This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: SfwhQTKtZQ7Gg4rw9wcz3KcDfB4et02gkmb+7g2FRAM= Subject key identifier: 48:E0:CE:1C:3C:F6:FF:11:FF:AC:DF:2E:EA:37:3B:22:1C:63:B4:21 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 01FA Signing time: Thu 25 Dec 2025 01:38:14 +0000 Manifest this update: Thu 25 Dec 2025 01:38:14 +0000 Manifest next update: Thu 01 Jan 2026 01:38:14 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: YkhxUIgnk/0Y6HpjIhZC5plknwP4/q8d230KtftUvuk=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Dec 25 01:38:14 2025 GMT Not After : Jan 1 01:38:14 2026 GMT Subject: CN=694c9586-64e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:c1:cb:93:26:c2:1f:6d:f1:4d:d1:3b:33: 8b:f0:d3:41:f6:16:45:c3:62:f6:1e:37:0c:b5:6e: b1:c9:a9:54:6d:15:15:95:85:ce:33:3a:72:4c:3f: 8a:cb:ab:7c:3c:43:1a:45:db:b3:b6:49:f7:34:ab: 1c:ff:f2:22:e1:04:6a:cd:4c:41:f3:d6:e8:6f:a4: ab:5d:0c:fc:2c:49:72:fb:55:78:1d:79:3d:ec:8c: ef:43:e5:22:8b:6d:f5:c6:91:5e:72:c8:7c:4d:89: dd:65:72:b1:58:46:da:b7:0f:a3:48:0a:6d:6d:57: f3:a2:c6:d4:5e:ce:41:72:03:68:84:3b:53:81:5e: 7f:61:79:f1:a6:35:de:34:2d:2e:b1:40:13:ab:4d: dc:79:07:0d:39:f8:c8:4b:1a:ed:57:20:9b:c4:c3: 0e:08:39:e8:d0:81:aa:24:41:8d:c6:ac:8b:37:90: 84:0e:44:15:19:d0:f3:5a:e3:09:71:c6:38:cd:ff: fc:15:c2:8d:84:49:82:ef:9f:88:f0:d9:e8:10:53: bb:70:db:58:ad:22:1b:50:79:ee:39:b6:4c:42:60: 34:26:9a:27:ab:58:fc:75:06:73:7c:2d:f0:cf:a5: 80:bb:09:a2:cc:9e:6b:d3:83:41:18:6a:3b:46:0b: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:CE:1C:3C:F6:FF:11:FF:AC:DF:2E:EA:37:3B:22:1C:63:B4:21 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a5:a6:83:90:f6:f1:f2:13:d6:51:3d:7e:c0:b7:1e:15:77: aa:53:2c:89:fe:fc:9c:71:32:08:03:fa:a4:09:bf:81:29:20: 12:46:a7:4d:d4:8e:ad:24:75:29:bd:ca:6c:e6:16:df:6f:7e: df:2c:cc:31:55:06:7b:09:e1:8b:14:43:de:c5:38:b5:c1:d7: 8f:9c:a9:ad:46:ce:5d:40:5f:56:6a:59:fd:57:e2:5b:0b:6c: a7:05:06:3e:17:02:3f:1f:e9:51:6b:7f:57:5a:87:f2:e0:79: ff:95:43:e5:f9:62:e5:92:08:6f:d5:33:9d:41:e8:61:d3:3a: 6f:97:ce:e5:db:16:c7:16:b6:6f:4f:79:1a:a8:31:90:07:1e: 9e:06:99:4f:0e:2b:6a:c1:4b:e4:6f:f8:14:82:48:e0:9a:af: 9b:2f:33:f8:68:8d:7a:75:96:4f:9c:76:a5:08:b6:96:91:d5: 5e:c5:b0:12:b3:0f:9f:49:a4:63:39:cd:03:df:a3:16:1f:5d: 03:57:7e:84:17:11:58:19:0c:c3:26:59:7c:7b:aa:ff:2f:4d: 76:82:1b:39:b9:84:1c:ce:ad:ae:10:b0:ac:c8:c7:17:32:6a: 30:cf:3f:6b:93:22:de:bc:6f:64:05:73:62:5c:46:28:26:8c: 80:e4:02:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUxMjI1MDEzODE0WhcNMjYwMTAxMDEzODE0WjAYMRYwFAYD VQQDDA02OTRjOTU4Ni02NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlnBy5Mmwh9t8U3ROzOL8NNB9hZFw2L2HjcMtW6xyalUbRUVlYXOMzpyTD+K y6t8PEMaRduztkn3NKsc//Ii4QRqzUxB89bob6SrXQz8LEly+1V4HXk97IzvQ+Ui i231xpFecsh8TYndZXKxWEbatw+jSAptbVfzosbUXs5BcgNohDtTgV5/YXnxpjXe NC0usUATq03ceQcNOfjISxrtVyCbxMMOCDno0IGqJEGNxqyLN5CEDkQVGdDzWuMJ ccY4zf/8FcKNhEmC75+I8NnoEFO7cNtYrSIbUHnuObZMQmA0Jponq1j8dQZzfC3w z6WAuwmizJ5r04NBGGo7Rgv2nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjgzhw8 9v8R/6zfLuo3OyIcY7QhMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLpaaDkPbx8hPWUT1+wLceFXeqUyyJ/vyccTIIA/qkCb+BKSASRqdN 1I6tJHUpvcps5hbfb37fLMwxVQZ7CeGLFEPexTi1wdePnKmtRs5dQF9Waln9V+Jb C2ynBQY+FwI/H+lRa39XWofy4Hn/lUPl+WLlkghv1TOdQehh0zpvl87l2xbHFrZv T3kaqDGQBx6eBplPDitqwUvkb/gUgkjgmq+bLzP4aI16dZZPnHalCLaWkdVexbAS sw+fSaRjOc0D36MWH10DV36EFxFYGQzDJll8e6r/L012ghs5uYQczq2uELCsyMcX Mmowzz9rkyLevG9kBXNiXEYoJoyA5AI4 -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:20 2025 by rpki-client