This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json) Hash identifier: BNIa2G/DHfObcPvxMEmMAnOlI0xpbCdRjQ1dBwEKf2c= Subject key identifier: 2A:B5:12:51:1F:43:76:BD:09:65:AE:52:6E:58:06:75:64:93:BA:18 Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft Manifest number: 0190 Signing time: Sun 21 Dec 2025 02:49:24 +0000 Manifest this update: Sun 21 Dec 2025 02:49:24 +0000 Manifest next update: Sun 28 Dec 2025 02:49:24 +0000 Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: Nw/aqKednQQ7a+TgmzZFV9YytMSv1u2SZWxymFVrkP8=) 2: 289652667B7511F0A2592A6EC4F9AE02.roa (hash: 74iex85dEjMYqsMC503dPAfze/x+8hBe6o6Qy42zmTM=) 3: CEA08B0A7B7411F0B30B5E4FC4F9AE02.roa (hash: C44/AtE3Ze2iBhnia/62NjBLNjDmkSHhne0xCs9WJQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Validity Not Before: Dec 21 02:49:24 2025 GMT Not After : Dec 28 02:49:24 2025 GMT Subject: CN=69476034-cd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:5a:59:2e:29:9c:d5:13:8b:ed:b4:e0:87: bc:8b:e0:bf:61:10:50:51:79:c0:e6:88:5c:fa:fb: 46:f1:e1:5b:3a:93:87:5a:1c:6d:7c:62:e7:27:9a: b7:d9:f0:e0:6e:c7:66:ca:4d:ed:21:e9:f3:2c:54: 7f:8d:1a:6e:fb:e8:09:c8:5a:9d:64:02:2c:81:f0: 07:01:8d:2f:ca:ce:83:bc:ee:72:3e:0c:6e:ab:5f: a7:7e:a7:55:58:8a:68:4d:5e:3a:4f:bc:bb:bd:a7: d3:74:05:80:c2:50:e3:bd:e1:2d:6f:98:9c:c2:c7: 85:ba:c2:64:2a:65:5a:d1:8f:8f:38:0e:e9:fc:af: 9e:a3:00:eb:21:cd:76:2f:da:89:2c:81:a8:cb:c9: 92:75:a1:fd:22:27:51:86:8c:33:e8:4f:e6:15:4b: 16:44:19:b9:2c:2d:8b:ae:6f:63:6d:60:7c:1b:9f: 95:57:9f:d3:1e:21:17:37:8d:78:96:a2:84:cf:d6: fc:ba:7d:67:bf:7d:10:47:04:87:ee:2c:ff:60:68: ae:36:3b:47:04:8f:81:35:72:12:0a:f9:24:ff:4b: 6b:e6:7a:2d:22:09:9d:89:3b:7b:78:83:db:61:02: 39:c7:ae:e4:18:54:39:63:d7:81:b6:69:1f:e5:e4: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B5:12:51:1F:43:76:BD:09:65:AE:52:6E:58:06:75:64:93:BA:18 X509v3 Authority Key Identifier: keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5b:47:38:d2:cc:92:7b:7a:b0:84:33:d7:ed:95:43:86:3b: 86:80:4f:c2:12:5f:01:dd:a1:4b:ee:40:c7:6d:90:b1:13:5d: 7d:b5:85:c3:45:9d:fe:6e:22:b0:14:68:b4:aa:cf:5d:7f:d0: c9:3b:a5:ef:bf:51:52:ff:1d:f1:e9:6d:35:31:e1:4d:7f:8d: dd:8e:7b:03:de:fb:11:cd:d8:57:fb:ea:ed:b9:82:74:3c:14: b3:2b:79:b3:a8:2a:4c:44:8c:fe:f3:77:42:36:20:cf:4e:64: 50:71:59:fa:91:55:bc:2c:db:fe:ef:27:cc:3b:25:c8:01:5e: 53:c3:09:51:aa:76:5f:0a:35:09:da:11:64:da:a9:31:c9:46: 13:e9:1f:44:99:8f:76:53:07:47:8a:1a:8e:86:7e:34:34:d6: 5d:55:2e:20:6c:eb:09:ec:2d:c7:a3:46:5d:52:48:f4:a5:e0: 9e:2e:fc:1c:39:e5:66:61:76:bf:98:6c:c5:bb:62:53:3a:1a: ca:e8:36:74:ac:67:bf:d3:59:20:ea:5c:9b:59:32:a8:68:e9: 54:0b:c1:51:f5:ac:a7:d8:42:64:9f:9f:ec:e9:e3:c7:9f:5c: 91:71:4e:3b:b7:af:c3:5e:b1:61:23:19:4b:b5:d6:95:76:3c: b1:50:a9:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjIxMTAvBgNVBAUTKDdDRDk1OEEwMDdGNEYwRTU2RTRBOEQyNDU3NjY4ODYy MkJBQjcyMjEwHhcNMjUxMjIxMDI0OTI0WhcNMjUxMjI4MDI0OTI0WjAYMRYwFAYD VQQDDA02OTQ3NjAzNC1jZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQhaWS4pnNUTi+204Ie8i+C/YRBQUXnA5ohc+vtG8eFbOpOHWhxtfGLnJ5q3 2fDgbsdmyk3tIenzLFR/jRpu++gJyFqdZAIsgfAHAY0vys6DvO5yPgxuq1+nfqdV WIpoTV46T7y7vafTdAWAwlDjveEtb5icwseFusJkKmVa0Y+POA7p/K+eowDrIc12 L9qJLIGoy8mSdaH9IidRhowz6E/mFUsWRBm5LC2Lrm9jbWB8G5+VV5/THiEXN414 lqKEz9b8un1nv30QRwSH7iz/YGiuNjtHBI+BNXISCvkk/0tr5notIgmdiTt7eIPb YQI5x67kGFQ5Y9eBtmkf5eQbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq1ElEf Q3a9CWWuUm5YBnVkk7oYMB8GA1UdIwQYMBaAFHzZWKAH9PDlbkqNJFdmiGIrq3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGMi81NzMyQzgzODg0 NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhPVnVTbzBrVjJhSVlpdXJj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZObFlvQWYwOE9WdVNvMGtWMmFJWWl1cmNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGMi81NzMyQzgzODg0NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhP VnVTbzBrVjJhSVlpdXJjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFW0c40sySe3qwhDPX7ZVDhjuGgE/CEl8B3aFL7kDHbZCxE119tYXD RZ3+biKwFGi0qs9df9DJO6Xvv1FS/x3x6W01MeFNf43djnsD3vsRzdhX++rtuYJ0 PBSzK3mzqCpMRIz+83dCNiDPTmRQcVn6kVW8LNv+7yfMOyXIAV5TwwlRqnZfCjUJ 2hFk2qkxyUYT6R9EmY92UwdHihqOhn40NNZdVS4gbOsJ7C3Ho0ZdUkj0peCeLvwc OeVmYXa/mGzFu2JTOhrK6DZ0rGe/01kg6lybWTKoaOlUC8FR9ayn2EJkn5/s6ePH n1yRcU47t6/DXrFhIxlLtdaVdjyxUKl9 -----END CERTIFICATE-----Generated at Sun Dec 21 15:04:47 2025 by rpki-client