This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: YjdzmBC8dtQ8BeN9MlWsK7cR78LWT6phImrnf6yGKkQ= Subject key identifier: 8D:33:70:3B:50:F6:8B:D5:D2:D2:11:C1:CC:06:DB:30:B8:FE:FA:53 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 0859 Signing time: Sun 28 Dec 2025 20:08:17 +0000 Manifest this update: Sun 28 Dec 2025 20:08:16 +0000 Manifest next update: Sun 04 Jan 2026 20:08:16 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: dO7xUOUrkfCJWa2Pn/xZGSUKSLSnMwblp+hIYjoElhI=) 2: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) 3: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) 4: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 5: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 6: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 7: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 20:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Dec 28 20:08:16 2025 GMT Not After : Jan 4 20:08:16 2026 GMT Subject: CN=69518e31-7aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:6c:80:eb:1e:3b:4c:75:99:84:5e:e4:d9: 30:95:4c:80:73:a7:0c:1a:0a:26:45:22:90:f9:c3: 04:a5:8f:bd:25:a6:5a:18:a7:33:c8:40:42:04:41: 24:78:28:6b:89:76:fe:62:df:19:db:25:02:c0:5d: 11:24:15:c9:af:4a:0a:c3:48:c2:09:39:e1:1a:8d: 80:37:6e:5b:ba:b1:49:72:0e:9d:66:14:7c:85:a0: ad:4e:de:e8:79:3e:a9:30:76:66:2b:29:11:f6:01: f0:c8:b5:7c:f5:6b:3f:50:d7:e1:b2:ac:62:5b:6e: 3a:a7:87:0f:d9:e7:46:e0:45:31:a1:cf:b4:1b:8d: b9:79:de:cf:70:c2:33:ab:40:8f:0c:40:e3:c1:0a: 6b:91:94:8a:f8:ed:0f:86:01:79:0e:8d:26:db:23: ba:64:27:29:42:f4:63:03:77:6f:75:4a:c3:2c:5e: bc:a5:a0:83:de:b3:0f:15:f7:28:7b:2a:ec:45:dc: 68:a2:48:0d:5b:54:cf:48:c1:b4:4c:06:cf:11:e7: 1a:c4:e0:90:0e:56:ac:36:e3:05:b2:a4:ca:e4:5f: f4:61:41:8e:3d:8b:72:d5:ce:bc:4a:aa:dd:39:dd: d6:3b:89:28:b7:2e:ba:e2:e0:4f:93:80:8d:e5:b1: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:70:3B:50:F6:8B:D5:D2:D2:11:C1:CC:06:DB:30:B8:FE:FA:53 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8b:fb:ca:c6:a3:46:72:56:22:bf:bb:15:69:14:f8:28:f8: ca:bb:1a:cf:ce:34:34:d0:d1:67:1e:e9:46:da:8c:a9:26:0c: 78:c2:d4:7a:d5:71:34:6f:6a:df:5e:87:f0:bd:6d:87:77:49: 1d:62:a4:de:5a:67:1d:2b:89:4a:55:ea:98:23:0f:ed:28:63: a7:4b:35:b4:3a:9b:d4:05:ec:0e:65:e5:6f:fa:8d:fd:e2:f8: 78:d8:63:66:af:30:2a:79:ab:b3:b2:8d:ea:ec:7f:f1:a5:34: d4:cd:00:54:79:df:70:d9:4e:f2:77:e7:29:11:67:96:f9:4b: 0b:88:6e:78:c3:fa:ed:71:25:2a:7a:13:0a:ca:42:cc:a3:7c: 44:f8:a7:5e:3a:0b:3b:f5:b4:e3:85:a3:b4:67:b7:10:32:89: ff:7b:55:57:b7:4d:f4:d8:03:d3:8d:bb:a1:e0:e1:f9:d1:41: 37:cd:79:f8:14:30:84:b9:10:c3:ad:d9:b0:cc:04:b6:7f:8c: 02:fe:f5:75:1f:73:ff:84:2b:60:a4:7e:0f:22:1f:c7:00:12: 35:a3:c1:f2:f7:7b:3b:f9:d4:7e:fa:ec:59:2f:f5:31:c9:74: 0f:55:10:bd:4a:46:b1:96:91:62:fd:5e:8a:1b:4d:a3:b2:06: 33:98:55:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUxMjI4MjAwODE2WhcNMjYwMTA0MjAwODE2WjAYMRYwFAYD VQQDDA02OTUxOGUzMS03YWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUZsgOseO0x1mYRe5NkwlUyAc6cMGgomRSKQ+cMEpY+9JaZaGKczyEBCBEEk eChriXb+Yt8Z2yUCwF0RJBXJr0oKw0jCCTnhGo2AN25burFJcg6dZhR8haCtTt7o eT6pMHZmKykR9gHwyLV89Ws/UNfhsqxiW246p4cP2edG4EUxoc+0G425ed7PcMIz q0CPDEDjwQprkZSK+O0PhgF5Do0m2yO6ZCcpQvRjA3dvdUrDLF68paCD3rMPFfco eyrsRdxookgNW1TPSMG0TAbPEecaxOCQDlasNuMFsqTK5F/0YUGOPYty1c68Sqrd Od3WO4koty664uBPk4CN5bG6aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0zcDtQ 9ovV0tIRwcwG2zC4/vpTMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmi/vKxqNGclYiv7sVaRT4KPjKuxrPzjQ00NFnHulG2oypJgx4wtR6 1XE0b2rfXofwvW2Hd0kdYqTeWmcdK4lKVeqYIw/tKGOnSzW0OpvUBewOZeVv+o39 4vh42GNmrzAqeauzso3q7H/xpTTUzQBUed9w2U7yd+cpEWeW+UsLiG54w/rtcSUq ehMKykLMo3xE+KdeOgs79bTjhaO0Z7cQMon/e1VXt0302APTjbuh4OH50UE3zXn4 FDCEuRDDrdmwzAS2f4wC/vV1H3P/hCtgpH4PIh/HABI1o8Hy93s7+dR++uxZL/Ux yXQPVRC9SkaxlpFi/V6KG02jsgYzmFVq -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:50 2025 by rpki-client