This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: fu23ayrgxNJALMpld7UvCSnVh64Mbb//kie+6BKiwyg= Subject key identifier: C6:90:4B:22:A9:2A:00:02:65:B5:19:15:E9:34:57:EC:84:2D:FB:8C Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0261 Signing time: Sun 21 Dec 2025 00:54:48 +0000 Manifest this update: Sun 21 Dec 2025 00:54:48 +0000 Manifest next update: Sun 28 Dec 2025 00:54:48 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: bcW2pmrYc7zgttOWvPe//ezqTfeCRbFxmi+MReEf3U4=) 2: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=) 3: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Dec 21 00:54:48 2025 GMT Not After : Dec 28 00:54:48 2025 GMT Subject: CN=69474558-1cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:e4:5d:d5:52:e0:a9:6c:bb:d9:eb:b5:45: f7:e7:a6:30:8c:bd:46:f4:27:e4:4a:e2:16:d6:dc: 60:18:be:82:e5:f0:cf:dc:c3:4e:ce:5b:38:03:ef: ac:02:e1:56:e0:9c:5b:5b:82:87:a2:12:b5:9a:4c: 23:e5:de:14:30:43:ba:ef:32:2d:bb:7a:9d:72:a3: 1f:6d:ae:e2:0b:9c:66:c8:39:86:a2:74:7b:a3:a7: 52:2f:40:b7:cf:a6:18:39:ec:96:e3:cc:a2:9f:a4: 18:93:57:e6:fa:7f:05:ae:9f:1c:4e:3f:6a:10:57: b2:6d:62:ea:f9:ab:ca:6e:4c:8f:56:a6:eb:8b:2d: 9b:a4:bc:89:91:fe:21:fc:19:3b:cc:e0:7a:75:cc: cb:8e:fa:8a:22:f0:a1:af:55:86:16:ab:98:b7:b8: 94:6a:90:6c:8e:c3:8b:5a:60:04:b9:d7:94:82:81: 65:7a:17:46:51:50:05:54:47:62:e7:b2:5c:8b:c3: ee:28:97:fe:c2:ea:3b:a5:8a:bf:c6:42:1b:8f:3d: 73:ff:43:ad:70:25:59:0e:fb:8d:e0:a3:05:bf:33: c6:00:34:18:83:42:b5:fe:8d:9f:ac:1e:3b:62:6d: 1d:ab:94:14:a3:db:4c:76:b9:f7:37:9d:69:7f:17: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:90:4B:22:A9:2A:00:02:65:B5:19:15:E9:34:57:EC:84:2D:FB:8C X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:47:f1:3f:a9:e9:f3:f1:c8:1e:93:f6:c7:4d:bb:8b:6e:ef: 72:8d:12:41:19:e4:21:f7:93:71:bb:9e:ba:b4:2f:a8:50:76: a5:43:cd:1c:83:aa:5f:81:7a:1b:c5:95:a2:e1:84:79:f1:5a: a7:53:2a:3d:01:13:ea:b8:d0:38:b7:60:ad:d6:61:c6:c5:59: a2:d2:ac:bb:27:c8:63:9a:17:ee:f9:ad:f0:c1:56:79:d8:ac: 89:3c:c8:fa:ea:23:51:1d:c4:64:a4:c2:8e:ec:49:ac:6c:8f: 05:c4:98:e4:6e:7f:5a:9e:ef:32:94:b0:08:da:3c:6e:bf:e4: 7f:1f:a5:02:b2:c9:f8:c0:37:cf:0c:6c:13:9b:63:14:17:1c: 68:5c:30:2a:e8:38:3b:fe:5f:33:9e:3a:ad:39:97:c2:41:19: 4d:c3:7d:12:de:af:f1:15:7b:84:5f:b3:2a:51:ba:49:4e:76: 08:8c:56:d2:16:47:44:b4:ac:a7:6b:34:60:18:d5:ca:41:35: e5:92:d1:9f:19:df:96:2a:7c:ac:d2:7a:7d:85:c7:ef:e4:e1: 61:0c:d0:1a:57:12:d8:10:13:93:52:b2:1b:c4:3b:30:1e:d3: f0:18:e2:30:c5:75:08:40:55:ac:30:16:4e:76:66:6c:ad:62: 18:4b:39:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUxMjIxMDA1NDQ4WhcNMjUxMjI4MDA1NDQ4WjAYMRYwFAYD VQQDDA02OTQ3NDU1OC0xY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW7kXdVS4Klsu9nrtUX356YwjL1G9CfkSuIW1txgGL6C5fDP3MNOzls4A++s AuFW4JxbW4KHohK1mkwj5d4UMEO67zItu3qdcqMfba7iC5xmyDmGonR7o6dSL0C3 z6YYOeyW48yin6QYk1fm+n8Frp8cTj9qEFeybWLq+avKbkyPVqbriy2bpLyJkf4h /Bk7zOB6dczLjvqKIvChr1WGFquYt7iUapBsjsOLWmAEudeUgoFlehdGUVAFVEdi 57Jci8PuKJf+wuo7pYq/xkIbjz1z/0OtcCVZDvuN4KMFvzPGADQYg0K1/o2frB47 Ym0dq5QUo9tMdrn3N51pfxdu3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaQSyKp KgACZbUZFek0V+yELfuMMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtR/E/qenz8cgek/bHTbuLbu9yjRJBGeQh95Nxu566tC+oUHalQ80c g6pfgXobxZWi4YR58VqnUyo9ARPquNA4t2Ct1mHGxVmi0qy7J8hjmhfu+a3wwVZ5 2KyJPMj66iNRHcRkpMKO7EmsbI8FxJjkbn9anu8ylLAI2jxuv+R/H6UCssn4wDfP DGwTm2MUFxxoXDAq6Dg7/l8znjqtOZfCQRlNw30S3q/xFXuEX7MqUbpJTnYIjFbS FkdEtKynazRgGNXKQTXlktGfGd+WKnys0np9hcfv5OFhDNAaVxLYEBOTUrIbxDsw HtPwGOIwxXUIQFWsMBZOdmZsrWIYSzlH -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:08 2025 by rpki-client