This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: vHB9nqEmuk9mo5Og/EBYz+Xhvny/ytkDWjxDtE533To= Subject key identifier: F9:C1:C4:DF:81:F2:2E:74:13:C0:96:3D:1B:A4:EC:D8:C3:BF:48:EE Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 01E8 Signing time: Mon 29 Dec 2025 01:45:49 +0000 Manifest this update: Mon 29 Dec 2025 01:45:49 +0000 Manifest next update: Mon 05 Jan 2026 01:45:49 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: eBCFyhnKIm5zJ8t0KFbrtI/UZPXvpBBhTWJ00P65kKc=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Dec 29 01:45:49 2025 GMT Not After : Jan 5 01:45:49 2026 GMT Subject: CN=6951dd4d-b6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:dc:61:6c:81:35:12:f8:0b:cb:70:8b:3d: 49:e5:5b:68:4e:75:a5:21:2d:df:de:a1:0d:67:d3: 70:46:31:3a:73:4a:e9:97:ad:cd:4c:f3:2a:d4:26: 06:3b:99:6f:fa:75:4f:c5:0b:b9:93:e4:f6:99:b0: fa:a9:67:be:4d:e2:da:ae:a7:53:61:5d:d1:1d:f6: 51:46:59:9f:cc:02:33:2f:c8:78:0f:7b:0f:77:6f: ec:71:1b:8b:62:a2:b8:5b:a7:09:33:01:e1:8c:00: df:83:a9:11:d7:24:5a:66:1e:17:29:e0:25:85:8c: e7:8f:25:64:73:44:c8:29:f0:6b:dc:36:b1:8f:46: 35:8b:b7:3a:d7:a1:b4:c4:24:a8:6d:e4:02:75:03: be:81:aa:79:e3:fd:24:75:61:39:9b:56:3d:26:4f: ea:74:2d:96:c9:24:78:a6:9f:90:a0:de:ce:68:5f: 26:e7:d2:db:79:92:99:70:d5:fa:33:d1:3e:f2:e2: 7f:f2:e6:e5:65:c7:f7:ed:8c:1d:50:dd:10:2e:8e: a0:a2:f5:af:f4:a2:3d:10:6a:1d:09:9b:78:29:33: f7:0b:d7:7b:78:69:4a:93:42:7f:9c:0c:07:09:d3: f7:20:cc:b5:de:1a:b7:35:d8:15:0e:93:51:57:ab: 49:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:C4:DF:81:F2:2E:74:13:C0:96:3D:1B:A4:EC:D8:C3:BF:48:EE X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:67:2a:46:b4:09:5c:60:0f:40:eb:f2:a4:e8:74:ce:21:1d: 2a:1e:4f:4a:9e:be:66:45:c3:35:64:e6:5d:52:61:6b:05:4c: c7:2d:7a:4b:78:55:bd:ca:cd:5d:c8:82:34:06:c5:9b:19:0f: b3:71:bb:c5:53:e6:79:24:af:78:51:25:7d:74:e9:80:81:9f: 4f:1f:0c:49:69:9a:25:6f:ec:d8:61:92:ae:cc:8b:7e:13:1c: a0:47:5e:59:d4:01:ef:0b:1f:9a:f2:31:1b:ff:4c:17:6f:94: 8b:71:7c:72:62:a3:85:b4:fb:13:e1:85:d8:f7:ae:20:4e:98: d8:7c:a9:d0:69:e4:0b:f7:66:58:10:be:59:f0:13:49:ac:4e: 9a:d1:30:50:4e:9a:ca:a2:b6:31:53:20:55:0a:f8:3c:36:58: dc:67:a6:a5:ad:6c:f0:8b:2d:a0:f9:b4:a6:cd:fa:e7:f2:30: c1:8e:43:63:ca:7a:c5:3c:69:5b:70:91:41:84:50:13:9f:36: db:4f:0d:3b:7f:b5:a2:9d:18:94:9e:b1:2c:d9:4f:54:24:d6: 97:9a:e4:dc:42:66:07:02:eb:c0:6a:b0:f1:64:38:1e:e1:b9: 92:47:70:40:1f:01:5c:15:d8:dc:ca:67:ec:e4:7e:7d:57:82: 1e:bb:a2:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjUxMjI5MDE0NTQ5WhcNMjYwMTA1MDE0NTQ5WjAYMRYwFAYD VQQDDA02OTUxZGQ0ZC1iNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7vcYWyBNRL4C8twiz1J5VtoTnWlIS3f3qENZ9NwRjE6c0rpl63NTPMq1CYG O5lv+nVPxQu5k+T2mbD6qWe+TeLarqdTYV3RHfZRRlmfzAIzL8h4D3sPd2/scRuL YqK4W6cJMwHhjADfg6kR1yRaZh4XKeAlhYznjyVkc0TIKfBr3Daxj0Y1i7c616G0 xCSobeQCdQO+gap54/0kdWE5m1Y9Jk/qdC2WySR4pp+QoN7OaF8m59LbeZKZcNX6 M9E+8uJ/8ublZcf37YwdUN0QLo6govWv9KI9EGodCZt4KTP3C9d7eGlKk0J/nAwH CdP3IMy13hq3NdgVDpNRV6tJ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnBxN+B 8i50E8CWPRuk7NjDv0juMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOZypGtAlcYA9A6/Kk6HTOIR0qHk9Knr5mRcM1ZOZdUmFrBUzHLXpL eFW9ys1dyII0BsWbGQ+zcbvFU+Z5JK94USV9dOmAgZ9PHwxJaZolb+zYYZKuzIt+ ExygR15Z1AHvCx+a8jEb/0wXb5SLcXxyYqOFtPsT4YXY964gTpjYfKnQaeQL92ZY EL5Z8BNJrE6a0TBQTprKorYxUyBVCvg8NljcZ6alrWzwiy2g+bSmzfrn8jDBjkNj ynrFPGlbcJFBhFATnzbbTw07f7WinRiUnrEs2U9UJNaXmuTcQmYHAuvAarDxZDge 4bmSR3BAHwFcFdjcymfs5H59V4Ieu6It -----END CERTIFICATE-----Generated at Mon Dec 29 22:39:06 2025 by rpki-client