This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: 3IzTOwm0zL8y478zluLqOc3lHopO0CM7lo/qKHQCioQ= Subject key identifier: B9:04:CE:E4:5F:79:77:70:84:18:1B:7D:0F:A1:FA:B0:A2:64:1D:39 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0A35 Signing time: Thu 18 Dec 2025 19:57:10 +0000 Manifest this update: Thu 18 Dec 2025 19:57:09 +0000 Manifest next update: Thu 25 Dec 2025 19:57:09 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: UiBPHR6cE0vZsgZuDYmKU9pl1homg0sDH2RG4nGs6Ws=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: qD7Tfzoc4wjH2bt1dbbg4OGAjJJrb45scH4IFujWWW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Dec 18 19:57:09 2025 GMT Not After : Dec 25 19:57:09 2025 GMT Subject: CN=69445c95-bc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:9d:e7:3f:37:b1:d7:64:d2:f4:49:94:22: 16:d7:55:b1:5b:00:27:ec:a8:ff:00:30:c3:20:f6: f5:40:0f:54:a5:33:7f:b8:96:3c:88:c5:fb:2c:ae: aa:e0:e4:92:d5:e4:e6:87:43:81:47:40:ff:6f:32: 47:8f:8c:b7:8a:ce:3c:f3:de:85:08:ac:a9:d2:4a: 7e:73:c0:9a:7a:ed:1e:07:5b:0f:38:fd:03:96:aa: f2:e8:92:c2:51:a9:53:6b:ec:eb:af:71:34:6a:2f: 69:1a:1e:7a:a6:7f:29:a0:e1:7a:bb:d0:4d:1e:2d: a3:12:2b:09:69:ad:2e:3f:8e:88:4f:4b:08:3e:8e: d6:3b:57:ad:e0:e0:2a:76:91:03:ea:60:1f:32:10: 5d:91:d0:0c:71:bc:2e:ed:38:4a:9d:53:7f:f0:a7: 1e:1d:59:1d:dc:8e:c4:2a:8d:6e:b9:0e:90:2d:d9: 6d:5b:67:19:0e:2b:81:b2:0f:d8:49:4c:a6:01:2c: aa:72:d5:e7:7b:a0:d0:56:fa:ac:20:c9:97:54:7c: 4a:60:35:67:aa:f2:6a:7c:23:03:49:02:d7:6b:a1: e2:7c:98:66:c6:97:bb:5c:60:11:cd:04:4b:99:aa: 13:ba:22:e8:d6:af:21:08:20:2e:2f:05:cf:ad:6b: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:CE:E4:5F:79:77:70:84:18:1B:7D:0F:A1:FA:B0:A2:64:1D:39 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:18:b1:7a:41:df:ca:fb:b5:ea:58:a2:69:63:1f:2b:3e:e5: 09:3e:00:89:94:6b:cd:0c:5a:2e:d6:9c:cc:d5:9e:01:37:d0: 49:3b:90:25:f8:62:80:5b:53:0d:2c:b4:d3:86:2d:58:aa:61: db:94:43:9a:8e:6a:ea:5f:b3:c3:31:09:14:38:42:a8:1d:f9: 3f:1a:fe:75:db:61:85:f8:ab:68:c0:00:7c:7e:3d:ec:ca:f6: c9:da:2e:97:d5:db:fd:d8:ae:86:07:ca:46:13:2b:37:4c:dc: 2c:ef:16:a9:09:2d:92:b7:1b:96:be:37:e4:35:9e:fb:f0:94: 21:f3:1c:c8:ad:86:8a:99:54:15:73:ef:d7:3d:82:98:0b:f8: 8c:69:9d:4a:f6:01:6c:64:cf:b3:9a:f0:c2:73:64:70:63:2b: 8a:81:b8:ce:f5:32:f9:e1:48:c7:b8:1f:24:e1:1d:10:3d:4b: b7:b9:ea:f1:35:1f:55:ef:18:cc:4b:02:f8:9a:46:7e:4d:7a: 7c:0c:34:61:00:66:ea:3e:1c:f8:6a:ad:9e:f4:16:af:d1:89: af:71:2a:7c:d8:bd:d7:14:65:29:f3:12:c1:7b:c4:cf:9a:a4: e7:b4:2b:0d:df:29:79:a9:a9:42:47:95:f8:47:a7:df:96:f9: f3:ef:96:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUxMjE4MTk1NzA5WhcNMjUxMjI1MTk1NzA5WjAYMRYwFAYD VQQDDA02OTQ0NWM5NS1iYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9id5z83sddk0vRJlCIW11WxWwAn7Kj/ADDDIPb1QA9UpTN/uJY8iMX7LK6q 4OSS1eTmh0OBR0D/bzJHj4y3is48896FCKyp0kp+c8Caeu0eB1sPOP0Dlqry6JLC UalTa+zrr3E0ai9pGh56pn8poOF6u9BNHi2jEisJaa0uP46IT0sIPo7WO1et4OAq dpED6mAfMhBdkdAMcbwu7ThKnVN/8KceHVkd3I7EKo1uuQ6QLdltW2cZDiuBsg/Y SUymASyqctXne6DQVvqsIMmXVHxKYDVnqvJqfCMDSQLXa6HifJhmxpe7XGARzQRL maoTuiLo1q8hCCAuLwXPrWu91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkEzuRf eXdwhBgbfQ+h+rCiZB05MB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGLF6Qd/K+7XqWKJpYx8rPuUJPgCJlGvNDFou1pzM1Z4BN9BJO5Al +GKAW1MNLLTThi1YqmHblEOajmrqX7PDMQkUOEKoHfk/Gv5122GF+KtowAB8fj3s yvbJ2i6X1dv92K6GB8pGEys3TNws7xapCS2StxuWvjfkNZ778JQh8xzIrYaKmVQV c+/XPYKYC/iMaZ1K9gFsZM+zmvDCc2RwYyuKgbjO9TL54UjHuB8k4R0QPUu3uerx NR9V7xjMSwL4mkZ+TXp8DDRhAGbqPhz4aq2e9Bav0YmvcSp82L3XFGUp8xLBe8TP mqTntCsN3yl5qalCR5X4R6fflvnz75YE -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:03 2025 by rpki-client