This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: tyYbn2e9DNuLOIBvEvkX7NDqQMh21n93oKDovmXyqUs= Subject key identifier: EE:5A:A7:37:34:12:04:AC:51:1F:23:A1:A1:85:8E:C8:F8:84:F2:CE Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 01BF Signing time: Fri 19 Dec 2025 02:12:06 +0000 Manifest this update: Fri 19 Dec 2025 02:12:05 +0000 Manifest next update: Fri 26 Dec 2025 02:12:05 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: hpgGMzGSBtj+7iRo21v84WOy1KK//dAn/qb3sUdgA5I=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Dec 19 02:12:05 2025 GMT Not After : Dec 26 02:12:05 2025 GMT Subject: CN=6944b475-0ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:3a:6a:39:18:dd:9c:ea:88:d5:ee:e8:5b: 8b:5b:98:d5:4f:46:e5:20:12:51:a6:33:d5:9d:e0: 6a:8c:d8:b6:ab:92:07:77:b9:2e:4b:e2:bf:fa:63: 64:9e:f5:d0:6a:49:1f:45:55:9c:b1:20:ab:9a:b7: 92:2a:6b:fd:c1:a9:85:8c:81:df:8b:eb:b2:09:ae: 42:1a:39:1c:3b:03:5c:c0:50:56:da:b8:f8:e0:85: 3f:1f:17:2f:3f:b4:1c:37:d9:eb:0e:2a:5f:ec:7a: 4a:30:9f:43:cc:46:49:76:f6:ca:2c:55:c2:70:d3: 2f:02:f0:8b:eb:10:0f:23:99:f6:c9:e4:19:d1:64: f0:0e:50:23:0b:fe:b9:80:63:95:0d:e1:8d:09:0c: 0b:37:29:1d:31:fb:e2:fd:81:41:73:fa:87:37:9b: f4:86:d7:71:88:5f:6b:1e:45:ab:47:93:e8:dd:e7: c7:35:f7:68:59:86:35:52:e4:03:8a:db:42:23:34: 05:7b:0a:df:29:ef:72:8d:5c:04:d1:e6:3d:66:4c: 51:f0:f7:62:6b:b4:cd:10:35:ef:7b:b6:21:7c:a7: 15:bd:4f:c9:ce:4d:95:25:06:c5:d6:d5:73:46:7d: b0:6c:28:23:cb:87:17:2e:a1:a2:57:e4:cf:36:f6: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5A:A7:37:34:12:04:AC:51:1F:23:A1:A1:85:8E:C8:F8:84:F2:CE X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:55:be:90:e4:49:fa:f1:a7:8b:c6:00:e9:95:c3:12:e1:4f: 8d:9c:b5:c6:7e:34:db:cc:e4:a4:b9:30:f0:a2:50:18:a1:24: 0c:aa:5f:26:89:3d:2b:15:1f:45:c1:cb:5d:0b:39:65:a9:8c: 38:a7:2b:0d:6e:b1:9d:c4:10:02:73:01:44:e0:f7:65:78:3f: 8d:66:26:c9:3b:d1:bd:9e:64:7e:d0:8c:fa:ed:f2:b6:41:ed: 7a:c8:5d:30:26:5c:2e:9c:86:79:e0:0c:d8:e6:3a:39:77:9b: 47:d5:d1:05:df:b4:e6:72:cd:65:11:54:b6:31:67:14:b5:f6: ba:4b:74:a2:2a:43:c1:3f:ad:e1:6d:69:e5:a7:95:d7:ac:2e: a4:80:1f:c7:3f:0e:0f:7c:58:24:7d:96:00:5e:52:12:96:f6: 6f:da:4a:46:81:00:d6:77:18:95:35:b7:35:7d:24:00:d9:83: ba:55:d8:be:ee:32:af:ad:6b:a3:c3:bd:12:7a:eb:39:90:0b: d4:d9:85:f5:98:13:ef:13:ef:26:5f:94:81:ca:27:3a:dc:6c: ea:73:9e:93:da:09:d3:36:1e:9e:59:6c:98:40:82:5b:f2:ce: 3f:9f:5c:43:d7:45:81:23:87:92:e4:32:16:c2:f2:42:06:59: a7:7d:cc:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUxMjE5MDIxMjA1WhcNMjUxMjI2MDIxMjA1WjAYMRYwFAYD VQQDDA02OTQ0YjQ3NS0wYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0A6ajkY3ZzqiNXu6FuLW5jVT0blIBJRpjPVneBqjNi2q5IHd7kuS+K/+mNk nvXQakkfRVWcsSCrmreSKmv9wamFjIHfi+uyCa5CGjkcOwNcwFBW2rj44IU/Hxcv P7QcN9nrDipf7HpKMJ9DzEZJdvbKLFXCcNMvAvCL6xAPI5n2yeQZ0WTwDlAjC/65 gGOVDeGNCQwLNykdMfvi/YFBc/qHN5v0htdxiF9rHkWrR5Po3efHNfdoWYY1UuQD ittCIzQFewrfKe9yjVwE0eY9ZkxR8Pdia7TNEDXve7YhfKcVvU/Jzk2VJQbF1tVz Rn2wbCgjy4cXLqGiV+TPNvZJUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5apzc0 EgSsUR8joaGFjsj4hPLOMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyVb6Q5En68aeLxgDplcMS4U+NnLXGfjTbzOSkuTDwolAYoSQMql8m iT0rFR9FwctdCzllqYw4pysNbrGdxBACcwFE4PdleD+NZibJO9G9nmR+0Iz67fK2 Qe16yF0wJlwunIZ54AzY5jo5d5tH1dEF37Tmcs1lEVS2MWcUtfa6S3SiKkPBP63h bWnlp5XXrC6kgB/HPw4PfFgkfZYAXlISlvZv2kpGgQDWdxiVNbc1fSQA2YO6Vdi+ 7jKvrWujw70Seus5kAvU2YX1mBPvE+8mX5SByic63Gzqc56T2gnTNh6eWWyYQIJb 8s4/n1xD10WBI4eS5DIWwvJCBlmnfcyK -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:51 2025 by rpki-client