This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: +JhnclEk8kSv7zxl1CG3nua7FuCef0XvqJCOc0GR96k= Subject key identifier: C7:01:1B:05:4B:D8:FA:3D:35:4E:23:92:7E:5E:20:F2:99:CB:BD:C1 Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 03AA Signing time: Thu 18 Dec 2025 23:58:38 +0000 Manifest this update: Thu 18 Dec 2025 23:58:37 +0000 Manifest next update: Thu 25 Dec 2025 23:58:37 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: Eg5UMFjyRy0H4rOut2u1wCWyo8GdOIi/tyXkXZJk87g=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: eJqOfUXf9pyBvXqljah+FkA7bab4t5X+jzwwp1GzOds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: Dec 18 23:58:37 2025 GMT Not After : Dec 25 23:58:37 2025 GMT Subject: CN=6944952e-6387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:51:14:8f:95:2e:95:b4:b9:ea:4a:3b:80: 1f:8a:dd:c4:ff:a0:70:ec:5a:aa:9d:46:69:c5:4f: 95:f0:2f:26:21:9c:aa:85:cb:66:21:d3:dc:3f:50: a3:aa:5b:97:43:a8:bf:2b:c3:bb:3c:f4:44:71:c6: bc:90:0b:26:bc:0f:9b:99:26:43:48:92:f2:4e:6c: 28:c2:9d:bd:36:ff:9d:5d:6d:7a:3d:ba:eb:e2:6b: 1f:c3:1e:71:27:b6:d5:0a:ef:07:11:19:89:9d:29: be:ae:b0:80:0f:fc:ae:75:4f:71:b5:d6:73:4b:a9: 76:1f:07:04:42:90:4d:fc:d7:41:73:f2:95:41:91: 26:27:86:e9:2f:1b:38:cf:fb:a8:de:b4:b1:df:65: c4:92:ef:b4:00:72:f9:ed:17:c4:a4:5d:82:d9:7e: 2e:2c:cc:b9:58:92:eb:bc:38:57:9f:66:7d:27:bb: cc:9a:b9:1e:98:dc:0f:b9:0f:0e:00:bf:6f:d3:2e: 5b:ec:32:14:61:94:4a:4e:58:69:48:43:01:af:64: d2:a9:64:cb:dc:ab:80:dc:f5:e8:60:ef:16:17:08: 62:c3:a8:90:93:73:af:11:9c:52:d1:c6:ba:14:78: 52:80:12:4e:d1:51:b0:ef:57:0a:dc:c4:8e:36:6b: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:01:1B:05:4B:D8:FA:3D:35:4E:23:92:7E:5E:20:F2:99:CB:BD:C1 X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5f:b8:76:fa:a2:93:7f:d9:5d:45:60:26:fb:eb:03:82:63: a4:59:86:11:f9:f3:a7:2d:c4:3f:fc:ab:3e:bc:49:39:ec:86: d8:59:c0:13:ac:52:72:e4:c1:b3:bb:f9:72:27:14:e7:53:60: 81:32:c9:86:9c:05:d2:22:07:62:3c:0c:b0:06:1c:63:43:2b: eb:de:a8:ed:cc:2f:d5:f6:af:92:7e:8b:6c:7e:15:80:30:7a: c9:7e:84:b3:d6:07:06:21:82:cd:c7:dd:20:aa:a8:f9:67:20: a3:bf:68:06:aa:24:12:1c:6c:08:f9:b9:7f:60:76:92:f2:a6: fe:5c:25:7a:de:8e:11:9d:40:ce:d7:a1:00:49:bd:ff:2d:09: 62:2b:b8:f5:6f:3a:11:76:4a:df:01:c7:3e:a3:39:e2:a1:31: f3:a1:a9:d0:9c:bd:c0:e0:71:51:5f:bf:92:e9:8b:45:7f:6f: 13:2a:e5:ee:98:e9:39:d6:92:60:35:6f:63:19:54:e4:37:cc: a6:1d:f5:17:ce:b5:40:6f:b4:b5:3b:30:80:90:87:c3:0c:8f: 00:eb:3d:88:c9:8f:ea:e3:de:9a:7a:00:13:da:20:aa:d7:cb: f1:27:7a:df:7f:60:7c:fa:6b:55:17:d9:6d:14:89:77:c5:6a: c2:1f:29:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjUxMjE4MjM1ODM3WhcNMjUxMjI1MjM1ODM3WjAYMRYwFAYD VQQDDA02OTQ0OTUyZS02Mzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDdRFI+VLpW0uepKO4Afit3E/6Bw7FqqnUZpxU+V8C8mIZyqhctmIdPcP1Cj qluXQ6i/K8O7PPREcca8kAsmvA+bmSZDSJLyTmwowp29Nv+dXW16Pbrr4msfwx5x J7bVCu8HERmJnSm+rrCAD/yudU9xtdZzS6l2HwcEQpBN/NdBc/KVQZEmJ4bpLxs4 z/uo3rSx32XEku+0AHL57RfEpF2C2X4uLMy5WJLrvDhXn2Z9J7vMmrkemNwPuQ8O AL9v0y5b7DIUYZRKTlhpSEMBr2TSqWTL3KuA3PXoYO8WFwhiw6iQk3OvEZxS0ca6 FHhSgBJO0VGw71cK3MSONmsrQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcBGwVL 2Po9NU4jkn5eIPKZy73BMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzX7h2+qKTf9ldRWAm++sDgmOkWYYR+fOnLcQ//Ks+vEk57IbYWcAT rFJy5MGzu/lyJxTnU2CBMsmGnAXSIgdiPAywBhxjQyvr3qjtzC/V9q+SfotsfhWA MHrJfoSz1gcGIYLNx90gqqj5ZyCjv2gGqiQSHGwI+bl/YHaS8qb+XCV63o4RnUDO 16EASb3/LQliK7j1bzoRdkrfAcc+oznioTHzoanQnL3A4HFRX7+S6YtFf28TKuXu mOk51pJgNW9jGVTkN8ymHfUXzrVAb7S1OzCAkIfDDI8A6z2IyY/q496aegAT2iCq 18vxJ3rff2B8+mtVF9ltFIl3xWrCHylQ -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:58 2025 by rpki-client