This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: 2LgM/Unt+srozLCfH1TDgEJLk3BZI5V0416yhHRAmIk= Subject key identifier: 68:E0:F9:5B:EC:4A:3E:87:38:62:26:70:AB:53:3D:FB:63:B1:B3:BC Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1ADE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 2244 Signing time: Thu 18 Dec 2025 15:52:03 +0000 Manifest this update: Thu 18 Dec 2025 15:52:03 +0000 Manifest next update: Thu 25 Dec 2025 15:52:03 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: K7rOZWw9GvC6aNSXVGPlfJBMBHAwmkJfAaiXAgmjxVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6878 (0x1ade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Validity Not Before: Dec 18 15:52:03 2025 GMT Not After : Dec 25 15:52:03 2025 GMT Subject: CN=69442323-63ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:45:d3:50:64:c9:f8:eb:e6:9a:de:73:33: ba:0b:27:54:02:67:05:4c:c8:d3:c5:df:79:4f:82: c7:d9:38:09:d3:08:6c:8c:4c:78:f0:07:f0:16:80: 49:d2:da:66:14:3f:a6:f3:fe:9d:0b:86:47:13:88: d4:fc:21:1e:65:02:3f:a3:1e:da:61:7e:b9:75:06: 61:fa:de:30:3d:ed:03:b9:78:2a:43:00:eb:9c:44: ea:25:70:3b:92:bb:1e:77:e9:98:ba:26:e5:e8:54: be:58:5c:78:3e:5d:91:db:a0:a9:22:44:41:c5:fe: 73:e4:4b:d4:bf:b7:e1:79:68:a7:45:b3:66:6d:93: 04:44:4f:d5:36:5e:91:2d:b8:3e:ed:bc:f6:0e:cb: 00:c5:87:27:62:e2:37:2a:00:c3:ff:9b:dd:4a:50: 65:35:e7:c8:b8:b3:d5:73:d2:4a:92:7d:5c:f9:05: 47:0f:24:34:48:89:fc:99:a3:26:5c:af:c8:bf:0d: 8c:2e:3b:15:dc:1b:e1:02:6e:a9:88:ec:96:e0:b0: 5b:c9:4d:13:cf:00:5b:a3:71:5f:70:67:34:e7:d8: 47:a4:87:7b:e7:b0:b9:61:d3:0a:96:46:10:6f:02: f9:02:b1:d3:77:e8:44:40:99:83:a7:e6:2e:7d:f2: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:F9:5B:EC:4A:3E:87:38:62:26:70:AB:53:3D:FB:63:B1:B3:BC X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c3:2c:0b:aa:fd:48:fa:7d:58:a1:10:c3:dd:b3:1f:39:67: 36:e5:f5:f6:64:b4:89:f8:43:96:f2:91:49:37:96:74:81:0e: e5:ac:96:3a:c8:39:c7:bc:73:92:eb:cd:24:19:fb:2c:e3:b9: f2:34:45:a5:b1:e9:7d:e5:78:d9:e5:d6:1c:62:4c:8e:7d:cc: 29:a6:98:3d:d0:9c:86:c8:41:ae:5e:7d:d6:d5:d3:32:05:4a: 9b:76:1f:1c:cc:cc:f3:01:36:6d:4f:1a:c2:4c:00:10:6a:a4: 57:d7:19:3f:07:4d:e0:6e:49:74:88:d0:4c:89:16:ca:c5:94: e5:86:33:11:5b:1c:6e:dd:c0:67:7b:4d:4c:18:6b:88:ce:da: 97:83:76:e5:61:64:bf:9a:61:58:a2:c0:7d:ad:d2:c3:48:b4: 23:91:1f:df:67:5c:ad:26:46:dd:42:db:ce:e4:3a:6d:86:b3: fd:7f:5c:1a:9d:30:b0:5f:e1:f0:7d:dd:35:3b:0c:d9:e2:18: 5e:be:21:37:bf:c9:79:93:28:7c:bf:67:94:78:84:02:df:94: fc:fe:8d:e2:03:f7:45:3c:b0:7b:5c:d2:cc:74:a9:ff:70:b4: 5a:24:92:e5:d3:0f:b2:7e:9b:a3:5c:25:54:ed:bd:b1:dc:ba: c1:fa:f3:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUxMjE4MTU1MjAzWhcNMjUxMjI1MTU1MjAzWjAYMRYwFAYD VQQDDA02OTQ0MjMyMy02M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26BF01Bkyfjr5preczO6CydUAmcFTMjTxd95T4LH2TgJ0whsjEx48AfwFoBJ 0tpmFD+m8/6dC4ZHE4jU/CEeZQI/ox7aYX65dQZh+t4wPe0DuXgqQwDrnETqJXA7 krsed+mYuibl6FS+WFx4Pl2R26CpIkRBxf5z5EvUv7fheWinRbNmbZMERE/VNl6R Lbg+7bz2DssAxYcnYuI3KgDD/5vdSlBlNefIuLPVc9JKkn1c+QVHDyQ0SIn8maMm XK/Ivw2MLjsV3BvhAm6piOyW4LBbyU0TzwBbo3FfcGc059hHpId757C5YdMKlkYQ bwL5ArHTd+hEQJmDp+YuffIHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjg+Vvs Sj6HOGImcKtTPftjsbO8MB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8wywLqv1I+n1YoRDD3bMfOWc25fX2ZLSJ+EOW8pFJN5Z0gQ7lrJY6 yDnHvHOS680kGfss47nyNEWlsel95XjZ5dYcYkyOfcwpppg90JyGyEGuXn3W1dMy BUqbdh8czMzzATZtTxrCTAAQaqRX1xk/B03gbkl0iNBMiRbKxZTlhjMRWxxu3cBn e01MGGuIztqXg3blYWS/mmFYosB9rdLDSLQjkR/fZ1ytJkbdQtvO5DpthrP9f1wa nTCwX+Hwfd01OwzZ4hheviE3v8l5kyh8v2eUeIQC35T8/o3iA/dFPLB7XNLMdKn/ cLRaJJLl0w+yfpujXCVU7b2x3LrB+vPm -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:03 2025 by rpki-client