This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json) Hash identifier: cspUDEG6qLlfuuMHu8tOX3PK/lJxTunQHTj7eCJbzkA= Subject key identifier: AC:58:5B:B7:86:9D:CA:53:70:0C:4D:54:59:6F:4A:7A:36:25:53:A5 Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft Manifest number: 0115 Signing time: Fri 19 Dec 2025 04:03:54 +0000 Manifest this update: Fri 19 Dec 2025 04:03:53 +0000 Manifest next update: Fri 26 Dec 2025 04:03:53 +0000 Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: Tn6HxLZH42qmlJPT9YQa297rxANYbHXMVwoTMSxhjsM=) 2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: sQR4OxxnRQelaQye41JzM/+/uoADouWx9n3P5u34eoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Validity Not Before: Dec 19 04:03:53 2025 GMT Not After : Dec 26 04:03:53 2025 GMT Subject: CN=6944ceaa-2e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:ac:a9:57:1b:75:a7:e5:6f:a7:77:62:e5: 03:59:13:a6:c6:48:92:e2:9c:68:ef:6c:19:81:8f: 72:fa:fb:e7:91:8f:51:f9:48:9c:f9:79:9f:70:af: 1f:0e:16:a1:b8:cf:1f:fa:07:cf:aa:f2:a8:48:94: 0b:96:cf:ae:94:ee:6b:3b:cb:9a:a7:04:11:74:cf: 86:9b:80:57:74:5c:28:67:dd:4e:55:f1:a3:6b:f1: 53:db:58:35:01:7c:fd:a1:cc:d1:dd:0f:9b:49:13: 40:12:c2:39:ff:30:37:da:ce:f6:43:0f:87:3c:f4: 1f:15:c3:d4:3c:19:0f:ba:6a:49:fa:3a:c5:75:f1: d7:cf:8a:7a:8a:ee:78:7e:0b:7b:a7:c5:ec:d1:73: b2:a1:a7:b0:79:4d:10:e5:89:57:e6:c7:80:57:03: bf:3f:40:91:54:da:5f:69:44:3f:93:4d:f5:90:c2: ea:a3:31:5b:8b:f2:8e:b0:9a:ad:26:e9:56:2f:1d: 49:06:aa:ba:3e:ab:a0:91:b6:81:38:a2:2b:35:e0: 0e:92:fc:e9:11:9f:a3:c3:a4:9b:25:d3:b6:9a:ab: 69:14:99:a5:11:70:c8:cf:c3:6c:4e:6e:b0:60:2c: 9a:d2:0f:51:2f:20:3a:0c:b5:77:67:71:2d:aa:64: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:58:5B:B7:86:9D:CA:53:70:0C:4D:54:59:6F:4A:7A:36:25:53:A5 X509v3 Authority Key Identifier: keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b4:e1:7d:b1:ca:ad:2f:ad:0c:7a:91:6c:b4:91:87:32:fc: 10:46:b7:85:01:cf:47:b5:62:84:be:7b:0d:2a:e6:99:a2:da: 31:4e:af:72:6f:a5:a7:90:51:bc:ea:04:b5:06:f7:33:e1:21: f6:7b:a7:3d:df:88:af:89:d6:75:82:60:63:84:a9:ff:83:e4: 01:4a:6b:43:b6:93:72:a7:46:df:f5:b3:e0:cb:65:4d:cd:c2: 34:0a:c5:50:cb:cf:93:08:43:39:fa:9f:24:ac:57:c4:dc:e4: 20:32:69:ba:58:e1:93:80:a9:16:2b:3d:a0:0c:ed:2a:ef:d9: 3c:3e:dc:7f:ac:b4:85:48:4d:4d:2e:d5:ad:e8:54:ba:31:e0: 3f:7a:c6:da:ae:2e:d1:79:7c:3a:81:10:11:f8:ef:3d:67:f1: c0:c2:dc:29:f1:83:a2:ba:84:6c:dc:63:ac:3e:0f:64:15:8a: bd:18:cc:0d:22:b7:cb:15:e9:86:25:e4:0c:33:84:f5:d0:68: 3e:e7:74:33:5a:20:d5:a7:7c:08:52:de:2d:49:2f:12:46:20: b5:25:35:f7:c5:a7:6d:20:b8:88:4d:41:c4:d2:fc:90:23:46: c4:b5:14:de:ca:56:6b:e2:0d:45:d3:dd:28:93:f6:6b:b6:bd: e4:f9:d2:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4 ODc5QUI4QkIwHhcNMjUxMjE5MDQwMzUzWhcNMjUxMjI2MDQwMzUzWjAYMRYwFAYD VQQDDA02OTQ0Y2VhYS0yZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiiysqVcbdaflb6d3YuUDWROmxkiS4pxo72wZgY9y+vvnkY9R+Uic+XmfcK8f DhahuM8f+gfPqvKoSJQLls+ulO5rO8uapwQRdM+Gm4BXdFwoZ91OVfGja/FT21g1 AXz9oczR3Q+bSRNAEsI5/zA32s72Qw+HPPQfFcPUPBkPumpJ+jrFdfHXz4p6iu54 fgt7p8Xs0XOyoaeweU0Q5YlX5seAVwO/P0CRVNpfaUQ/k031kMLqozFbi/KOsJqt JulWLx1JBqq6PqugkbaBOKIrNeAOkvzpEZ+jw6SbJdO2mqtpFJmlEXDIz8NsTm6w YCya0g9RLyA6DLV3Z3EtqmQf/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxYW7eG ncpTcAxNVFlvSno2JVOlMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx dEh4WjJ1SGVMZDZJZWF1THMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXtOF9scqtL60MepFstJGHMvwQRreFAc9HtWKEvnsNKuaZotoxTq9y b6WnkFG86gS1Bvcz4SH2e6c934ividZ1gmBjhKn/g+QBSmtDtpNyp0bf9bPgy2VN zcI0CsVQy8+TCEM5+p8krFfE3OQgMmm6WOGTgKkWKz2gDO0q79k8Ptx/rLSFSE1N LtWt6FS6MeA/esbari7ReXw6gRAR+O89Z/HAwtwp8YOiuoRs3GOsPg9kFYq9GMwN IrfLFemGJeQMM4T10Gg+53QzWiDVp3wIUt4tSS8SRiC1JTX3xadtILiITUHE0vyQ I0bEtRTeylZr4g1F090ok/Zrtr3k+dLy -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:57 2025 by rpki-client