This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: ewjYWJypzhwalB/dqcAKmWiDAtHd0UNiX/J/cEVvExM= Subject key identifier: 1C:9B:E3:BF:5D:DD:EC:56:55:33:2C:56:F0:CA:D2:17:9E:D7:CE:FC Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 0574 Signing time: Thu 18 Dec 2025 16:14:28 +0000 Manifest this update: Thu 18 Dec 2025 16:14:28 +0000 Manifest next update: Thu 25 Dec 2025 16:14:28 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: hImUAs4Gal9EC+m4l38NDchY41Kvu711QjDPpPWpCqM=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: gNw6+2AtUDlZqQnfDSX/fakH8OEL/fzgw5/WC6J/FXA=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: olSuTXg4z8rAQVRr4bLY3JWSgH6wfZWF5NWyI+YF42Y=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: PtfkQkDsmXl3jve8vW5Bkmjd/2ESa8IcHz8xM5qInPk=) 5: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: aNH379FQc3LoP81plPwndyeL8gm1j9vMgI0IfOPvVJ8=) 6: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: Xh3iMK0Ak0Tx1OewwcV+5j4ibHx4h2hLFwHOLVOVBKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Dec 18 16:14:28 2025 GMT Not After : Dec 25 16:14:28 2025 GMT Subject: CN=69442864-d4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:7f:50:7c:2b:1e:f9:c1:e0:4f:f6:1a:c4: 63:0c:45:31:bc:48:8b:36:71:6a:a2:b2:ad:a3:9a: 2c:f4:e9:af:e1:a0:84:fc:3f:10:de:6e:54:bc:ec: 47:8e:01:da:3f:a4:cb:9b:8a:91:dd:96:e7:94:21: c8:77:63:0b:e7:3b:98:10:2d:ad:c7:46:19:5c:97: 56:05:ec:70:bc:a4:41:91:fb:58:0a:bb:e0:f3:60: a4:9a:6d:4c:e3:6d:3c:07:23:08:85:08:7d:cf:03: e0:52:be:3b:05:45:92:af:f9:79:65:6b:75:77:d7: a1:1e:15:6e:2f:f3:7a:c0:d1:d5:78:46:7d:cd:15: 59:b1:a0:b0:5a:60:fd:aa:3c:2a:65:08:fc:5d:3b: 51:65:2e:7f:57:36:86:5b:c7:33:0b:75:ed:47:29: b1:15:08:4e:2b:c2:1c:8e:af:6f:6e:9d:3a:7b:48: fc:a1:94:04:43:6c:f6:46:d1:24:57:51:9a:86:04: d6:cb:f7:30:0a:75:bc:ba:64:dd:c9:3f:d6:45:f2: 5a:4a:54:68:71:69:3e:2a:c7:cc:64:97:0a:0a:d7: 74:b3:92:07:c2:40:52:50:c1:58:bf:9d:04:3f:20: dd:3b:17:88:23:1d:60:0c:1a:1f:eb:f8:e4:7b:00: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:E3:BF:5D:DD:EC:56:55:33:2C:56:F0:CA:D2:17:9E:D7:CE:FC X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2a:52:52:f5:45:09:de:cc:a2:11:88:81:1f:c5:f4:46:2d: d2:d2:f2:00:ae:28:f5:a7:51:4b:04:a9:06:fb:7e:ee:26:db: e2:c5:4e:e8:77:8e:57:33:5e:a6:dd:6d:93:88:ea:b6:f9:36: b7:8f:88:d1:39:90:57:7f:89:e3:d9:eb:d8:27:97:73:33:be: 2d:ca:d4:be:1f:d2:82:36:87:2f:18:fe:ae:52:7c:d9:73:75: a4:1b:92:a1:a1:06:c0:66:23:c2:74:f9:48:fe:33:4d:83:4e: d9:25:5e:b7:af:63:a1:13:1a:43:36:30:07:a4:24:29:eb:2a: ee:d4:9c:41:e7:39:22:e7:c7:ac:77:ca:40:38:3e:14:3e:12: 75:a4:ae:f7:b3:34:26:5a:f6:90:dd:fa:d6:55:63:c7:1c:b9: 5d:48:c7:90:a8:dc:17:81:10:01:d0:14:07:62:f3:37:40:df: 7b:2d:be:fc:9d:8d:c8:f8:0c:11:7f:49:05:6e:28:cd:51:2d: b7:ea:8d:86:e0:a9:f8:0e:59:85:58:3a:2e:17:b3:6d:7a:a3: 1a:be:b8:33:c0:ff:07:f2:3a:9e:df:b7:7c:a6:46:f5:13:f9: ba:45:71:02:33:f0:06:78:ce:43:bc:a2:ca:57:f3:c8:da:1b: 43:54:8c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUxMjE4MTYxNDI4WhcNMjUxMjI1MTYxNDI4WjAYMRYwFAYD VQQDDA02OTQ0Mjg2NC1kNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUR/UHwrHvnB4E/2GsRjDEUxvEiLNnFqorKto5os9Omv4aCE/D8Q3m5UvOxH jgHaP6TLm4qR3ZbnlCHId2ML5zuYEC2tx0YZXJdWBexwvKRBkftYCrvg82Ckmm1M 4208ByMIhQh9zwPgUr47BUWSr/l5ZWt1d9ehHhVuL/N6wNHVeEZ9zRVZsaCwWmD9 qjwqZQj8XTtRZS5/VzaGW8czC3XtRymxFQhOK8Icjq9vbp06e0j8oZQEQ2z2RtEk V1GahgTWy/cwCnW8umTdyT/WRfJaSlRocWk+KsfMZJcKCtd0s5IHwkBSUMFYv50E PyDdOxeIIx1gDBof6/jkewDKaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByb479d 3exWVTMsVvDK0hee1878MB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANKlJS9UUJ3syiEYiBH8X0Ri3S0vIArij1p1FLBKkG+37uJtvixU7o d45XM16m3W2TiOq2+Ta3j4jROZBXf4nj2evYJ5dzM74tytS+H9KCNocvGP6uUnzZ c3WkG5KhoQbAZiPCdPlI/jNNg07ZJV63r2OhExpDNjAHpCQp6yru1JxB5zki58es d8pAOD4UPhJ1pK73szQmWvaQ3frWVWPHHLldSMeQqNwXgRAB0BQHYvM3QN97Lb78 nY3I+AwRf0kFbijNUS236o2G4Kn4DlmFWDouF7NteqMavrgzwP8H8jqe37d8pkb1 E/m6RXECM/AGeM5DvKLKV/PI2htDVIx6 -----END CERTIFICATE-----Generated at Sat Dec 20 03:14:52 2025 by rpki-client