This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json) Hash identifier: AIHMz2ONUUKCCD+papMxUm8ow3E13Sa00R0QvBm5qa0= Subject key identifier: 59:86:75:86:A8:21:9E:71:D9:6C:CF:89:7A:23:D7:FB:FF:4D:E3:56 Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft Manifest number: 0106 Signing time: Thu 18 Dec 2025 16:13:59 +0000 Manifest this update: Thu 18 Dec 2025 16:13:58 +0000 Manifest next update: Thu 25 Dec 2025 16:13:58 +0000 Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: ibwmu5TG+nkXc/WLCEL9/87065khpyXfM0BYaDKTmFE=) 2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: JMbPewXmvsjUnAdQz322CY8L97yt7N2HMn/pCZCh18Y=) 3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 6GbekInjca9Aq9cE7WNeTESe36RL55OnHAPU5HMbtxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Dec 18 16:13:58 2025 GMT Not After : Dec 25 16:13:58 2025 GMT Subject: CN=69442847-a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:b8:0f:14:ea:a6:2d:cf:43:f2:1a:74:18: a7:ed:f7:f8:b4:d7:8f:85:3c:88:4d:8c:90:2c:a3: 49:c4:6c:77:07:ce:74:8c:72:06:98:c9:24:d9:fd: 67:03:f6:ac:cd:87:d7:ad:4b:a2:87:91:42:0a:9f: 8c:17:6c:94:f5:4c:1e:9f:05:fb:e3:f0:99:c5:1a: 80:db:13:65:07:82:70:77:13:67:a1:35:53:ab:80: 2f:c3:aa:81:05:eb:ab:a9:5c:73:ac:83:d4:c6:8c: 16:a3:08:b3:2b:19:41:03:c6:bf:3c:e8:77:e5:81: d6:50:b5:96:8c:44:09:9e:42:70:95:35:85:ce:db: 3e:89:8d:2c:0b:f5:79:dd:c2:a3:df:1f:01:79:ab: d5:2e:84:20:44:7d:95:75:f7:d0:0b:4c:d4:b5:e8: a8:35:d1:e0:9b:63:0a:25:0e:19:62:f9:70:29:93: 6c:b8:76:5a:a7:a5:12:0a:cf:09:2e:10:f1:85:68: f1:a4:08:3a:af:19:8d:8e:4b:1b:27:39:0e:9c:34: 26:5c:38:40:cd:43:f8:2b:eb:1f:3c:0a:e5:83:06: ec:51:8b:6b:18:89:bf:58:7b:95:03:ac:e0:84:34: 05:46:21:a2:66:b3:7d:01:7d:55:41:db:69:9f:cf: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:75:86:A8:21:9E:71:D9:6C:CF:89:7A:23:D7:FB:FF:4D:E3:56 X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7f:07:f8:3d:7e:de:26:58:f8:a3:b9:eb:62:e5:d5:99:c7: 8b:c2:ae:3a:1d:7b:7a:5f:31:58:7a:c1:4e:06:3d:7a:f9:7b: ac:f9:3f:48:b1:df:18:01:d5:0f:43:29:df:e9:d8:97:4a:d1: 84:ed:2a:0d:03:c9:69:6b:8a:39:7c:cc:9f:1a:65:77:cf:fc: 79:f2:65:fb:bd:56:6a:90:38:3b:08:f3:da:d7:2f:c1:21:da: 34:58:a3:03:90:96:b9:c7:c4:f4:ff:38:e3:39:27:70:59:84: 94:36:18:86:4e:95:f1:91:cf:22:9b:c2:82:6c:4d:37:7f:fb: cc:0a:33:fa:7a:ac:34:24:80:a6:71:b9:45:bf:aa:f1:bf:31: 35:e4:dd:15:df:4c:9f:ba:9c:b5:8f:f4:49:18:03:b7:cc:ae: c3:f8:43:7e:5c:cd:9f:55:21:be:50:32:59:b1:50:fa:d6:64: 79:c5:2d:78:bd:51:d8:60:60:59:15:b9:9c:ce:19:26:be:c1: c6:30:f1:eb:12:ee:63:bb:27:0a:f8:09:98:bc:af:61:d0:b3: 81:39:ba:95:e1:7c:37:2e:90:af:c6:10:d4:c4:7f:4a:e3:2f: 19:be:cc:40:81:62:75:bd:20:f1:9a:e5:33:ef:eb:04:9a:1c: a6:8c:1e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjUxMjE4MTYxMzU4WhcNMjUxMjI1MTYxMzU4WjAYMRYwFAYD VQQDDA02OTQ0Mjg0Ny1hNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6q4DxTqpi3PQ/IadBin7ff4tNePhTyITYyQLKNJxGx3B850jHIGmMkk2f1n A/aszYfXrUuih5FCCp+MF2yU9UwenwX74/CZxRqA2xNlB4JwdxNnoTVTq4Avw6qB BeurqVxzrIPUxowWowizKxlBA8a/POh35YHWULWWjEQJnkJwlTWFzts+iY0sC/V5 3cKj3x8BeavVLoQgRH2VdffQC0zUteioNdHgm2MKJQ4ZYvlwKZNsuHZap6USCs8J LhDxhWjxpAg6rxmNjksbJzkOnDQmXDhAzUP4K+sfPArlgwbsUYtrGIm/WHuVA6zg hDQFRiGiZrN9AX1VQdtpn88D7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmGdYao IZ5x2WzPiXoj1/v/TeNWMB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1K TWExY0FBZjFKVnA1M1E1TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABfwf4PX7eJlj4o7nrYuXVmceLwq46HXt6XzFYesFOBj16+Xus+T9I sd8YAdUPQynf6diXStGE7SoNA8lpa4o5fMyfGmV3z/x58mX7vVZqkDg7CPPa1y/B Ido0WKMDkJa5x8T0/zjjOSdwWYSUNhiGTpXxkc8im8KCbE03f/vMCjP6eqw0JICm cblFv6rxvzE15N0V30yfupy1j/RJGAO3zK7D+EN+XM2fVSG+UDJZsVD61mR5xS14 vVHYYGBZFbmczhkmvsHGMPHrEu5juycK+AmYvK9h0LOBObqV4Xw3LpCvxhDUxH9K 4y8ZvsxAgWJ1vSDxmuUz7+sEmhymjB7x -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:36 2025 by rpki-client