This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft File: 74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json) Hash identifier: uzv6AcU5UirjqPp4/9z1TTqSR+xylYg8j+jSiFmpmgQ= Subject key identifier: 7D:2C:5B:7F:DE:B6:49:99:79:7D:2E:4A:47:C9:51:A5:52:86:4F:8C Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 Certificate issuer: /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft Manifest number: 09 Signing time: Fri 19 Dec 2025 06:58:57 +0000 Manifest this update: Fri 19 Dec 2025 06:58:56 +0000 Manifest next update: Fri 26 Dec 2025 06:58:56 +0000 Files and hashes: 1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: ChZ5r7SqE8I+HbaTXv0c61IXJ6uc7Yk3aeSkK3FvF90=) 2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: wcuLm38qVMVNfKNHp4RygYOU4qm8i0LLeiUXLc8K4jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Validity Not Before: Dec 19 06:58:56 2025 GMT Not After : Dec 26 06:58:56 2025 GMT Subject: CN=6944f7b1-f5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:0c:ff:40:24:d0:2f:4a:05:02:b1:fc:4a: 87:5a:0b:af:15:71:2f:9f:41:87:a3:05:a8:e0:b7: b4:1b:7c:30:80:e5:08:4a:f4:ac:80:45:09:29:76: c4:e5:65:5f:5b:64:6f:68:f4:a3:7a:2e:15:cb:01: e4:e2:18:15:10:18:2e:94:03:91:f7:d8:a4:5c:76: ce:5b:02:00:91:9c:47:1d:9d:3a:74:58:f4:4a:b2: c2:df:32:17:be:6a:44:a5:42:23:a5:a7:85:78:ed: 87:ea:42:6d:e6:8f:18:43:27:7c:04:e1:c7:04:96: 53:d7:5c:cb:cb:23:27:65:8f:0c:e9:ef:07:03:0a: bc:22:3c:0b:74:36:e7:eb:bc:22:b0:86:94:ea:b4: e5:a7:7b:0c:99:8b:06:a7:76:6f:2e:77:7f:e3:3f: ec:7a:37:b6:cc:f0:c3:19:ec:51:7e:40:4b:c6:a7: 55:b0:fb:09:06:20:5f:01:30:4b:33:67:61:7e:4a: 72:a8:fe:3a:df:24:f2:23:cf:53:bb:69:95:10:17: ba:d6:a7:bc:87:4b:f1:9d:0a:df:9c:cc:24:e8:a8: a9:41:d1:45:b8:21:fe:1f:bd:70:7a:a3:de:0d:f7: 09:48:55:1d:4e:48:cd:70:9b:51:f5:b3:1a:b2:69: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2C:5B:7F:DE:B6:49:99:79:7D:2E:4A:47:C9:51:A5:52:86:4F:8C X509v3 Authority Key Identifier: keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0a:2d:5f:80:23:ac:4e:11:57:65:2f:23:be:6c:20:02:d1: 9f:17:a2:9d:11:af:4a:8d:92:ca:1a:96:62:da:af:18:6d:ff: 6d:74:55:ef:7b:d8:f0:29:c1:ed:b8:bd:af:40:82:9b:24:d8: f8:0e:80:f0:28:63:72:6e:20:ca:4b:c8:0f:7e:dd:c7:96:f3: 03:34:8d:8f:51:a8:ef:48:39:99:54:9d:7e:c2:ad:cd:ea:36: 55:f0:a7:36:9e:79:38:fc:e8:28:0b:e1:79:67:c4:0e:22:2c: 2d:ab:5d:78:5a:12:0d:10:bd:23:92:35:57:61:be:55:0d:af: da:77:e8:b2:7b:ac:3b:0d:b8:f0:22:5d:7d:14:d2:02:12:59: 0d:aa:a6:ba:27:d4:85:a9:19:4e:46:6f:4a:9a:41:25:4b:ab: 35:51:07:f2:9a:42:fc:21:cb:d9:12:39:66:ac:0a:15:f6:e7: 2d:88:86:0f:60:f0:eb:94:5e:18:51:0a:c8:e0:43:0d:be:e9: 34:5a:4e:cd:6b:0a:da:c9:5f:65:e2:a8:58:2c:4c:6f:4b:aa: 29:7d:5a:d1:36:ce:56:18:70:b5:66:0c:70:7b:a3:bf:e7:45: fe:49:24:8f:b2:1c:7c:ef:cc:2d:57:44:aa:59:b1:3b:0e:2c: ad:de:e3:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUJBQTExMC8GA1UEBRMoRUY4Qzc3QzgxN0VEREQzRkRDQzY2QjYzNTJENkVBNzhE NzJDNUFDNjAeFw0yNTEyMTkwNjU4NTZaFw0yNTEyMjYwNjU4NTZaMBgxFjAUBgNV BAMMDTY5NDRmN2IxLWY1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsfQz/QCTQL0oFArH8SodaC68VcS+fQYejBajgt7QbfDCA5QhK9KyARQkpdsTl ZV9bZG9o9KN6LhXLAeTiGBUQGC6UA5H32KRcds5bAgCRnEcdnTp0WPRKssLfMhe+ akSlQiOlp4V47YfqQm3mjxhDJ3wE4ccEllPXXMvLIydljwzp7wcDCrwiPAt0Nufr vCKwhpTqtOWnewyZiwandm8ud3/jP+x6N7bM8MMZ7FF+QEvGp1Ww+wkGIF8BMEsz Z2F+SnKo/jrfJPIjz1O7aZUQF7rWp7yHS/GdCt+czCToqKlB0UW4If4fvXB6o94N 9wlIVR1OSM1wm1H1sxqyaUR1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfSxbf962 SZl5fS5KR8lRpVKGT4wwHwYDVR0jBBgwFoAU74x3yBft3T/cxmtjUtbqeNcsWsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQkFBLzQyMEMwRjZFRDE5 RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0M1RfY3htdGpVdGJxZU5jc1dz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNzR4M3lCZnQzVF9jeG10alV0YnFlTmNzV3NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QkFBLzQyMEMwRjZFRDE5RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0M1Rf Y3htdGpVdGJxZU5jc1dzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADUKLV+AI6xOEVdlLyO+bCAC0Z8Xop0Rr0qNksoalmLarxht/210Ve97 2PApwe24va9Agpsk2PgOgPAoY3JuIMpLyA9+3ceW8wM0jY9RqO9IOZlUnX7Crc3q NlXwpzaeeTj86CgL4XlnxA4iLC2rXXhaEg0QvSOSNVdhvlUNr9p36LJ7rDsNuPAi XX0U0gISWQ2qpron1IWpGU5Gb0qaQSVLqzVRB/KaQvwhy9kSOWasChX25y2Ihg9g 8OuUXhhRCsjgQw2+6TRaTs1rCtrJX2XiqFgsTG9Lqil9WtE2zlYYcLVmDHB7o7/n Rf5JJI+yHHzvzC1XRKpZsTsOLK3e4+c= -----END CERTIFICATE-----Generated at Sat Dec 20 00:36:21 2025 by rpki-client