e:f2:fc:33: 0d:6c:c0:ce:b5:d6:ef:29:cd:d7:2d:1a:9f:a1:30: 72:fb:37:f1:15:d0:cd:b2:b6:f4:97:aa:a3:53:ac: 2c:3d:09:e4:d2:66:8d:35:1d:38:5c:31:40:26:2e: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:F5:47:99:EC:1B:06:59:69:95:92:D3:FA:05:FA:79:39:69:68 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ae:ea:24:68:20:f2:74:bc:eb:97:92:a8:1c:bd:d1:11:9b: 4b:c0:6f:8f:f0:b3:05:2c:3d:19:c2:64:96:d7:bd:2f:95:5a: fd:15:18:b9:5a:85:e5:93:07:09:f9:c7:a5:b1:68:58:a5:b8: 05:53:14:b3:f3:fe:91:80:70:8e:dc:e3:ef:85:31:68:6d:16: 5e:e6:95:70:ec:10:53:03:1c:10:56:dc:bf:a6:9d:e3:66:63: 46:f9:05:85:a3:93:0b:0e:fe:9a:9a:e1:4c:30:c7:02:8d:5c: 33:ec:11:81:e3:92:a4:9e:f1:53:aa:5f:85:7d:3f:7b:74:31: 0d:b3:67:13:e1:5f:fd:5a:58:32:c5:c6:a1:8c:6b:99:97:be: 6e:b9:19:14:ec:8f:d6:d0:62:c6:1e:f5:d8:87:78:9d:56:73: 51:94:56:a6:02:30:fe:f6:59:bd:f1:47:e7:6c:c9:73:16:82: 7a:77:84:8b:87:12:6d:9c:95:0f:51:19:6b:bf:a2:9d:62:92: 45:b3:13:6c:59:aa:9d:18:6f:1c:68:7b:0d:cb:de:68:fa:0e: 69:3b:f0:d7:ab:f4:99:af:3c:95:ad:29:5b:4b:cb:45:29:6c: 48:c1:1a:02:9e:ae:b4:ed:2b:95:3b:33:f4:6c:40:6b:5c:a2: 70:45:1d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUxMjI2MjI0NDAyWhcNMjYwMTAyMjI0NDAyWjAYMRYwFAYD VQQDDA02OTRmMGZiMy1jNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WOQSvB4lvHfHdwPgo0WxlPaBasuihX5ziCXRdRet+ENowJLjjFi6YiWzg3W q6WQLInd6grfy6ti2FNEP/XZ4p21SSm4ebzqkyi0RUdqRE6m0X0Aa9CxEmJi88f+ p96q9GZOO+5o4ErWFic5wLFbGQFyjH+LwNnN7Yk/UEGtoXCTm9XzjTNLQNI6MUl+ K7ZXK4ICksS8zt20hV8zgsxrRNHLZ1dtQ0gTaDKTkB7RPrEVVHbIB0dKmCX2Wih9 a3UPqjw1cw6+8i/lBVq3gV7y/DMNbMDOtdbvKc3XLRqfoTBy+zfxFdDNsrb0l6qj U6wsPQnk0maNNR04XDFAJi68gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/y9UeZ 7BsGWWmVktP6Bfp5OWloMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyruokaCDydLzrl5KoHL3REZtLwG+P8LMFLD0ZwmSW170vlVr9FRi5 WoXlkwcJ+celsWhYpbgFUxSz8/6RgHCO3OPvhTFobRZe5pVw7BBTAxwQVty/pp3j ZmNG+QWFo5MLDv6amuFMMMcCjVwz7BGB45KknvFTql+FfT97dDENs2cT4V/9Wlgy xcahjGuZl75uuRkU7I/W0GLGHvXYh3idVnNRlFamAjD+9lm98UfnbMlzFoJ6d4SL hxJtnJUPURlrv6KdYpJFsxNsWaqdGG8caHsNy95o+g5pO/DXq/SZrzyVrSlbS8tF KWxIwRoCnq607SuVOzP0bEBrXKJwRR3o -----END CERTIFICATE-----Generated at Sat Dec 27 17:25:20 2025 by rpki-client