This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json) Hash identifier: xJT2XqN/dl48PJIxGv42h9c5+Jiw1x9r/wxtzXtTkDo= Subject key identifier: 1A:9D:8D:C7:FD:80:2B:7A:32:30:C9:B5:2E:5D:2F:AA:B7:C0:30:74 Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft Manifest number: 37 Signing time: Mon 29 Dec 2025 06:16:21 +0000 Manifest this update: Mon 29 Dec 2025 06:16:21 +0000 Manifest next update: Mon 05 Jan 2026 06:16:21 +0000 Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: OpCIGpiqFeExDOAh9HjLqUj6SLPqf2AFVAYInYHoFIM=) 2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: EvmYF48T0Vnc/1ZgB1IqFG/4zkh2TOgaxoDK/mhEVBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 06:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Dec 29 06:16:21 2025 GMT Not After : Jan 5 06:16:21 2026 GMT Subject: CN=69521cb5-8c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:94:a7:a1:93:a3:92:d0:c3:b4:d1:d9:5f: e6:84:d4:c8:c3:9d:2d:fc:70:91:02:8d:cb:23:e5: d3:01:0a:20:f5:96:7f:f5:c2:41:9e:ec:58:e9:f8: 66:c9:3d:69:10:f4:cc:4f:70:af:19:5d:3d:af:7d: c4:38:19:27:0f:3d:29:e4:b4:c9:70:60:c6:63:69: 35:be:30:d1:9e:ac:72:b7:e9:b1:b3:4b:56:b7:01: b7:13:c4:10:55:96:4a:14:cc:2b:11:bc:55:9b:7e: 9e:f6:4a:53:24:15:0f:42:8a:c9:6d:30:15:d7:aa: c0:63:10:8a:9c:d2:34:f9:e5:37:06:e1:4c:e6:0f: 5e:67:28:62:18:94:3a:db:0f:9b:68:e0:75:4a:07: 2e:f7:40:1b:32:8b:72:f7:4a:24:47:8c:10:ee:27: ee:b5:b6:5b:22:b8:55:61:dd:46:50:8e:15:45:41: 12:bc:9f:49:d1:90:f1:6f:e3:29:e3:c6:59:d4:bc: 5f:f9:24:7a:5a:f8:87:63:0a:3e:e1:71:fc:45:7e: 15:db:97:d7:22:1f:1b:64:c4:dd:13:38:69:a3:7b: 48:dd:1a:76:31:54:bd:f2:87:d9:65:f4:94:d8:58: 10:75:0b:4f:92:1c:1b:3c:01:e0:62:4c:4e:cb:83: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:8D:C7:FD:80:2B:7A:32:30:C9:B5:2E:5D:2F:AA:B7:C0:30:74 X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9c:67:3b:8b:9a:e4:bf:f8:ca:e0:e0:08:36:07:40:5b:32: c5:f4:c2:f0:53:2f:2d:00:9c:a6:b7:5b:fc:43:e8:e6:83:d5: 07:34:42:de:8f:52:ff:17:71:60:cf:65:50:16:df:fc:a2:7a: c1:aa:32:bf:ed:c0:ee:c9:83:71:ca:eb:b5:14:fd:03:ce:2b: 0d:9b:ca:0f:38:9f:38:38:e5:70:6c:4e:6f:cd:b0:65:78:17: b7:fb:34:46:69:97:67:79:af:df:3c:30:2f:aa:66:cb:81:a9: 44:64:70:37:c2:4d:69:af:9b:62:47:df:3b:ea:64:07:5f:de: 58:75:6c:90:7d:4f:ea:32:f3:81:42:bf:81:37:c4:74:48:49: 6e:60:de:08:1b:25:b5:ff:3e:b1:4c:c0:98:82:59:53:77:c9: 6f:91:a4:f1:22:8c:fd:92:11:f4:97:6c:5f:54:2f:7d:21:49: 0a:81:bd:68:8e:6b:87:19:e6:7c:44:88:64:5a:49:f4:78:cc: 42:fb:4f:26:f5:7b:ed:e2:b2:c5:02:9c:84:93:4d:33:65:e8: 3a:4a:8f:61:61:eb:9f:39:ef:b6:c8:6b:c3:3c:d2:f4:bb:17: ab:cb:58:a1:6d:a4:7b:55:3f:76:25:e4:44:d0:ea:cd:34:eb: df:b6:a5:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNTEyMjkwNjE2MjFaFw0yNjAxMDUwNjE2MjFaMBgxFjAUBgNV BAMMDTY5NTIxY2I1LThjMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjwJSnoZOjktDDtNHZX+aE1MjDnS38cJECjcsj5dMBCiD1ln/1wkGe7Fjp+GbJ PWkQ9MxPcK8ZXT2vfcQ4GScPPSnktMlwYMZjaTW+MNGerHK36bGzS1a3AbcTxBBV lkoUzCsRvFWbfp72SlMkFQ9CisltMBXXqsBjEIqc0jT55TcG4UzmD15nKGIYlDrb D5to4HVKBy73QBsyi3L3SiRHjBDuJ+61tlsiuFVh3UZQjhVFQRK8n0nRkPFv4ynj xlnUvF/5JHpa+IdjCj7hcfxFfhXbl9ciHxtkxN0TOGmje0jdGnYxVL3yh9ll9JTY WBB1C0+SHBs8AeBiTE7Lg+C5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGp2Nx/2A K3oyMMm1Ll0vqrfAMHQwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH dGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOcZzuLmuS/+Mrg4Ag2B0BbMsX0wvBTLy0AnKa3W/xD6OaD1Qc0Qt6P Uv8XcWDPZVAW3/yiesGqMr/twO7Jg3HK67UU/QPOKw2byg84nzg45XBsTm/NsGV4 F7f7NEZpl2d5r988MC+qZsuBqURkcDfCTWmvm2JH3zvqZAdf3lh1bJB9T+oy84FC v4E3xHRISW5g3ggbJbX/PrFMwJiCWVN3yW+RpPEijP2SEfSXbF9UL30hSQqBvWiO a4cZ5nxEiGRaSfR4zEL7Tyb1e+3issUCnISTTTNl6DpKj2Fh658577bIa8M80vS7 F6vLWKFtpHtVP3Yl5ETQ6s0069+2pRY= -----END CERTIFICATE-----Generated at Tue Dec 30 14:19:23 2025 by rpki-client