This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json) Hash identifier: +l7XEvYFSNU7pED8J6/fs8/0yrq23mz5yTSQK8CjHdA= Subject key identifier: 4D:83:2A:D2:67:A2:BA:C5:96:10:A0:32:75:7D:15:9A:D5:E4:E0:4F Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft Manifest number: 0E Signing time: Fri 19 Dec 2025 06:55:59 +0000 Manifest this update: Fri 19 Dec 2025 06:55:59 +0000 Manifest next update: Fri 26 Dec 2025 06:55:59 +0000 Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: Pgl/2dIKwW+kJsGGbdaVcSUC/nO5k8mxwJ2TgOtpYzY=) 2: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: zO3eHRQaLoJDtz5i54a8aGSxd9NadRVjZ+xhsPWeZ+c=) 3: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: JXhMVFF9LOX2GddOqFjlhclH4AnOFFWS0nrFu9DCJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Validity Not Before: Dec 19 06:55:59 2025 GMT Not After : Dec 26 06:55:59 2025 GMT Subject: CN=6944f6ff-6018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:73:90:77:af:10:de:3f:43:dc:81:66:b8: c3:25:fd:ad:70:1b:80:bd:c6:c6:04:17:d3:5d:f5: 2b:74:ea:39:37:6c:72:5b:65:4b:1d:1c:21:70:56: 9a:49:bd:60:ce:81:93:cf:a5:ab:a2:f1:1d:ca:bf: 59:26:46:0a:ea:ed:1d:04:57:16:31:f2:4e:c0:7a: 70:5b:9b:32:4a:c5:b3:6d:23:2b:0b:7a:bc:1f:b4: 99:e4:68:a7:2f:9e:f6:dd:2e:de:8d:80:df:dd:be: 05:f6:5a:8c:7e:3f:ce:3b:51:4d:8c:f1:b8:8c:0b: 06:51:f0:42:70:d7:5c:16:de:44:75:e4:ca:97:43: 86:f0:60:54:36:40:e9:cb:04:fd:ed:27:9b:72:87: 24:26:96:fb:f3:08:e4:8d:f5:16:fb:db:8b:ab:8b: d1:c0:18:7f:6f:88:95:03:f0:97:b1:47:d8:96:43: e9:e5:36:46:50:83:46:48:f2:5d:c4:06:aa:93:7e: 5c:39:cd:df:48:7f:6d:e0:65:c7:73:31:f7:a9:c0: 78:58:2c:b3:d5:e2:7a:90:e1:67:e1:ff:a1:d9:06: df:1f:8e:b7:8a:54:39:ed:c3:4e:c7:c2:cf:c3:75: 66:ed:60:bc:f5:4e:40:09:ef:c9:da:e7:03:72:09: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:83:2A:D2:67:A2:BA:C5:96:10:A0:32:75:7D:15:9A:D5:E4:E0:4F X509v3 Authority Key Identifier: keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7d:1f:8d:e1:d6:80:d7:ad:03:43:df:9f:3b:42:3c:f2:dd: 59:a4:b9:e2:c6:42:f4:20:d0:cb:cf:5d:18:b9:74:40:35:2f: 64:8e:8b:7a:a5:6a:e5:39:08:0c:5a:ec:48:d2:4e:1d:eb:a5: 28:c7:64:c0:9c:5b:d6:db:41:ff:37:98:70:72:d6:09:dd:08: 81:4f:01:31:a8:b2:19:4b:7f:5a:f4:eb:c6:37:6e:1c:2d:c3: 81:f4:da:e4:e8:c4:9e:c5:28:44:ff:6a:30:4f:66:69:69:73: ca:27:15:e9:c4:d9:0b:cf:eb:83:c9:81:d5:4e:2f:06:59:5f: a1:95:1d:0b:37:f9:e8:96:e7:65:0b:f9:fc:56:25:7e:9c:24: 7a:11:88:a1:29:ea:df:90:80:a4:b3:88:fd:67:84:57:fa:bd: 15:d5:a1:99:96:53:e6:cf:4f:cf:84:5b:b7:e0:25:cc:5b:32: 29:ca:fa:68:2e:81:d4:0b:57:4b:28:9d:51:b3:5e:1f:42:10: 8c:ef:bb:34:d6:d8:3b:69:2e:e4:97:4c:2a:19:3e:99:16:57: bc:ed:f3:89:9e:6b:f8:50:59:3a:a5:83:48:16:5c:7a:2e:88: d2:ab:2f:8e:44:2d:5a:4d:0d:56:9a:f3:41:cf:ec:40:b4:87: ab:2a:8d:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTgzQjExMC8GA1UEBRMoQjMxNkMwMUI3Qjc1NDMxNEUyRjE4RjczN0E3RDdEODlB Q0FCN0U2ODAeFw0yNTEyMTkwNjU1NTlaFw0yNTEyMjYwNjU1NTlaMBgxFjAUBgNV BAMMDTY5NDRmNmZmLTYwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo9XOQd68Q3j9D3IFmuMMl/a1wG4C9xsYEF9Nd9St06jk3bHJbZUsdHCFwVppJ vWDOgZPPpaui8R3Kv1kmRgrq7R0EVxYx8k7AenBbmzJKxbNtIysLerwftJnkaKcv nvbdLt6NgN/dvgX2Wox+P847UU2M8biMCwZR8EJw11wW3kR15MqXQ4bwYFQ2QOnL BP3tJ5tyhyQmlvvzCOSN9Rb724uri9HAGH9viJUD8JexR9iWQ+nlNkZQg0ZI8l3E BqqTflw5zd9If23gZcdzMfepwHhYLLPV4nqQ4Wfh/6HZBt8fjreKVDntw07Hws/D dWbtYLz1TkAJ78na5wNyCSc3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTYMq0mei usWWEKAydX0VmtXk4E8wHwYDVR0jBBgwFoAUsxbAG3t1QxTi8Y9zen19iayrfmgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5ODNCL0RGQUY5OTkyQ0Mw MzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hiQUczdDFReFRpOFk5emVuMTlpYXlyZm1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 ODNCL0RGQUY5OTkyQ0MwMzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhU aThZOXplbjE5aWF5cmZtZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ99H43h1oDXrQND3587Qjzy3VmkueLGQvQg0MvPXRi5dEA1L2SOi3ql auU5CAxa7EjSTh3rpSjHZMCcW9bbQf83mHBy1gndCIFPATGoshlLf1r068Y3bhwt w4H02uToxJ7FKET/ajBPZmlpc8onFenE2QvP64PJgdVOLwZZX6GVHQs3+eiW52UL +fxWJX6cJHoRiKEp6t+QgKSziP1nhFf6vRXVoZmWU+bPT8+EW7fgJcxbMinK+mgu gdQLV0sonVGzXh9CEIzvuzTW2DtpLuSXTCoZPpkWV7zt84mea/hQWTqlg0gWXHou iNKrL45ELVpNDVaa80HP7EC0h6sqjXA= -----END CERTIFICATE-----Generated at Fri Dec 19 18:45:46 2025 by rpki-client