This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: aP8dQLFFUvqtH2rE6x+4FGpmpshBX/qMNyVo1UgFYdk= Subject key identifier: C0:C1:2C:B0:19:15:DB:F0:31:7B:D0:5B:93:81:00:6D:71:24:E0:54 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0B19 Signing time: Thu 18 Dec 2025 19:01:00 +0000 Manifest this update: Thu 18 Dec 2025 19:00:59 +0000 Manifest next update: Thu 25 Dec 2025 19:00:59 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: /baePEIWuepphCP3cUrEEVAOyPE1ZP4gaS7CUNWRtl4=) 2: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) 3: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Dec 18 19:00:59 2025 GMT Not After : Dec 25 19:00:59 2025 GMT Subject: CN=69444f6c-4f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:7c:f3:d9:f7:b9:c6:2d:da:32:28:26:95: 5c:d4:56:7e:95:79:f0:8a:72:0c:37:8d:ef:dc:c9: 01:c4:f1:57:c0:a3:dc:be:7b:7a:96:c0:45:83:bc: de:78:af:b8:f9:c0:1b:c1:8a:2f:70:4e:de:d9:b9: 69:f6:2d:e8:ae:4e:5c:bd:8e:79:0e:14:d8:0e:c1: 1f:4a:6e:78:7e:79:66:4a:58:bd:c7:cc:93:85:ae: 53:58:58:22:86:4f:c4:51:0f:40:12:be:29:97:0c: 99:a4:34:ab:1d:78:16:75:2e:91:8d:59:80:a8:a0: ce:b6:92:68:a3:6a:aa:31:9b:bf:17:b3:85:af:82: 60:89:c5:26:56:34:b3:a1:42:b2:8b:87:7c:56:76: b4:37:48:2a:91:2f:27:5d:79:11:7a:c1:a2:b1:02: 6e:09:a5:86:ec:65:84:1b:99:1a:e2:9c:0e:4e:eb: 74:bb:40:a0:f3:7a:64:c5:0c:57:c0:b5:9e:a7:ae: 8a:08:80:67:2c:52:ff:b3:fa:9a:65:73:59:3e:ea: 0f:6f:09:b3:3f:18:77:db:1e:53:f3:45:7f:d8:2a: 27:c6:23:08:c5:c3:df:8b:f2:8a:5f:d9:dd:a2:fe: 71:de:65:30:ba:08:45:23:24:49:fd:05:8f:2c:89: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:2C:B0:19:15:DB:F0:31:7B:D0:5B:93:81:00:6D:71:24:E0:54 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d3:d0:38:cd:cf:3a:6f:98:df:b5:e4:48:39:3a:e0:2d:a6: 75:88:36:50:5f:c9:28:b3:d2:6e:a4:1b:70:20:af:6a:ea:46: 98:3e:07:d2:5a:e1:79:10:cd:0d:9e:8a:44:87:4b:0f:84:78: 89:bd:12:fc:5a:b7:dd:1c:03:53:c7:b4:4a:36:ed:b1:b1:7d: ed:d6:00:27:d5:f9:9a:2f:b7:cd:03:5c:17:c9:58:2e:b0:5a: ef:5c:3e:1e:31:cd:ae:47:30:26:04:94:88:6e:19:fa:bc:8e: 8a:7d:bc:91:66:d6:6b:92:95:96:b3:bc:08:fa:ad:8d:85:30: 4d:a2:45:76:12:e6:8f:b0:ff:c8:9b:6f:7f:73:e8:89:84:fe: b4:ea:22:11:1a:08:b6:e3:ea:d8:3c:38:0b:a7:f8:4a:3f:5e: 81:e3:f3:b0:24:cd:36:81:57:09:63:ed:02:2a:38:f1:be:17: 90:81:f9:d8:2f:21:62:ac:a8:45:66:ef:8d:c4:e7:9b:60:8e: 86:b7:e4:8c:61:1e:7f:4c:34:c1:4d:0a:6f:7f:05:ea:70:50: 7a:68:41:c3:87:bb:b3:4f:68:f7:79:12:84:4f:0b:b1:d4:3b: d2:c0:ec:d0:89:9f:ca:18:d1:07:6d:9d:b2:12:2f:6d:54:b1: 9a:49:ae:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUxMjE4MTkwMDU5WhcNMjUxMjI1MTkwMDU5WjAYMRYwFAYD VQQDDA02OTQ0NGY2Yy00ZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLF889n3ucYt2jIoJpVc1FZ+lXnwinIMN43v3MkBxPFXwKPcvnt6lsBFg7ze eK+4+cAbwYovcE7e2blp9i3ork5cvY55DhTYDsEfSm54fnlmSli9x8yTha5TWFgi hk/EUQ9AEr4plwyZpDSrHXgWdS6RjVmAqKDOtpJoo2qqMZu/F7OFr4JgicUmVjSz oUKyi4d8Vna0N0gqkS8nXXkResGisQJuCaWG7GWEG5ka4pwOTut0u0Cg83pkxQxX wLWep66KCIBnLFL/s/qaZXNZPuoPbwmzPxh32x5T80V/2ConxiMIxcPfi/KKX9nd ov5x3mUwughFIyRJ/QWPLIn8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDBLLAZ FdvwMXvQW5OBAG1xJOBUMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN09A4zc86b5jfteRIOTrgLaZ1iDZQX8kos9JupBtwIK9q6kaYPgfS WuF5EM0NnopEh0sPhHiJvRL8WrfdHANTx7RKNu2xsX3t1gAn1fmaL7fNA1wXyVgu sFrvXD4eMc2uRzAmBJSIbhn6vI6KfbyRZtZrkpWWs7wI+q2NhTBNokV2EuaPsP/I m29/c+iJhP606iIRGgi24+rYPDgLp/hKP16B4/OwJM02gVcJY+0CKjjxvheQgfnY LyFirKhFZu+NxOebYI6Gt+SMYR5/TDTBTQpvfwXqcFB6aEHDh7uzT2j3eRKETwux 1DvSwOzQiZ/KGNEHbZ2yEi9tVLGaSa5U -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:55 2025 by rpki-client