This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: p1alFFK2/7sF8GOzBhsk/K9nme2pxSOCHFv5GwQ5LZE= Subject key identifier: DD:3B:FC:29:07:7B:07:0F:E2:83:48:5E:D3:89:ED:B2:6B:A7:C8:15 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 58 Signing time: Sun 21 Dec 2025 06:12:14 +0000 Manifest this update: Sun 21 Dec 2025 06:12:13 +0000 Manifest next update: Sun 28 Dec 2025 06:12:13 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: V8jTehX+yHsZ4tl/JRPVXTxXYBF67X1eOyNWVwwgebo=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Dec 21 06:12:13 2025 GMT Not After : Dec 28 06:12:13 2025 GMT Subject: CN=69478fbe-44f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:b2:91:24:15:f9:e4:ec:1a:7a:7a:07:0f: b0:db:ff:47:48:20:16:cc:b4:f0:1f:4f:60:2f:3b: de:a1:6d:a4:cb:f9:b8:48:2a:36:78:1d:72:99:74: d1:c2:ae:d4:1b:c1:99:8b:69:ed:b8:ee:23:72:f8: 86:ef:62:59:b0:cc:89:2e:69:6a:57:34:4d:d6:37: 66:c2:ea:21:7e:74:5a:27:8e:0c:91:b5:4d:a5:b6: da:40:35:d7:bc:1c:29:2d:5c:35:39:ef:96:77:0c: 8c:0e:db:e4:f8:4a:8e:56:c6:5f:aa:fc:7b:89:d9: 8e:ae:24:05:02:59:4e:0e:57:6d:03:17:cc:d2:7e: 2d:c3:23:a7:4b:c2:11:6a:27:ba:80:d4:f1:59:a0: c3:d7:07:87:5a:aa:98:0d:cc:be:99:7b:92:e1:5d: b9:a9:07:67:9d:88:d1:90:d5:f5:42:55:27:42:2a: ba:cd:d3:e2:91:6f:bf:92:37:8c:58:5c:a2:9f:e5: ea:e4:05:91:aa:d5:49:1a:af:3d:28:f3:1f:65:36: dc:ef:d3:35:4f:17:33:19:da:14:00:a7:2b:8b:f8: 8c:26:6b:9f:61:c1:f2:b6:cc:df:d8:02:1b:81:e3: 0c:97:4d:df:b6:3d:2e:55:8d:93:38:e0:bf:88:6c: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3B:FC:29:07:7B:07:0F:E2:83:48:5E:D3:89:ED:B2:6B:A7:C8:15 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:37:8e:c7:3c:af:04:9e:39:27:79:a2:8f:48:2a:89:50:e1: 9a:69:c5:2c:0a:7c:f1:c9:3d:a6:08:37:ca:cc:54:b6:8d:e9: 7f:f8:7b:e3:09:c8:c7:50:9e:97:ee:48:0e:fa:53:d5:ac:c4: fb:1b:56:19:6c:f4:f3:4a:d1:69:44:76:2a:54:b4:28:fc:ee: 3a:8f:02:ed:1b:b4:10:5c:de:b6:12:20:55:2a:a4:ca:71:78: 34:24:a3:fc:ad:85:ba:3f:67:58:55:38:ee:a8:08:b2:c6:a3: 87:1f:40:90:99:0b:7c:4d:f3:3c:4a:1d:0f:8f:86:05:26:0f: 22:2a:af:04:7f:c5:53:d4:e4:92:15:ed:57:bd:7e:d5:e0:b6: 19:d2:4f:96:2c:fb:e8:6e:85:28:94:27:04:9f:02:41:b8:c6: 0c:18:a7:d3:00:70:e4:1a:69:77:f1:6c:21:68:f1:4d:cb:84: c3:90:99:ae:fc:c6:b4:ab:41:99:5f:29:e3:1c:4d:d3:59:43: d2:d9:0d:e8:3b:8d:62:06:af:fc:7f:1e:9e:80:04:8a:8e:1e: a9:f9:12:85:d2:b2:99:22:98:9c:32:30:3f:88:4c:99:e4:31: df:87:f6:88:c2:0e:56:ee:2a:e5:bb:3c:4e:b0:07:97:db:0f: 37:03:54:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTEyMjEwNjEyMTNaFw0yNTEyMjgwNjEyMTNaMBgxFjAUBgNV BAMMDTY5NDc4ZmJlLTQ0ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjgLKRJBX55OwaenoHD7Db/0dIIBbMtPAfT2AvO96hbaTL+bhIKjZ4HXKZdNHC rtQbwZmLae247iNy+IbvYlmwzIkuaWpXNE3WN2bC6iF+dFonjgyRtU2lttpANde8 HCktXDU575Z3DIwO2+T4So5Wxl+q/HuJ2Y6uJAUCWU4OV20DF8zSfi3DI6dLwhFq J7qA1PFZoMPXB4daqpgNzL6Ze5LhXbmpB2ediNGQ1fVCVSdCKrrN0+KRb7+SN4xY XKKf5erkBZGq1Ukarz0o8x9lNtzv0zVPFzMZ2hQApyuL+Iwma59hwfK2zN/YAhuB 4wyXTd+2PS5VjZM44L+IbP1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3Tv8KQd7 Bw/ig0he04ntsmunyBUwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG43jsc8rwSeOSd5oo9IKolQ4ZppxSwKfPHJPaYIN8rMVLaN6X/4e+MJ yMdQnpfuSA76U9WsxPsbVhls9PNK0WlEdipUtCj87jqPAu0btBBc3rYSIFUqpMpx eDQko/ythbo/Z1hVOO6oCLLGo4cfQJCZC3xN8zxKHQ+PhgUmDyIqrwR/xVPU5JIV 7Ve9ftXgthnST5Ys++huhSiUJwSfAkG4xgwYp9MAcOQaaXfxbCFo8U3LhMOQma78 xrSrQZlfKeMcTdNZQ9LZDeg7jWIGr/x/Hp6ABIqOHqn5EoXSspkimJwyMD+ITJnk Md+H9ojCDlbuKuW7PE6wB5fbDzcDVPA= -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:43 2025 by rpki-client