This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: SCA2nTcaZAMGBaGZ/3t1HHFS2iW2PonwPpyVG5xr+HY= Subject key identifier: AB:76:3B:8F:7A:00:31:0E:36:BB:C6:71:67:44:21:63:95:3D:E4:FB Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: FC Signing time: Fri 19 Dec 2025 04:21:02 +0000 Manifest this update: Fri 19 Dec 2025 04:21:01 +0000 Manifest next update: Fri 26 Dec 2025 04:21:01 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: 9qmT4rhv6DcVYUZkntQdWpi1bwgy+DActWoJGC9vLjc=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Dec 19 04:21:01 2025 GMT Not After : Dec 26 04:21:01 2025 GMT Subject: CN=6944d2ae-6084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:cf:48:a2:8f:37:7a:6e:bf:68:4c:f0:2f: f9:77:80:94:e3:ad:e3:a7:1e:2f:f6:b9:6b:38:03: 7a:d0:33:51:cd:49:e7:01:9b:c4:c6:15:b9:7f:a7: 33:c8:dc:bf:7d:4d:d3:10:94:7f:90:b9:c4:7c:be: e0:d2:e0:c4:55:a8:64:c4:7a:28:93:0f:00:cd:9a: ce:c2:ef:a0:af:ae:62:49:31:c3:95:2f:ec:15:d2: 39:b8:ab:d7:fa:9d:a0:30:19:d5:1c:c3:44:4a:5a: 09:25:6b:07:19:96:af:dd:4e:a9:e7:b6:b4:bd:d5: 39:05:73:00:5e:94:12:23:18:62:8c:21:aa:eb:73: 50:b8:fd:3a:de:39:bb:70:86:34:78:4a:48:0c:6e: 58:d0:15:5a:21:d2:ee:f9:97:4d:64:7c:1b:b7:0f: 9e:31:94:36:e3:67:15:33:f9:db:37:c3:ff:43:f2: 42:1b:b8:93:7c:5d:a0:e4:6b:fb:4c:f7:b2:17:d2: eb:92:40:6d:83:26:1e:37:c3:8d:5c:d8:94:60:d5: 18:91:00:11:54:54:53:d4:98:cc:93:b5:0a:8f:ca: 5d:96:5c:00:c2:2c:c3:30:06:23:9b:99:83:65:b4: 47:c4:d1:bc:72:39:80:80:63:ec:0d:e5:8f:fe:d1: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:76:3B:8F:7A:00:31:0E:36:BB:C6:71:67:44:21:63:95:3D:E4:FB X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:31:df:17:41:63:0a:6c:9d:e5:29:a1:ad:c5:11:86:b6:7c: 15:a4:86:df:8f:05:43:80:9d:72:dd:ea:7e:be:c5:6c:69:90: 5f:05:ca:73:94:05:27:aa:cb:c2:bd:74:2e:39:76:d0:56:2f: 9d:fd:af:59:63:3d:ba:55:ef:6c:fb:26:b7:01:a0:b1:1b:e8: 3d:96:a1:17:57:6c:1c:38:66:c0:66:66:50:bb:46:89:88:9e: 9f:b3:85:f2:4e:a4:98:b7:1a:ce:60:45:fd:ea:b5:4d:40:2b: 73:af:65:25:0a:60:0f:0b:a3:fa:6d:06:1e:29:7b:9e:7a:2e: a9:44:41:59:ba:1e:35:79:66:35:f2:9c:15:03:2f:4a:f1:e1: d0:4f:ea:a0:29:3b:70:98:c1:c9:f8:9b:b8:a3:e3:3a:98:38: 74:89:d5:a9:b7:41:d7:f4:be:ce:e3:39:c0:12:8e:ef:7b:4a: 07:8c:b4:e2:64:92:bb:cd:0d:cd:7c:1d:80:24:dd:6e:69:9e: 06:ee:b3:c5:3c:25:75:0b:1a:d9:2d:f2:a2:f9:39:2e:9e:48: 77:98:b6:f4:2e:d8:b2:20:b5:ce:9d:6a:ba:87:ed:b8:84:a3: 5a:49:15:68:3a:bf:6f:13:22:91:8a:cf:34:30:28:93:be:fa: dd:d7:48:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUxMjE5MDQyMTAxWhcNMjUxMjI2MDQyMTAxWjAYMRYwFAYD VQQDDA02OTQ0ZDJhZS02MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5XPSKKPN3puv2hM8C/5d4CU463jpx4v9rlrOAN60DNRzUnnAZvExhW5f6cz yNy/fU3TEJR/kLnEfL7g0uDEVahkxHookw8AzZrOwu+gr65iSTHDlS/sFdI5uKvX +p2gMBnVHMNESloJJWsHGZav3U6p57a0vdU5BXMAXpQSIxhijCGq63NQuP063jm7 cIY0eEpIDG5Y0BVaIdLu+ZdNZHwbtw+eMZQ242cVM/nbN8P/Q/JCG7iTfF2g5Gv7 TPeyF9LrkkBtgyYeN8ONXNiUYNUYkQARVFRT1JjMk7UKj8pdllwAwizDMAYjm5mD ZbRHxNG8cjmAgGPsDeWP/tGmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt2O496 ADEONrvGcWdEIWOVPeT7MB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqMd8XQWMKbJ3lKaGtxRGGtnwVpIbfjwVDgJ1y3ep+vsVsaZBfBcpz lAUnqsvCvXQuOXbQVi+d/a9ZYz26Ve9s+ya3AaCxG+g9lqEXV2wcOGbAZmZQu0aJ iJ6fs4XyTqSYtxrOYEX96rVNQCtzr2UlCmAPC6P6bQYeKXueei6pREFZuh41eWY1 8pwVAy9K8eHQT+qgKTtwmMHJ+Ju4o+M6mDh0idWpt0HX9L7O4znAEo7ve0oHjLTi ZJK7zQ3NfB2AJN1uaZ4G7rPFPCV1CxrZLfKi+Tkunkh3mLb0LtiyILXOnWq6h+24 hKNaSRVoOr9vEyKRis80MCiTvvrd10is -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:51 2025 by rpki-client