This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: 1tb65+3PKQKLDlEumGGV8RJ58s1pk1jduS+WrsJuWnc= Subject key identifier: 97:46:8E:18:EC:B5:67:93:23:DA:52:93:03:ED:AA:C3:47:FE:1A:38 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 03B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0389 Signing time: Sun 21 Dec 2025 00:10:13 +0000 Manifest this update: Sun 21 Dec 2025 00:10:12 +0000 Manifest next update: Sun 28 Dec 2025 00:10:12 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: B1WneusfB1T3laSJelZ1geVzGWXLqSYOaUscMCS4/zs=) 2: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=) 3: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=) 4: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Dec 21 00:10:12 2025 GMT Not After : Dec 28 00:10:12 2025 GMT Subject: CN=69473ae5-6380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:b2:7e:65:17:2e:52:61:23:f9:bb:d6:be: b2:6c:6e:af:be:21:dc:5b:26:ac:74:89:b9:e0:88: c3:13:9f:8d:64:2d:05:24:7b:00:3c:39:ae:af:9a: 0d:28:ec:15:22:c9:c3:0e:c7:8b:07:5c:4e:cd:b3: cd:90:44:6f:a0:08:2f:d7:75:73:da:57:36:27:94: 37:b5:14:68:b1:57:6a:c2:33:6e:64:ce:24:4a:7e: 23:31:39:5e:53:68:c2:01:2e:a2:a6:e5:b8:31:03: a5:f7:00:d8:95:52:71:d2:ac:8f:55:a7:98:2a:38: d8:77:ec:38:2b:c1:2f:df:01:12:c6:d9:28:44:63: 7c:cc:39:d8:83:c7:8b:19:76:95:fb:b9:ee:d8:d4: da:0f:9c:dc:3a:7c:0b:1c:1b:56:35:cc:8c:42:9e: e9:c8:69:eb:7a:b1:3e:35:a1:f8:26:9b:aa:5b:48: 4b:5e:bb:a5:22:20:bd:49:76:fa:82:e7:ce:cc:ad: f7:74:b9:cd:86:14:71:4f:be:7c:7a:56:19:16:b6: 1a:36:37:73:fd:c1:0f:60:ae:7e:80:6a:25:05:72: 27:73:85:75:1b:be:c6:42:e0:af:51:b7:9f:a0:9e: 10:b0:26:fa:5c:f4:e4:19:07:cc:e4:d2:80:5b:8d: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:8E:18:EC:B5:67:93:23:DA:52:93:03:ED:AA:C3:47:FE:1A:38 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:dc:f8:40:62:50:d0:df:ba:6c:0a:3e:bc:7c:4c:2f:3e:00: 19:6e:f2:e6:5f:be:04:e9:9a:f5:b0:ee:e5:9b:f9:8a:0b:85: 08:8e:c7:05:b2:eb:ff:6a:89:16:61:1e:41:46:a5:41:44:2e: b9:cf:71:20:55:c3:be:61:8d:a2:98:2a:12:9c:8f:f1:be:e6: da:ae:cc:30:eb:81:2a:9b:12:78:b4:80:c5:15:b5:44:a8:61: e8:61:c7:35:95:e1:01:25:26:8e:7f:c9:ab:42:36:48:f9:72: e7:6e:83:90:25:16:4c:1f:11:79:fa:1e:aa:69:21:b1:db:68: d3:21:22:ec:1a:38:da:21:13:62:77:61:d8:53:ac:ae:7d:d3: b9:5d:cd:34:b0:56:78:a2:83:9e:4a:cf:a0:7e:de:b5:e6:a9: 7a:1f:29:f9:86:d7:57:63:72:82:f1:73:14:b9:7e:e0:7a:e8: 10:f0:c5:31:4c:e2:b5:6c:60:45:fd:bb:c0:26:3b:07:4a:84: bd:91:35:ca:63:53:a1:ac:98:71:5c:68:1b:1c:15:77:5e:0f: 74:f8:0b:da:cf:fd:e3:12:7e:dc:b3:56:ec:b0:3a:4b:de:60: 77:8d:bf:6f:ec:25:2e:51:d1:ef:f6:2c:af:3b:96:fa:bc:25: b2:48:64:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUxMjIxMDAxMDEyWhcNMjUxMjI4MDAxMDEyWjAYMRYwFAYD VQQDDA02OTQ3M2FlNS02MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JOyfmUXLlJhI/m71r6ybG6vviHcWyasdIm54IjDE5+NZC0FJHsAPDmur5oN KOwVIsnDDseLB1xOzbPNkERvoAgv13Vz2lc2J5Q3tRRosVdqwjNuZM4kSn4jMTle U2jCAS6ipuW4MQOl9wDYlVJx0qyPVaeYKjjYd+w4K8Ev3wESxtkoRGN8zDnYg8eL GXaV+7nu2NTaD5zcOnwLHBtWNcyMQp7pyGnrerE+NaH4JpuqW0hLXrulIiC9SXb6 gufOzK33dLnNhhRxT758elYZFrYaNjdz/cEPYK5+gGolBXInc4V1G77GQuCvUbef oJ4QsCb6XPTkGQfM5NKAW409BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdGjhjs tWeTI9pSkwPtqsNH/ho4MB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ3PhAYlDQ37psCj68fEwvPgAZbvLmX74E6Zr1sO7lm/mKC4UIjscF suv/aokWYR5BRqVBRC65z3EgVcO+YY2imCoSnI/xvubarsww64EqmxJ4tIDFFbVE qGHoYcc1leEBJSaOf8mrQjZI+XLnboOQJRZMHxF5+h6qaSGx22jTISLsGjjaIRNi d2HYU6yufdO5Xc00sFZ4ooOeSs+gft615ql6Hyn5htdXY3KC8XMUuX7geugQ8MUx TOK1bGBF/bvAJjsHSoS9kTXKY1OhrJhxXGgbHBV3Xg90+Avaz/3jEn7cs1bssDpL 3mB3jb9v7CUuUdHv9iyvO5b6vCWySGQX -----END CERTIFICATE-----Generated at Sun Dec 21 09:55:43 2025 by rpki-client