This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: iPuMjzUZCk0/kIgJPCdKn+KgPO4cYo0drcmUJ5IavW4= Subject key identifier: 9B:87:49:B8:70:02:05:ED:A1:8E:9F:81:E4:94:A2:92:0F:C2:89:20 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 0113 Signing time: Sun 21 Dec 2025 04:04:19 +0000 Manifest this update: Sun 21 Dec 2025 04:04:18 +0000 Manifest next update: Sun 28 Dec 2025 04:04:18 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: j4RCUfhx9hdkC8hlcL2fhD5DXB7aOSysgtiOp3lunko=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Dec 21 04:04:18 2025 GMT Not After : Dec 28 04:04:18 2025 GMT Subject: CN=694771c3-2926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:24:b0:23:e6:e5:2a:8c:1b:d0:eb:f6:6b: e2:c4:cc:70:ec:33:89:22:9c:47:1a:6a:81:ba:43: dc:b6:e0:21:93:cf:da:d5:21:61:61:6a:fe:b1:2b: ec:1b:33:16:d1:c8:f3:a6:dc:0d:1a:b1:52:77:05: 24:da:42:ff:df:a8:17:3d:0b:6e:92:fe:ee:5f:c8: 28:30:3a:36:9a:4d:44:67:c6:89:12:87:be:b6:3f: 40:62:07:9e:e7:32:e3:79:da:1f:cf:7e:af:19:b0: bc:19:f7:84:5e:b3:ed:39:2e:99:14:9a:58:cf:4e: be:eb:cd:83:7f:40:6c:6e:e1:a9:c6:5d:da:5c:86: 88:45:a5:b1:8c:6d:6f:71:ec:79:b7:c2:4f:42:21: d0:d1:8d:69:e4:8f:41:45:ea:e6:2e:da:5c:a6:b6: a3:66:6a:27:ec:99:b9:be:58:b8:13:3d:37:5a:13: 13:b9:91:6a:20:fe:5d:28:d6:b6:40:14:30:9a:6d: 2f:f5:0c:55:88:2a:ee:35:b7:6a:81:e5:65:31:3b: 51:a3:4d:0c:bd:fe:8a:2c:4c:8b:81:ff:db:ea:bb: c6:76:20:78:26:9c:01:98:e0:ad:a9:f9:0e:c0:61: f6:81:98:6c:e5:dd:38:78:cf:ab:91:4c:52:7b:1b: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:87:49:B8:70:02:05:ED:A1:8E:9F:81:E4:94:A2:92:0F:C2:89:20 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:96:ed:1a:cf:c4:df:73:8b:9f:28:b7:59:87:bb:64:1a:b3: 3f:cc:57:c9:f8:d5:b5:25:03:03:cd:1d:d7:9b:fb:ca:fe:4a: b9:03:8f:64:36:33:c1:9b:da:19:c6:5c:7f:81:10:dc:34:10: 00:24:b4:b1:2f:0b:95:8b:a5:94:e2:6d:07:83:db:5b:e0:89: 8d:af:0b:1e:21:53:1a:85:43:70:cd:9b:33:59:0f:23:a0:3a: 2a:cc:fe:36:4f:3a:d3:02:f8:b6:aa:9c:ba:e9:65:cc:0e:54: 74:bf:94:3b:33:96:30:7d:49:50:60:24:84:75:dd:44:fd:3d: ab:09:97:76:dc:3b:26:a6:bf:8c:75:fc:e1:a6:88:3f:5a:d5: b6:ae:11:d2:7b:a2:10:c1:a3:c7:e4:02:73:8a:af:da:82:44: 0a:7c:5d:fd:9b:80:07:18:08:2e:ac:16:b4:95:7f:d8:bd:01: b6:ee:db:75:fd:dc:e3:8c:f8:fb:80:8d:48:c2:c9:70:a3:f8: ca:79:f7:dc:3f:ec:71:1d:f5:ea:54:c5:3d:d2:9d:89:e5:68: d1:d4:ba:7e:75:1d:08:db:de:10:b9:20:b8:d3:a4:cb:92:6f: cc:db:b8:96:5a:45:b9:d2:ac:14:e2:73:db:43:35:19:e5:35: 44:05:19:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUxMjIxMDQwNDE4WhcNMjUxMjI4MDQwNDE4WjAYMRYwFAYD VQQDDA02OTQ3NzFjMy0yOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05wksCPm5SqMG9Dr9mvixMxw7DOJIpxHGmqBukPctuAhk8/a1SFhYWr+sSvs GzMW0cjzptwNGrFSdwUk2kL/36gXPQtukv7uX8goMDo2mk1EZ8aJEoe+tj9AYgee 5zLjedofz36vGbC8GfeEXrPtOS6ZFJpYz06+682Df0BsbuGpxl3aXIaIRaWxjG1v cex5t8JPQiHQ0Y1p5I9BRermLtpcprajZmon7Jm5vli4Ez03WhMTuZFqIP5dKNa2 QBQwmm0v9QxViCruNbdqgeVlMTtRo00Mvf6KLEyLgf/b6rvGdiB4JpwBmOCtqfkO wGH2gZhs5d04eM+rkUxSexsDqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuHSbhw AgXtoY6fgeSUopIPwokgMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdlu0az8Tfc4ufKLdZh7tkGrM/zFfJ+NW1JQMDzR3Xm/vK/kq5A49k NjPBm9oZxlx/gRDcNBAAJLSxLwuVi6WU4m0Hg9tb4ImNrwseIVMahUNwzZszWQ8j oDoqzP42TzrTAvi2qpy66WXMDlR0v5Q7M5YwfUlQYCSEdd1E/T2rCZd23Dsmpr+M dfzhpog/WtW2rhHSe6IQwaPH5AJziq/agkQKfF39m4AHGAgurBa0lX/YvQG27tt1 /dzjjPj7gI1Iwslwo/jKeffcP+xxHfXqVMU90p2J5WjR1Lp+dR0I294QuSC406TL km/M27iWWkW50qwU4nPbQzUZ5TVEBRlL -----END CERTIFICATE-----Generated at Sun Dec 21 06:25:49 2025 by rpki-client