This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: 7jg5Bv4H2Df9PyJCY1ZVTkHQgeRo3qQErDHNxB0o25s= Subject key identifier: CD:70:50:C1:4A:97:90:2F:05:0D:71:16:63:22:4D:B9:4C:E4:A8:24 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: B1 Signing time: Fri 26 Dec 2025 14:34:21 +0000 Manifest this update: Fri 26 Dec 2025 14:34:21 +0000 Manifest next update: Fri 02 Jan 2026 14:34:21 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: 7Q+wg7OTkVn04YVkx8kmuImo1IUQcS2eVlGtk0zzqeA=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 14:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Dec 26 14:34:21 2025 GMT Not After : Jan 2 14:34:21 2026 GMT Subject: CN=694e9ced-71fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:fa:ad:d7:40:28:74:66:ec:91:e8:b1:01: 00:49:97:99:21:95:37:30:29:b2:07:3d:5a:8f:0e: ba:f4:27:29:aa:db:6e:66:c8:21:95:4e:97:06:59: 80:ea:89:ab:98:89:e6:36:5b:a9:2f:64:ac:aa:e5: 16:b7:d4:8d:b0:f2:05:21:10:47:7b:eb:d6:62:4f: d6:a7:38:9a:43:64:05:9e:80:3e:56:a4:38:ed:0e: 21:c3:4e:bb:dc:4c:e7:f0:be:7c:33:fb:ba:b0:19: 07:4b:ff:74:6e:74:2c:3e:11:05:fc:e8:52:8c:e5: 8d:ff:53:ac:a0:df:04:74:98:0a:2e:39:fc:4c:f8: 6d:c9:f9:59:65:2c:d1:e3:54:d5:48:eb:55:83:b9: af:04:7a:7c:26:c6:9f:34:4f:88:65:a0:6d:00:10: 63:8d:59:e1:2c:5b:51:0b:71:9e:68:25:37:59:fd: ce:22:f9:4f:78:1f:90:a1:db:42:08:6b:82:e8:eb: 82:9a:39:f9:55:99:31:73:c0:ed:de:63:d9:14:cf: cc:6c:18:46:8a:02:95:d5:8f:e3:92:e0:a3:48:5a: 47:b2:5d:53:92:2f:cc:eb:19:70:5e:e2:1d:6e:ce: bf:78:ff:a8:79:e1:d6:ae:83:eb:a9:3a:00:ad:06: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:70:50:C1:4A:97:90:2F:05:0D:71:16:63:22:4D:B9:4C:E4:A8:24 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:34:21:14:5e:3e:9e:21:4e:38:57:af:a5:72:60:b4:54:a0: 26:67:8a:b9:94:0f:c3:dc:8c:dd:41:79:f2:dc:7b:93:ae:1f: 4c:aa:58:c5:9e:d1:54:01:1e:98:a8:38:c7:f8:cc:53:17:22: 1c:cf:11:45:e9:52:57:dd:bb:6a:c2:4a:25:9b:12:19:aa:2a: 4e:b8:dd:16:67:e5:bb:b8:b8:00:7e:b6:e1:b6:df:39:7d:ac: ca:ef:7e:1e:89:c3:3a:66:09:46:02:99:e7:ab:50:34:fa:a0: b3:93:c8:df:83:e1:62:d2:4f:25:99:86:c8:66:5c:22:e3:a8: af:09:b4:26:9c:00:18:fc:2a:b8:76:83:79:84:d4:86:93:9a: b5:bb:08:e3:a9:91:88:52:8a:e7:57:86:1c:d6:5d:d8:f4:0c: 63:7c:ef:e6:0f:76:38:17:f1:79:ff:9c:aa:d4:0e:29:e6:4e: b9:f0:b9:b5:55:59:45:78:a3:25:ab:78:26:6b:fd:df:df:60: ad:72:f4:e5:8e:1a:e1:55:1d:63:d0:36:b3:ed:3c:33:9b:54: 85:fc:54:67:80:0f:2f:4c:f8:6d:ce:87:2d:c3:c6:6f:71:49: 00:3e:c6:23:fd:ea:f0:4e:5a:b5:1e:fc:f6:e5:38:e2:1d:e9: 91:cd:28:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjUxMjI2MTQzNDIxWhcNMjYwMTAyMTQzNDIxWjAYMRYwFAYD VQQDDA02OTRlOWNlZC03MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM/6rddAKHRm7JHosQEASZeZIZU3MCmyBz1ajw669CcpqttuZsghlU6XBlmA 6omrmInmNlupL2SsquUWt9SNsPIFIRBHe+vWYk/WpziaQ2QFnoA+VqQ47Q4hw067 3Ezn8L58M/u6sBkHS/90bnQsPhEF/OhSjOWN/1OsoN8EdJgKLjn8TPhtyflZZSzR 41TVSOtVg7mvBHp8JsafNE+IZaBtABBjjVnhLFtRC3GeaCU3Wf3OIvlPeB+QodtC CGuC6OuCmjn5VZkxc8Dt3mPZFM/MbBhGigKV1Y/jkuCjSFpHsl1Tki/M6xlwXuId bs6/eP+oeeHWroPrqToArQa3bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1wUMFK l5AvBQ1xFmMiTblM5KgkMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUNCEUXj6eIU44V6+lcmC0VKAmZ4q5lA/D3IzdQXny3HuTrh9MqljF ntFUAR6YqDjH+MxTFyIczxFF6VJX3btqwkolmxIZqipOuN0WZ+W7uLgAfrbhtt85 fazK734eicM6ZglGApnnq1A0+qCzk8jfg+Fi0k8lmYbIZlwi46ivCbQmnAAY/Cq4 doN5hNSGk5q1uwjjqZGIUornV4Yc1l3Y9AxjfO/mD3Y4F/F5/5yq1A4p5k658Lm1 VVlFeKMlq3gma/3f32CtcvTljhrhVR1j0Daz7Twzm1SF/FRngA8vTPhtzoctw8Zv cUkAPsYj/erwTlq1Hvz25TjiHemRzSin -----END CERTIFICATE-----Generated at Sun Dec 28 06:21:06 2025 by rpki-client