This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: BSkaNs89jKF1ko73TdmXVlIZYKmo1GTG4Rd9ATlD9q0= Subject key identifier: 0D:FA:A6:9F:38:57:6E:7C:C5:E4:80:6A:AD:F8:31:07:52:BA:8B:1F Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 01ED Signing time: Fri 19 Dec 2025 02:07:10 +0000 Manifest this update: Fri 19 Dec 2025 02:07:09 +0000 Manifest next update: Fri 26 Dec 2025 02:07:09 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: lIsGWDC++dCkO95doS+AFrSTtAUT7jI5Sg4kFzdc9Oo=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Dec 19 02:07:09 2025 GMT Not After : Dec 26 02:07:09 2025 GMT Subject: CN=6944b34e-bf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:75:67:4e:be:31:b1:83:aa:b0:d4:09:b5: 0b:02:0a:0f:2f:21:36:16:fe:d3:98:68:00:d6:10: 65:3e:c0:0c:0e:61:86:e8:0e:24:ae:79:9b:e7:8a: 11:59:58:1d:83:62:1e:4d:a7:3e:8f:75:b0:c0:80: 7d:38:04:8a:9b:38:90:e9:05:65:7b:12:f9:e0:df: 5d:75:64:05:69:a1:47:80:dd:35:72:82:28:71:4d: 4b:12:45:e8:c8:5d:54:3d:8c:bb:67:01:32:43:5d: 8e:a3:4b:a5:09:60:e4:14:0b:1a:8a:c4:ea:d5:5c: b2:ff:88:7f:e1:32:69:35:78:c6:ea:85:a3:cf:7d: ee:e8:36:89:2c:70:26:d0:ef:6d:37:28:7b:b4:8f: 86:65:ab:6e:f1:19:b4:bc:06:2c:72:06:50:65:20: 03:58:45:3f:b3:c8:4c:90:56:04:f0:a1:18:07:96: 23:76:4a:45:cf:c5:b7:13:cc:72:58:90:a1:e8:b7: f3:20:17:93:fd:b5:39:b3:a8:42:e1:5c:77:23:ef: 16:cb:0a:8f:ae:8c:82:36:26:b5:8d:ea:31:82:1e: 7e:33:95:3e:d2:bf:7e:50:6c:df:71:f2:78:9f:a3: de:15:0d:a5:60:b9:e9:d2:7e:47:ff:dd:d3:56:bd: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FA:A6:9F:38:57:6E:7C:C5:E4:80:6A:AD:F8:31:07:52:BA:8B:1F X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:0c:ab:f6:50:e3:46:5e:03:3e:97:8d:4f:bf:a0:ee:56:a2: 0c:89:11:1a:c7:65:aa:a7:b3:48:7d:a2:2b:58:36:91:4d:81: bd:6b:8a:51:fc:59:ea:2d:d0:8e:88:05:44:70:39:96:4d:b0: de:1e:cf:18:a2:67:52:d8:ea:bd:9a:f0:cc:65:08:b1:30:b0: 05:f6:7b:7f:6e:20:b1:16:66:28:2e:ee:20:c2:d9:4e:17:4a: f4:74:b7:c9:47:88:64:2f:09:73:1c:d3:12:7c:60:5f:66:bd: 47:f0:12:d3:40:37:e9:d7:ea:07:9d:f2:ff:2d:4e:f6:a1:b1: 46:90:90:1c:e8:c9:81:a3:9d:b5:ab:1e:7f:c8:53:02:87:9b: 48:94:41:54:43:83:ac:14:86:dc:08:af:9b:81:c9:94:ad:6a: ba:88:a2:9e:f8:c5:ce:81:26:32:f6:a1:cd:ca:5f:dc:7c:9a: b8:45:90:25:16:7b:6a:d6:94:f1:70:d7:97:06:a0:10:30:35: 5a:fa:d8:2d:58:d2:44:ad:2b:fa:37:a3:f5:eb:e0:fe:56:2d: fa:95:de:41:b7:60:c8:4a:58:e8:3b:58:45:c0:53:89:f8:57: 6c:4e:83:f1:23:98:7f:84:13:c8:5c:43:70:d7:71:0b:f6:22: 4a:6b:9e:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUxMjE5MDIwNzA5WhcNMjUxMjI2MDIwNzA5WjAYMRYwFAYD VQQDDA02OTQ0YjM0ZS1iZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhDF1Z06+MbGDqrDUCbULAgoPLyE2Fv7TmGgA1hBlPsAMDmGG6A4krnmb54oR WVgdg2IeTac+j3WwwIB9OASKmziQ6QVlexL54N9ddWQFaaFHgN01coIocU1LEkXo yF1UPYy7ZwEyQ12Oo0ulCWDkFAsaisTq1Vyy/4h/4TJpNXjG6oWjz33u6DaJLHAm 0O9tNyh7tI+GZatu8Rm0vAYscgZQZSADWEU/s8hMkFYE8KEYB5YjdkpFz8W3E8xy WJCh6LfzIBeT/bU5s6hC4Vx3I+8WywqProyCNia1jeoxgh5+M5U+0r9+UGzfcfJ4 n6PeFQ2lYLnp0n5H/93TVr1psQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA36pp84 V258xeSAaq34MQdSuosfMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1DKv2UONGXgM+l41Pv6DuVqIMiREax2Wqp7NIfaIrWDaRTYG9a4pR /FnqLdCOiAVEcDmWTbDeHs8YomdS2Oq9mvDMZQixMLAF9nt/biCxFmYoLu4gwtlO F0r0dLfJR4hkLwlzHNMSfGBfZr1H8BLTQDfp1+oHnfL/LU72obFGkJAc6MmBo521 qx5/yFMCh5tIlEFUQ4OsFIbcCK+bgcmUrWq6iKKe+MXOgSYy9qHNyl/cfJq4RZAl Fntq1pTxcNeXBqAQMDVa+tgtWNJErSv6N6P16+D+Vi36ld5Bt2DISljoO1hFwFOJ +FdsToPxI5h/hBPIXENw13EL9iJKa56S -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:55 2025 by rpki-client