This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: 1fr5zUApARrhqRxsK9GuVgLyuuVu53EAIcS8ENifVfc= Subject key identifier: 82:93:58:F3:29:BB:22:FC:1C:77:96:E0:C4:C0:D2:EE:0B:9D:7F:D4 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34F4 Signing time: Thu 18 Dec 2025 14:31:25 +0000 Manifest this update: Thu 18 Dec 2025 14:31:25 +0000 Manifest next update: Thu 25 Dec 2025 14:31:25 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: T9m/F5qqYMdlkbVKJxDZghf9aQ9F1vsV1XAg5rXpPSk=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13560 (0x34f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Dec 18 14:31:25 2025 GMT Not After : Dec 25 14:31:25 2025 GMT Subject: CN=6944103d-2696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:0d:ee:dd:51:37:94:fe:8d:f8:e5:ce:4c: 56:cd:86:97:9e:4c:cb:05:4e:52:3a:23:4b:ab:53: d9:02:3a:a1:56:4b:42:4b:ef:84:15:81:ed:a2:23: 65:5a:34:5f:bc:8b:41:bb:dc:89:2f:41:c6:7a:43: 13:c7:72:4e:1b:25:f6:34:e4:84:b6:65:e4:3f:ff: 1c:b6:8b:05:6b:20:2b:da:e6:b8:14:c7:62:9b:6c: f5:aa:b4:e0:b5:fc:ca:35:9b:04:3d:82:34:1a:83: 19:06:04:b0:aa:14:9d:35:2a:c0:58:40:04:ee:92: a2:f7:79:db:3e:da:82:e2:fe:5a:fe:62:a4:de:e8: 7b:7c:34:cc:e8:be:22:0c:8a:e1:c2:70:0c:13:a2: 0b:df:30:4c:48:3e:24:ac:c1:c0:9d:87:e3:4a:38: 89:d0:ae:f7:f7:38:56:6c:7a:bc:22:f4:1a:3d:05: 08:67:23:d3:17:09:b0:44:b2:a1:f0:2e:63:8c:4a: db:4b:99:ae:fc:30:07:80:1c:31:b7:db:d1:b5:11: 00:70:c9:f3:d6:58:32:ad:f3:44:1c:76:c4:2f:e4: eb:72:4c:b4:52:c0:16:1f:58:76:aa:5a:81:a3:03: 79:d9:bd:77:5a:6f:4f:c2:60:ef:15:f5:45:ee:a0: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:58:F3:29:BB:22:FC:1C:77:96:E0:C4:C0:D2:EE:0B:9D:7F:D4 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f4:70:86:37:7d:79:d5:7c:cb:84:cf:84:89:9b:a1:1b:bb: d1:a5:fa:a6:68:b5:9b:47:9d:ab:65:71:31:eb:ab:e4:8a:57: 8b:52:06:e5:89:1b:04:67:bd:d7:b1:51:a5:ae:5b:9a:ab:98: 6c:4a:92:1f:33:ba:9f:7a:e7:d7:47:2c:5b:06:b7:a4:d0:89: 9d:b1:2a:26:0f:c2:4b:8c:a0:ea:22:44:2d:8b:3b:0f:b2:54: fa:25:d2:ab:da:c8:bd:7e:6e:72:ec:88:20:1b:48:b1:d6:c7: 97:f7:fd:e8:3a:4f:b1:50:ca:a6:22:bc:6b:ec:aa:c4:43:10: d2:32:c1:bc:d4:7c:25:bb:5c:ca:d8:1c:07:e2:af:02:19:15: 27:87:e1:6a:e1:d7:77:5f:58:ec:0e:aa:4c:78:25:d2:5b:87: 32:2e:76:9d:0d:7e:d2:e1:b4:7c:db:ea:34:19:d5:82:c5:4f: 06:94:30:c1:a0:a3:1a:da:eb:6b:8c:9e:1c:80:3b:90:63:73: 49:e2:cc:0b:e1:84:71:be:b3:e3:49:59:a9:eb:ba:fb:cd:c3: b4:c5:e9:3e:44:ca:0e:d4:84:d2:86:a3:86:3d:af:59:ac:84: 03:a2:fb:fb:bf:ae:45:dc:67:21:5e:20:61:40:32:dc:1b:79: 13:d0:b9:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUxMjE4MTQzMTI1WhcNMjUxMjI1MTQzMTI1WjAYMRYwFAYD VQQDDA02OTQ0MTAzZC0yNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDMN7t1RN5T+jfjlzkxWzYaXnkzLBU5SOiNLq1PZAjqhVktCS++EFYHtoiNl WjRfvItBu9yJL0HGekMTx3JOGyX2NOSEtmXkP/8ctosFayAr2ua4FMdim2z1qrTg tfzKNZsEPYI0GoMZBgSwqhSdNSrAWEAE7pKi93nbPtqC4v5a/mKk3uh7fDTM6L4i DIrhwnAME6IL3zBMSD4krMHAnYfjSjiJ0K739zhWbHq8IvQaPQUIZyPTFwmwRLKh 8C5jjErbS5mu/DAHgBwxt9vRtREAcMnz1lgyrfNEHHbEL+Trcky0UsAWH1h2qlqB owN52b13Wm9PwmDvFfVF7qBLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKTWPMp uyL8HHeW4MTA0u4LnX/UMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq9HCGN3151XzLhM+EiZuhG7vRpfqmaLWbR52rZXEx66vkileLUgbl iRsEZ73XsVGlrluaq5hsSpIfM7qfeufXRyxbBrek0ImdsSomD8JLjKDqIkQtizsP slT6JdKr2si9fm5y7IggG0ix1seX9/3oOk+xUMqmIrxr7KrEQxDSMsG81Hwlu1zK 2BwH4q8CGRUnh+Fq4dd3X1jsDqpMeCXSW4cyLnadDX7S4bR82+o0GdWCxU8GlDDB oKMa2utrjJ4cgDuQY3NJ4swL4YRxvrPjSVmp67r7zcO0xek+RMoO1ITShqOGPa9Z rIQDovv7v65F3GchXiBhQDLcG3kT0Lkv -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:32 2025 by rpki-client