This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: oeRrHgrKLPrGJUxkWBLhxetLbpeq+2osX1tddqpSy34= Subject key identifier: B5:E2:3F:8A:66:22:5C:10:DF:81:BA:E6:B5:D6:C2:EE:71:43:84:72 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0FA9 Signing time: Sun 28 Dec 2025 20:35:31 +0000 Manifest this update: Sun 28 Dec 2025 20:35:31 +0000 Manifest next update: Sun 04 Jan 2026 20:35:31 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: 9rh67Ss0cD933jnG9m9Y7jY6fPiy1iI1zbpFjN94VfU=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: EUTRK8zTZimnCog0ijkhm9FDi0k0sx3nv6s5rDsc3FM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 20:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Dec 28 20:35:31 2025 GMT Not After : Jan 4 20:35:31 2026 GMT Subject: CN=69519493-3d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:24:24:73:6f:35:2e:04:cc:21:b4:db:1d: 5e:44:da:65:b9:b3:8c:a4:a4:29:bc:86:15:0f:f2: 62:35:16:08:c7:77:5c:d7:f5:17:4e:ad:15:d0:01: 50:35:e8:60:6a:11:b6:41:86:ee:05:6c:fd:eb:98: e1:c4:b0:dc:f1:80:27:0b:4c:47:4d:be:b6:bc:75: 1f:89:e5:e1:00:2d:04:fa:7a:cb:eb:63:52:85:e0: c1:f5:36:87:35:44:db:c9:44:ab:1d:a3:39:5a:1a: b5:50:fe:b9:fb:9c:8a:8f:33:a4:5a:38:81:5b:b5: a7:0a:e2:52:87:3a:40:65:63:51:a6:ce:42:a6:27: 4b:f0:f8:e0:da:f9:16:4e:57:ee:a2:08:93:96:02: 21:42:e2:d0:89:e6:0c:78:4a:9e:43:94:56:82:2e: 4e:52:ff:de:dc:3a:0f:21:36:c7:13:7f:00:89:41: cb:c1:e8:10:d4:35:ab:f4:63:90:3d:0e:10:26:6b: 99:0e:b6:f8:bc:cf:5e:34:e2:e3:28:0c:da:60:f1: a6:c3:a2:3e:54:13:96:fe:2c:cf:47:0a:f7:51:da: fd:c2:28:0f:72:59:40:07:63:de:d7:1d:bd:c7:39: 32:81:3b:de:33:a3:3b:8b:be:8b:44:52:ba:35:25: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E2:3F:8A:66:22:5C:10:DF:81:BA:E6:B5:D6:C2:EE:71:43:84:72 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:40:55:23:76:4e:55:c3:26:bf:05:c6:13:aa:41:84:b2:79: b2:84:b7:f6:37:43:c0:f6:0a:8e:04:b3:14:95:3c:4e:81:b6: a0:0b:e4:7c:40:55:d3:89:62:d3:b6:8f:7b:97:8e:04:bf:9e: 89:ca:87:e9:cf:93:b1:9f:54:e3:b6:c4:6f:64:cc:31:73:62: 03:aa:5c:f7:2a:6b:9b:56:8f:2d:94:54:5c:98:74:2e:31:19: df:8b:2f:d3:1a:7c:04:1f:d3:4a:94:15:db:52:7a:83:24:63: b0:a0:e4:8b:57:3a:8f:a3:f1:33:8c:cf:cd:5a:de:f2:31:17: 3f:5c:97:03:db:02:eb:5b:20:0e:46:b4:28:79:91:75:09:42: 25:23:66:ef:2a:6a:bf:64:75:3e:cc:53:41:02:1c:62:be:60: 60:d7:3b:dc:8a:b1:5f:94:a3:b6:c9:51:8c:d8:40:e5:73:2a: 3a:da:3d:0e:2e:56:78:26:68:c3:3f:2b:5a:cc:17:8d:70:95: d5:1d:57:dd:53:09:ef:08:af:40:23:1a:0b:93:30:e6:7a:71: 65:e8:15:e6:86:6d:11:c9:86:48:07:48:81:19:fe:81:1f:c7: 32:db:39:ff:fd:a8:be:8e:52:50:a5:e9:6a:29:69:6d:2f:3e: 4e:bc:51:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUxMjI4MjAzNTMxWhcNMjYwMTA0MjAzNTMxWjAYMRYwFAYD VQQDDA02OTUxOTQ5My0zZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv8kJHNvNS4EzCG02x1eRNplubOMpKQpvIYVD/JiNRYIx3dc1/UXTq0V0AFQ NehgahG2QYbuBWz965jhxLDc8YAnC0xHTb62vHUfieXhAC0E+nrL62NSheDB9TaH NUTbyUSrHaM5Whq1UP65+5yKjzOkWjiBW7WnCuJShzpAZWNRps5CpidL8Pjg2vkW TlfuogiTlgIhQuLQieYMeEqeQ5RWgi5OUv/e3DoPITbHE38AiUHLwegQ1DWr9GOQ PQ4QJmuZDrb4vM9eNOLjKAzaYPGmw6I+VBOW/izPRwr3Udr9wigPcllAB2Pe1x29 xzkygTveM6M7i76LRFK6NSWUdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXiP4pm IlwQ34G65rXWwu5xQ4RyMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaQFUjdk5Vwya/BcYTqkGEsnmyhLf2N0PA9gqOBLMUlTxOgbagC+R8 QFXTiWLTto97l44Ev56Jyofpz5Oxn1TjtsRvZMwxc2IDqlz3KmubVo8tlFRcmHQu MRnfiy/TGnwEH9NKlBXbUnqDJGOwoOSLVzqPo/EzjM/NWt7yMRc/XJcD2wLrWyAO RrQoeZF1CUIlI2bvKmq/ZHU+zFNBAhxivmBg1zvcirFflKO2yVGM2EDlcyo62j0O LlZ4JmjDPytazBeNcJXVHVfdUwnvCK9AIxoLkzDmenFl6BXmhm0RyYZIB0iBGf6B H8cy2zn//ai+jlJQpelqKWltLz5OvFEm -----END CERTIFICATE-----Generated at Mon Dec 29 12:28:16 2025 by rpki-client