This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: xCWmAuhzsskJnOCnsOQMfc6siFvWhjHahv1yFS/kMxc= Subject key identifier: 50:A7:EE:C8:DC:F3:A6:8A:63:68:FC:C8:4D:25:D0:1A:C4:61:4E:8E Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 1A Signing time: Fri 19 Dec 2025 06:45:39 +0000 Manifest this update: Fri 19 Dec 2025 06:45:39 +0000 Manifest next update: Fri 26 Dec 2025 06:45:39 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: YHtnyugdLGbqt3jGG0Y7veysxZ2Ib0b8JpwIxrdx4U4=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: yGR2xqnv87rJpxXoRJ5BLEOl4DCEpjBSrdz8OkezYaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Dec 19 06:45:39 2025 GMT Not After : Dec 26 06:45:39 2025 GMT Subject: CN=6944f493-84a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:a2:e4:aa:81:c9:c3:4b:dc:de:f2:60:3a: 12:ce:82:0e:e5:9f:0c:96:59:65:10:ac:0b:6a:8c: 0a:8a:7d:c1:fa:ae:f4:17:c8:21:4d:32:06:60:54: e3:a6:d9:c1:6e:07:78:45:f2:ec:f9:01:b2:23:a5: 75:78:23:ef:1d:d3:51:27:48:e9:87:00:d3:19:63: bc:95:9b:ea:a6:57:9a:f5:19:d4:e5:6e:3d:87:e7: 61:6a:64:d9:bf:89:98:cb:37:65:03:52:ed:2f:74: 9f:20:21:81:f4:16:d1:d0:8e:3e:fa:ed:b7:53:1a: d4:74:6b:7f:2f:23:e9:e3:da:03:34:88:ca:1b:74: cb:af:d3:99:cf:ca:9a:f3:7a:3d:c7:c9:89:f7:59: dc:ee:a0:1d:4b:f1:39:62:62:52:45:9b:66:95:e1: 75:d2:59:7e:d2:66:b2:d2:b2:5e:fa:b7:54:4a:e1: e4:1e:52:8d:78:56:eb:cd:b1:a2:63:85:11:65:e8: a3:8e:05:93:30:05:bf:ea:5d:09:df:ad:84:7b:91: e8:ea:f0:56:a9:c8:84:e8:3e:f1:3a:60:80:03:c5: d3:5c:6a:38:be:94:1f:d0:fb:e6:60:e4:6d:50:82: 96:ed:7e:8a:0d:0e:4f:34:52:fb:a5:bf:d3:2d:4c: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A7:EE:C8:DC:F3:A6:8A:63:68:FC:C8:4D:25:D0:1A:C4:61:4E:8E X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:ca:8c:13:71:00:33:28:fe:7b:10:a7:6b:bd:14:04:f6: 9d:d9:f8:e2:b9:ca:f5:63:20:94:95:bf:b1:a1:93:6d:ad:07: ae:2f:fb:b2:cc:b9:0e:5d:e9:76:95:60:b4:73:ba:d1:ce:47: 1f:a9:41:cf:41:b1:8c:a9:36:2c:19:e9:b5:2e:88:b5:90:54: 2f:96:16:b0:ea:82:d0:90:6b:ce:b2:8a:14:28:86:2d:74:dd: 1f:6e:59:4b:3d:70:22:0b:8d:9a:58:0c:b7:73:77:9e:29:51: 7d:52:ea:59:45:df:a8:df:a9:9e:fd:a6:d9:19:17:cb:61:5b: 72:3c:35:4a:c3:da:f6:19:30:93:82:24:6f:23:9c:67:30:3b: 1f:6b:34:67:94:a1:ce:43:ca:eb:0a:13:99:b2:ae:9b:d9:cc: fc:52:81:c7:ad:c2:5a:2e:56:9f:0f:d2:67:c6:8b:37:4a:ab: 39:5d:68:99:e5:63:f1:e2:84:46:5e:d6:d7:c2:90:ec:c1:27: 11:bf:9e:71:c3:8e:ca:2b:b5:7d:c0:4d:95:58:fa:09:20:54: 65:4b:74:e6:93:61:e2:31:33:93:a7:48:8d:1d:bd:bf:b7:98: 37:27:25:bf:63:a9:c9:0d:c1:b4:ec:4f:c7:ac:13:a9:00:f6: fb:e2:e7:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTEyMTkwNjQ1MzlaFw0yNTEyMjYwNjQ1MzlaMBgxFjAUBgNV BAMMDTY5NDRmNDkzLTg0YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/8qLkqoHJw0vc3vJgOhLOgg7lnwyWWWUQrAtqjAqKfcH6rvQXyCFNMgZgVOOm 2cFuB3hF8uz5AbIjpXV4I+8d01EnSOmHANMZY7yVm+qmV5r1GdTlbj2H52FqZNm/ iZjLN2UDUu0vdJ8gIYH0FtHQjj767bdTGtR0a38vI+nj2gM0iMobdMuv05nPyprz ej3HyYn3WdzuoB1L8TliYlJFm2aV4XXSWX7SZrLSsl76t1RK4eQeUo14VuvNsaJj hRFl6KOOBZMwBb/qXQnfrYR7kejq8FapyIToPvE6YIADxdNcaji+lB/Q++Zg5G1Q gpbtfooNDk80Uvulv9MtTMAjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUKfuyNzz popjaPzITSXQGsRhTo4wHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQ7yowTcQAzKP57EKdrvRQE9p3Z+OK5yvVjIJSVv7Ghk22tB64v+7LM uQ5d6XaVYLRzutHORx+pQc9BsYypNiwZ6bUuiLWQVC+WFrDqgtCQa86yihQohi10 3R9uWUs9cCILjZpYDLdzd54pUX1S6llF36jfqZ79ptkZF8thW3I8NUrD2vYZMJOC JG8jnGcwOx9rNGeUoc5DyusKE5myrpvZzPxSgcetwlouVp8P0mfGizdKqzldaJnl Y/HihEZe1tfCkOzBJxG/nnHDjsortX3ATZVY+gkgVGVLdOaTYeIxM5OnSI0dvb+3 mDcnJb9jqckNwbTsT8esE6kA9vvi50Y= -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:35 2025 by rpki-client