This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: tGsnKvdv0gORLYejo+ZxjeFB4yNIfK8gDa6r01iReug= Subject key identifier: AA:C2:0D:08:D4:F0:76:71:5E:ED:19:70:DE:BB:B2:C8:DA:29:03:66 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 010F Signing time: Fri 19 Dec 2025 04:04:55 +0000 Manifest this update: Fri 19 Dec 2025 04:04:54 +0000 Manifest next update: Fri 26 Dec 2025 04:04:54 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: DmJXIG76fSQIoNOPhh9JpQ8Pag72en4nnE5yExRIJGg=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: dCvT4b0z62X987gdGn6TsNi85xvDVOk+zGBW49XWZoE=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: qmdWFHQgb/FyavVks32QvCevHJqLrQOjarXrPqP1+5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Dec 19 04:04:54 2025 GMT Not After : Dec 26 04:04:54 2025 GMT Subject: CN=6944cee7-5bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:f3:bf:b5:7b:d6:94:6f:7c:40:c7:f6:99: 6f:03:fe:91:37:7a:4a:6c:eb:be:7a:00:59:55:98: cf:31:65:18:c3:f8:26:f1:dc:91:d6:ec:3c:24:fe: 53:fe:34:ce:8f:12:d0:ff:9b:45:95:62:f2:9c:af: f4:40:e2:20:fd:b1:d8:aa:d8:2d:44:b4:47:31:e7: e5:c5:ce:79:0f:2b:23:87:22:83:8a:70:bc:ca:74: 2a:41:7b:43:fa:6a:ac:b5:6c:c0:5e:78:a2:bc:d6: b6:c1:71:1a:bd:44:85:7f:d3:1f:4e:df:65:3b:f0: 88:00:1b:01:3c:45:03:42:bb:ef:c2:48:2e:d8:f5: 69:e6:7a:30:50:5c:97:ad:a7:14:06:ff:26:41:0d: 06:ae:4c:8b:5f:39:05:0f:38:ba:ed:e9:db:f4:4b: 7c:06:03:9a:02:cb:e9:61:af:f1:6b:26:99:a4:9b: af:1e:a5:e1:bc:f7:7a:86:19:bf:30:f6:81:1b:87: 82:2f:04:9b:9e:11:2c:9c:e0:6f:98:30:3d:46:a2: 30:ee:9e:da:49:7a:9f:c0:0a:2e:cc:c8:70:a2:eb: 86:02:59:2f:6b:20:85:a7:e9:96:7b:bc:af:80:27: d3:31:6c:8d:80:7a:cd:88:61:91:b9:b4:51:f5:e7: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C2:0D:08:D4:F0:76:71:5E:ED:19:70:DE:BB:B2:C8:DA:29:03:66 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:72:97:c4:6e:ef:b6:d2:fa:aa:31:f4:1e:d3:5b:18:74:8e: 9d:5a:5c:ad:aa:1f:17:91:49:39:60:51:30:1e:d3:9b:b5:84: dc:db:6b:c5:9d:c4:62:0a:f9:fd:43:6e:da:b8:25:04:2f:83: b0:23:47:85:22:b7:e6:fa:03:87:04:76:56:8f:a2:99:1f:ae: cf:b6:62:2f:06:ed:a9:8e:20:fe:50:11:ab:21:cf:33:ba:34: 61:20:b1:be:d0:d3:19:7f:57:d3:9f:1e:a6:01:cf:dd:c9:7e: 80:56:36:8e:a2:79:91:b1:76:e1:6c:c5:f8:49:c2:51:97:6e: 95:f7:1d:e5:27:e0:05:89:95:44:3b:b4:2d:19:2a:ad:fc:01: cf:98:36:66:3a:60:1a:9a:2b:8f:6e:73:c4:27:4f:2b:0f:f3: fe:dd:a6:29:c8:6d:21:bd:0e:ee:12:41:be:81:ce:bc:d5:47: 4f:f9:98:77:32:7c:93:43:14:79:14:fe:fe:fa:c9:34:59:68: 01:e6:4b:03:6e:fa:cf:fb:c7:af:2a:6f:3e:ae:e8:8e:08:46: 58:8b:b2:fe:44:d0:9d:4f:06:9e:78:2b:83:e9:a2:c4:0a:cc: a0:c4:0b:b6:0c:1f:52:7b:ff:de:8f:77:d8:b1:63:23:76:86: 3a:4c:cf:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUxMjE5MDQwNDU0WhcNMjUxMjI2MDQwNDU0WjAYMRYwFAYD VQQDDA02OTQ0Y2VlNy01YmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApELzv7V71pRvfEDH9plvA/6RN3pKbOu+egBZVZjPMWUYw/gm8dyR1uw8JP5T /jTOjxLQ/5tFlWLynK/0QOIg/bHYqtgtRLRHMeflxc55DysjhyKDinC8ynQqQXtD +mqstWzAXniivNa2wXEavUSFf9MfTt9lO/CIABsBPEUDQrvvwkgu2PVp5nowUFyX racUBv8mQQ0GrkyLXzkFDzi67enb9Et8BgOaAsvpYa/xayaZpJuvHqXhvPd6hhm/ MPaBG4eCLwSbnhEsnOBvmDA9RqIw7p7aSXqfwAouzMhwouuGAlkvayCFp+mWe7yv gCfTMWyNgHrNiGGRubRR9ef2QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrCDQjU 8HZxXu0ZcN67ssjaKQNmMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCcpfEbu+20vqqMfQe01sYdI6dWlytqh8XkUk5YFEwHtObtYTc22vF ncRiCvn9Q27auCUEL4OwI0eFIrfm+gOHBHZWj6KZH67PtmIvBu2pjiD+UBGrIc8z ujRhILG+0NMZf1fTnx6mAc/dyX6AVjaOonmRsXbhbMX4ScJRl26V9x3lJ+AFiZVE O7QtGSqt/AHPmDZmOmAamiuPbnPEJ08rD/P+3aYpyG0hvQ7uEkG+gc681UdP+Zh3 MnyTQxR5FP7++sk0WWgB5ksDbvrP+8evKm8+ruiOCEZYi7L+RNCdTwaeeCuD6aLE CsygxAu2DB9Se//ej3fYsWMjdoY6TM+H -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:07 2025 by rpki-client