This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: De+xb3j8xj4Av2w8Lt2en9senRDIge7eCJE6F34CIPM= Subject key identifier: A5:32:48:63:B3:C7:A0:39:81:BF:30:96:5A:6A:26:38:D2:CD:DA:F3 Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 02C6 Signing time: Sun 21 Dec 2025 00:39:08 +0000 Manifest this update: Sun 21 Dec 2025 00:39:07 +0000 Manifest next update: Sun 28 Dec 2025 00:39:07 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: sUWGWiao67dHC6pw5tNlYXC6vtCAXrz9rU8jhi5QjBo=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: 2l18e24CMiHud0NJE3O3nns7nMxFpBn60Kr5He67lRQ=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: Dec 21 00:39:07 2025 GMT Not After : Dec 28 00:39:07 2025 GMT Subject: CN=694741ac-3002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:c4:e0:3b:fd:92:e1:a7:ff:7b:d0:2c:fa: f9:9d:3c:97:f4:dd:17:ff:cb:b6:db:24:bb:bb:9d: f0:5d:c0:7e:d8:cf:c0:2a:5e:6f:af:83:d3:a1:ea: 50:2c:77:40:40:af:cb:7e:5d:8c:84:75:b1:b3:d8: 12:6a:34:42:87:89:72:5f:d2:4d:ee:fc:92:9f:47: da:42:4d:73:d8:4e:76:2f:f1:da:b8:70:53:2a:a2: 92:db:93:bc:ba:b2:c6:6d:cc:e4:f4:b8:05:49:b2: e9:83:09:26:94:75:3e:b5:50:87:ad:3d:b2:d9:b0: 93:16:6e:2b:31:01:29:27:c7:e9:c2:62:28:a5:ae: 65:cb:eb:9e:1e:c9:c3:8c:77:89:e8:be:ac:5c:09: b8:c0:9b:be:fa:a5:59:1b:21:c8:b3:50:ef:c1:14: 44:09:e1:9c:44:01:0a:dd:26:ec:89:2f:8a:d3:5b: 72:7b:27:d3:7e:68:6e:9f:2c:95:71:fc:9a:da:0f: d8:98:df:e8:cd:05:4a:b3:90:e1:19:06:d1:a9:cf: 33:cf:7d:22:cc:75:b7:6f:f7:a0:8f:48:79:d4:ed: 1e:dc:07:04:bf:b2:48:db:f0:4b:8a:36:e4:11:ee: c2:9c:88:59:d7:a8:d0:8a:b8:62:a3:31:42:c2:e5: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:48:63:B3:C7:A0:39:81:BF:30:96:5A:6A:26:38:D2:CD:DA:F3 X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:bd:a2:65:f1:57:12:d4:e4:8b:5c:43:06:19:76:2a:1f:56: 28:8a:f5:fe:72:77:74:84:99:2e:c9:a5:34:3c:9c:1f:a4:3c: d5:9f:c1:a2:a9:3b:dc:5f:e7:2c:69:04:a3:16:7c:0c:7c:86: c0:88:6e:80:85:c3:53:b2:20:3b:92:a8:a8:c5:d2:16:7c:a5: 5e:ac:08:20:12:7f:62:34:35:f2:08:04:68:56:00:c3:5b:0b: d7:3c:be:77:25:2b:b0:68:be:69:0d:18:ed:80:84:d0:2f:4e: 56:cd:73:79:ee:5c:d3:f7:5a:cf:67:6b:df:2f:4c:7d:2d:46: e1:9c:5c:6f:6b:ca:91:43:bb:fb:16:a7:dc:bc:24:e1:3b:f3: b3:f6:80:b5:4e:a3:bb:0a:dd:e7:5f:a8:fd:36:f7:49:5c:40: 78:03:83:13:7b:98:6f:f9:49:09:88:e8:c2:96:7f:3f:3d:e6: af:25:e9:6a:74:e5:0d:82:b5:9d:45:a9:d7:53:de:ac:aa:53: 75:48:db:7e:c6:cf:db:0b:e4:eb:b8:ab:a5:63:31:a7:1d:54: c7:d5:51:c5:f0:e2:92:c3:92:90:4a:94:65:e6:32:79:1e:4c: 6f:67:14:24:2b:dd:34:40:fd:89:91:e7:94:dd:14:78:43:48: 57:35:6c:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjUxMjIxMDAzOTA3WhcNMjUxMjI4MDAzOTA3WjAYMRYwFAYD VQQDDA02OTQ3NDFhYy0zMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgXE4Dv9kuGn/3vQLPr5nTyX9N0X/8u22yS7u53wXcB+2M/AKl5vr4PToepQ LHdAQK/Lfl2MhHWxs9gSajRCh4lyX9JN7vySn0faQk1z2E52L/HauHBTKqKS25O8 urLGbczk9LgFSbLpgwkmlHU+tVCHrT2y2bCTFm4rMQEpJ8fpwmIopa5ly+ueHsnD jHeJ6L6sXAm4wJu++qVZGyHIs1DvwRRECeGcRAEK3SbsiS+K01tyeyfTfmhunyyV cfya2g/YmN/ozQVKs5DhGQbRqc8zz30izHW3b/egj0h51O0e3AcEv7JI2/BLijbk Ee7CnIhZ16jQirhiozFCwuV6GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUySGOz x6A5gb8wllpqJjjSzdrzMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJvaJl8VcS1OSLXEMGGXYqH1YoivX+cnd0hJkuyaU0PJwfpDzVn8Gi qTvcX+csaQSjFnwMfIbAiG6AhcNTsiA7kqioxdIWfKVerAggEn9iNDXyCARoVgDD WwvXPL53JSuwaL5pDRjtgITQL05WzXN57lzT91rPZ2vfL0x9LUbhnFxva8qRQ7v7 FqfcvCThO/Oz9oC1TqO7Ct3nX6j9NvdJXEB4A4MTe5hv+UkJiOjCln8/PeavJelq dOUNgrWdRanXU96sqlN1SNt+xs/bC+TruKulYzGnHVTH1VHF8OKSw5KQSpRl5jJ5 HkxvZxQkK900QP2JkeeU3RR4Q0hXNWyJ -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:21 2025 by rpki-client