This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft File: 0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json) Hash identifier: xnPMvwDF9qFcI6uct+0c2mJMSYBsGb2Nxmbzyvi/qPs= Subject key identifier: 29:05:B9:EC:50:8D:B9:44:F9:EE:34:2F:A2:4B:37:D8:59:AD:C3:F8 Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 Certificate issuer: /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft Manifest number: 0658 Signing time: Thu 18 Dec 2025 21:58:19 +0000 Manifest this update: Thu 18 Dec 2025 21:58:18 +0000 Manifest next update: Thu 25 Dec 2025 21:58:18 +0000 Files and hashes: 1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: LK+PvnT/MIcDO/ssjpR/uD+zsSg7SDGtX4kaXi6FUgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Validity Not Before: Dec 18 21:58:18 2025 GMT Not After : Dec 25 21:58:18 2025 GMT Subject: CN=694478fa-32a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:87:bf:e8:a7:61:8b:df:15:34:3b:d0:a0: 6c:a0:11:24:72:b3:af:1c:fb:45:3b:cf:d3:bd:7e: e5:79:0d:10:66:9e:ca:00:ad:25:a5:43:5e:9c:6a: 3c:08:7a:b6:71:27:40:cb:03:86:c4:e0:a5:8a:ca: 96:09:a0:c0:dd:fe:0a:4a:74:dd:47:54:2b:90:00: 65:78:8c:9b:a3:10:1f:04:82:2f:d4:23:9e:ea:9b: 3e:15:4f:d5:03:c9:18:ef:5e:31:35:81:56:d0:65: 25:bf:81:46:32:e2:8b:8d:f6:d5:a5:07:77:43:2e: a8:aa:99:1d:01:d1:77:80:6f:37:e2:4b:c2:6e:88: cd:c3:e8:85:15:db:2c:4f:31:43:28:98:27:f8:50: c6:f8:39:5b:21:bc:d4:23:b1:d1:00:b4:21:dc:d7: 11:31:75:91:9a:8f:35:04:88:d6:09:42:6c:dd:27: a3:27:1a:f6:5e:5c:9b:6e:63:93:01:06:65:66:8c: a5:5b:df:09:c1:a9:f6:1c:5e:d1:86:16:5d:6f:d2: 2e:4d:c7:2d:a7:f7:37:65:6c:9a:6c:41:a6:6c:d7: f7:f9:89:dc:4f:ea:a9:2f:a7:52:71:a8:c4:47:5f: 04:74:62:e3:50:f4:75:16:89:35:2a:70:22:be:6a: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:05:B9:EC:50:8D:B9:44:F9:EE:34:2F:A2:4B:37:D8:59:AD:C3:F8 X509v3 Authority Key Identifier: keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:09:f2:0a:b7:00:86:e3:28:50:98:87:0a:a7:22:55:cf:8f: f1:53:f4:5a:aa:da:e2:b4:b6:55:b6:fa:8a:f0:b7:28:03:39: 15:38:b1:da:00:40:8f:0e:0c:e6:3a:2b:5c:42:4e:59:99:a6: 36:10:e7:2c:a0:28:e8:41:d3:9f:c1:51:0b:12:f0:09:0a:6b: 4b:e0:72:91:3d:14:a0:68:da:64:21:78:42:5d:6b:ae:af:a0: c0:5c:fe:c1:a0:5c:42:60:7b:e8:79:d0:0d:be:30:03:09:83: 67:4f:83:93:1c:ec:79:b6:51:ea:05:3b:97:a0:a8:3b:ed:e4: d1:3d:90:c7:27:b1:4f:cf:76:b1:cf:35:86:be:8d:8e:ad:65: 24:ba:a4:eb:af:d8:98:38:17:3d:94:7d:59:09:b2:00:5a:15: d1:35:0e:f4:a6:68:7a:28:a6:e3:52:f8:e2:23:ff:90:09:6f: 5e:1e:f1:a1:2c:a6:63:f8:7d:e0:3e:a3:74:cc:d5:dd:4d:75: 8f:5b:6f:6b:07:80:31:f7:62:e4:9b:db:2d:a8:e4:bd:da:da: eb:29:1d:3c:9e:e3:85:b3:78:f1:f8:00:5b:38:67:db:81:bc: 1c:99:ae:3d:97:72:be:76:31:45:6c:2f:7e:0f:1d:79:ac:4d: 21:8b:61:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGMjcxMTAvBgNVBAUTKEQwMzY5QzIwMUY3N0FGMzhGMjcwMjlGQjIyNDZDNDM4 NUQyNzhDQTIwHhcNMjUxMjE4MjE1ODE4WhcNMjUxMjI1MjE1ODE4WjAYMRYwFAYD VQQDDA02OTQ0NzhmYS0zMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur+Hv+inYYvfFTQ70KBsoBEkcrOvHPtFO8/TvX7leQ0QZp7KAK0lpUNenGo8 CHq2cSdAywOGxOClisqWCaDA3f4KSnTdR1QrkABleIyboxAfBIIv1COe6ps+FU/V A8kY714xNYFW0GUlv4FGMuKLjfbVpQd3Qy6oqpkdAdF3gG834kvCbojNw+iFFdss TzFDKJgn+FDG+DlbIbzUI7HRALQh3NcRMXWRmo81BIjWCUJs3SejJxr2XlybbmOT AQZlZoylW98Jwan2HF7RhhZdb9IuTcctp/c3ZWyabEGmbNf3+YncT+qpL6dScajE R18EdGLjUPR1Fok1KnAivmrvbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkFuexQ jblE+e40L6JLN9hZrcP4MB8GA1UdIwQYMBaAFNA2nCAfd6848nAp+yJGxDhdJ4yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkYyNy9GMUQzRTMyNkFC RTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6anljQ243SWtiRU9GMG5q S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBEYWNJQjkzcnpqeWNDbjdJa2JFT0YwbmpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkYyNy9GMUQzRTMyNkFCRTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6 anljQ243SWtiRU9GMG5qS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbCfIKtwCG4yhQmIcKpyJVz4/xU/RaqtritLZVtvqK8LcoAzkVOLHa AECPDgzmOitcQk5ZmaY2EOcsoCjoQdOfwVELEvAJCmtL4HKRPRSgaNpkIXhCXWuu r6DAXP7BoFxCYHvoedANvjADCYNnT4OTHOx5tlHqBTuXoKg77eTRPZDHJ7FPz3ax zzWGvo2OrWUkuqTrr9iYOBc9lH1ZCbIAWhXRNQ70pmh6KKbjUvjiI/+QCW9eHvGh LKZj+H3gPqN0zNXdTXWPW29rB4Ax92Lkm9stqOS92trrKR08nuOFs3jx+ABbOGfb gbwcma49l3K+djFFbC9+Dx15rE0hi2Er -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:51 2025 by rpki-client