This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: aGi8jA+7FDXcv6T+h+9ozTj8yjuYg+Jl9Q0Zyry64BE= Subject key identifier: 00:4A:A7:4A:E4:E7:8C:4A:DB:DD:E9:8B:39:1D:E2:D2:A5:E1:67:3B Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A8E Signing time: Thu 18 Dec 2025 19:09:57 +0000 Manifest this update: Thu 18 Dec 2025 19:09:57 +0000 Manifest next update: Thu 25 Dec 2025 19:09:57 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: tSyZBiCnGonOptMWdDRZXIsSVCAP0LBiGkcTULODVIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2702 (0xa8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Dec 18 19:09:57 2025 GMT Not After : Dec 25 19:09:57 2025 GMT Subject: CN=69445185-cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:25:a2:08:90:2c:8d:ce:4b:3e:d4:2e:b7: e0:61:bd:e3:1a:82:4e:09:b3:60:36:47:a2:24:15: 54:fd:cb:71:c9:15:ae:80:ed:b2:e6:ae:19:23:c2: 6b:ec:a0:f4:62:68:7f:c7:43:b9:d8:7a:eb:7e:2c: 4c:b6:e1:93:19:9b:b8:3d:c4:ca:d8:49:11:b1:65: 59:6b:1a:a6:e1:6f:17:15:21:8d:9c:61:da:ed:66: bc:cf:09:c9:1b:6f:0d:9e:cd:98:17:54:48:ee:88: cd:c0:5b:f3:e7:4a:d8:90:a7:ed:85:0c:1f:6e:05: 8a:a8:9c:85:77:2e:53:ca:f3:f6:38:4e:e4:09:a9: 1d:fe:f0:f4:eb:01:a9:bb:37:78:37:61:28:77:27: f3:a2:54:c6:eb:bf:2e:92:3d:92:1f:4b:7c:8c:79: 4f:8d:34:5e:54:5a:5c:87:b7:c4:a1:af:7d:0a:c5: 33:98:b0:6f:c9:8b:f1:c9:af:d3:b5:ad:9a:78:d5: 1b:d2:e6:ae:3d:76:97:9d:28:21:61:67:d9:38:c8: 33:a6:e5:13:92:02:09:9b:49:1b:c9:3d:e1:a8:98: eb:66:23:e5:87:e9:f3:36:28:22:4e:9b:12:e1:ca: e5:96:45:80:6a:b3:dd:c5:50:43:63:76:14:ef:f7: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:A7:4A:E4:E7:8C:4A:DB:DD:E9:8B:39:1D:E2:D2:A5:E1:67:3B X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c6:3d:de:98:0c:e7:ba:82:da:e7:3f:dc:96:8b:be:20:4c: 88:68:dc:a9:e6:41:3a:d2:7a:f4:22:d6:d0:cb:f6:11:e7:44: 56:a7:99:47:6e:8f:e4:9c:93:f2:60:fc:57:5e:6a:50:9e:eb: e1:a4:e0:84:68:87:47:88:38:f1:53:9a:d7:8f:4e:db:fd:29: 1f:80:cd:b3:cf:68:55:17:25:55:22:63:65:3d:46:d3:22:ca: 7d:f8:d7:46:7d:47:5f:9d:69:03:24:7f:0b:c7:7c:11:32:7e: 69:0a:33:a0:94:2b:02:9a:42:45:74:4e:22:c0:e8:e5:9a:c7: 80:b9:22:32:ab:75:cb:cf:9d:c2:d9:9b:ce:19:e1:19:5d:98: 47:87:a6:0e:61:6c:5f:82:64:4c:45:ec:a8:59:83:c8:c5:ee: 56:a7:da:56:00:c7:d9:38:82:34:a8:e4:78:b9:d4:77:1e:f0: 63:c4:d9:b4:47:5e:b9:d4:a9:3c:d1:7d:65:c4:79:6a:b3:db: cc:93:48:0a:e9:74:0a:8c:f2:8c:1f:0f:24:0a:e9:cd:e3:de: 47:10:c1:0e:e7:19:ca:93:f7:59:49:68:c0:d4:04:e3:f8:f2: cc:3e:bd:02:aa:4a:02:7a:68:15:b0:cc:ef:36:d4:7e:18:78: 86:8f:b9:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUxMjE4MTkwOTU3WhcNMjUxMjI1MTkwOTU3WjAYMRYwFAYD VQQDDA02OTQ0NTE4NS1jY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseElogiQLI3OSz7ULrfgYb3jGoJOCbNgNkeiJBVU/ctxyRWugO2y5q4ZI8Jr 7KD0Ymh/x0O52HrrfixMtuGTGZu4PcTK2EkRsWVZaxqm4W8XFSGNnGHa7Wa8zwnJ G28Nns2YF1RI7ojNwFvz50rYkKfthQwfbgWKqJyFdy5TyvP2OE7kCakd/vD06wGp uzd4N2EodyfzolTG678ukj2SH0t8jHlPjTReVFpch7fEoa99CsUzmLBvyYvxya/T ta2aeNUb0uauPXaXnSghYWfZOMgzpuUTkgIJm0kbyT3hqJjrZiPlh+nzNigiTpsS 4crllkWAarPdxVBDY3YU7/cBYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABKp0rk 54xK293pizkd4tKl4Wc7MB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfxj3emAznuoLa5z/clou+IEyIaNyp5kE60nr0ItbQy/YR50RWp5lH bo/knJPyYPxXXmpQnuvhpOCEaIdHiDjxU5rXj07b/SkfgM2zz2hVFyVVImNlPUbT Isp9+NdGfUdfnWkDJH8Lx3wRMn5pCjOglCsCmkJFdE4iwOjlmseAuSIyq3XLz53C 2ZvOGeEZXZhHh6YOYWxfgmRMReyoWYPIxe5Wp9pWAMfZOII0qOR4udR3HvBjxNm0 R1651Kk80X1lxHlqs9vMk0gK6XQKjPKMHw8kCunN495HEMEO5xnKk/dZSWjA1ATj +PLMPr0CqkoCemgVsMzvNtR+GHiGj7lo -----END CERTIFICATE-----Generated at Fri Dec 19 20:14:10 2025 by rpki-client