This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: dKVkFpommPKrSKXHDX/S87B7w4iHrIgMNR4qEv/ntTY= Subject key identifier: 7F:73:44:D9:C2:C1:B7:BA:24:05:02:5D:A2:47:48:1D:81:1D:4E:8E Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: 01D4 Signing time: Fri 19 Dec 2025 02:02:06 +0000 Manifest this update: Fri 19 Dec 2025 02:02:05 +0000 Manifest next update: Fri 26 Dec 2025 02:02:05 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: 4sW4RdmfxmiGgn6TWK4Qf5Hk5uoC8/ldQwoaAfYtj/k=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: uBYO+C6UlAsgzho2C/yzZOLuZD7LLvHBHa19TIwL+RU=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: 4bQshwbLuuIizTEi1i8kAXXdNltaobrkapRT1VY6dw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: Dec 19 02:02:05 2025 GMT Not After : Dec 26 02:02:05 2025 GMT Subject: CN=6944b21e-b63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:a2:83:71:b7:44:d4:4b:e8:e8:c1:a8:35: 41:e8:3a:f5:cd:a4:dc:67:bf:2f:cd:6e:7d:23:e3: 6d:c3:13:c6:fb:f7:20:e7:fb:92:77:e6:81:85:38: 73:27:d1:95:24:56:35:b2:25:72:f4:56:1e:ff:1c: 37:7d:15:ed:a6:a3:2d:91:4e:f0:eb:ff:4a:f2:b7: 49:0a:65:f9:8c:b3:ac:c2:3b:4a:f3:ef:51:a6:c5: 1f:3c:eb:74:68:18:4e:ce:e5:5f:2c:ef:30:4e:32: 75:d4:64:76:6d:32:e1:83:cb:3b:c6:1f:6a:4a:46: 15:ee:2b:d5:3f:3e:cf:8f:6a:4b:d2:bd:09:60:ea: 26:67:ca:97:b1:68:65:5d:ed:05:dd:11:84:48:5e: 9e:43:9f:22:3c:85:76:10:c8:e4:d2:cc:7c:4b:03: b4:1e:c4:21:49:6e:35:e6:41:3d:12:02:4d:95:0d: f1:2e:67:5f:6f:3c:71:2f:18:dd:fb:06:29:2a:1d: eb:f4:8d:43:1f:20:e1:aa:90:e3:69:00:cf:e6:68: c8:b6:49:f1:e8:1e:e7:56:5e:5a:8f:32:f7:8b:da: d3:94:f9:11:0f:02:a0:4c:7f:d6:fa:a1:47:eb:2d: d9:72:04:29:a4:1b:b4:be:8a:7c:c4:db:ce:2f:51: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:44:D9:C2:C1:B7:BA:24:05:02:5D:A2:47:48:1D:81:1D:4E:8E X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ec:ba:11:7f:8b:f9:d5:31:fe:b4:40:7d:8c:e0:dc:83:59: 79:14:ea:1c:06:a4:6d:43:28:a1:a0:bd:3f:5d:b4:a2:b4:5d: ae:da:ee:30:55:22:a6:1c:14:28:47:ad:56:6b:72:70:3c:a2: 13:af:63:43:ff:36:0a:db:d0:9f:ab:55:20:4a:40:4c:04:65: 87:b2:2a:1b:dd:d3:0e:f9:de:68:6b:ff:ab:83:17:50:92:43: 10:c3:ef:c8:1b:a3:cc:cf:e5:3b:2a:69:09:9e:62:e5:a0:a4: e2:2f:f4:41:9a:6c:0e:10:f1:2c:94:e7:b3:f7:e0:51:bf:52: 8f:c3:9d:64:64:55:9a:4b:e2:a7:78:b3:c5:9a:37:a6:89:47: 3e:fe:93:03:f6:d7:ac:91:d5:bf:5a:a1:e1:8f:2e:51:9b:f9: 05:37:85:36:d8:e4:0f:3e:16:88:cc:72:2a:e7:7d:5c:c4:8a: 05:bb:35:e1:5d:f2:fc:3a:48:92:a7:03:20:50:82:41:2b:2c: d8:65:90:af:ed:98:f2:90:05:88:95:35:cc:85:10:23:e9:84: ba:ac:f2:5c:7d:08:0b:f9:23:56:bf:5b:c2:38:8c:4b:96:5d: 67:d5:63:6c:5e:ef:e4:ab:2d:e3:51:6d:40:89:9c:92:0f:53: 30:e5:fd:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjUxMjE5MDIwMjA1WhcNMjUxMjI2MDIwMjA1WjAYMRYwFAYD VQQDDA02OTQ0YjIxZS1iNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U2ig3G3RNRL6OjBqDVB6Dr1zaTcZ78vzW59I+NtwxPG+/cg5/uSd+aBhThz J9GVJFY1siVy9FYe/xw3fRXtpqMtkU7w6/9K8rdJCmX5jLOswjtK8+9RpsUfPOt0 aBhOzuVfLO8wTjJ11GR2bTLhg8s7xh9qSkYV7ivVPz7Pj2pL0r0JYOomZ8qXsWhl Xe0F3RGESF6eQ58iPIV2EMjk0sx8SwO0HsQhSW415kE9EgJNlQ3xLmdfbzxxLxjd +wYpKh3r9I1DHyDhqpDjaQDP5mjItknx6B7nVl5ajzL3i9rTlPkRDwKgTH/W+qFH 6y3ZcgQppBu0vop8xNvOL1Hu9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9zRNnC wbe6JAUCXaJHSB2BHU6OMB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7LoRf4v51TH+tEB9jODcg1l5FOocBqRtQyihoL0/XbSitF2u2u4w VSKmHBQoR61Wa3JwPKITr2ND/zYK29Cfq1UgSkBMBGWHsiob3dMO+d5oa/+rgxdQ kkMQw+/IG6PMz+U7KmkJnmLloKTiL/RBmmwOEPEslOez9+BRv1KPw51kZFWaS+Kn eLPFmjemiUc+/pMD9teskdW/WqHhjy5Rm/kFN4U22OQPPhaIzHIq531cxIoFuzXh XfL8OkiSpwMgUIJBKyzYZZCv7ZjykAWIlTXMhRAj6YS6rPJcfQgL+SNWv1vCOIxL ll1n1WNsXu/kqy3jUW1AiZySD1Mw5f1F -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:49 2025 by rpki-client