This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: IPi0QTrxnJ9yhvOfvHzkA9ToESf5qKkl/wCUNvGjjQ0= Subject key identifier: 5E:25:C9:31:DC:0F:C5:60:33:91:A3:2C:FD:25:9F:CA:46:F5:25:22 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 0147 Signing time: Sun 21 Dec 2025 03:33:52 +0000 Manifest this update: Sun 21 Dec 2025 03:33:52 +0000 Manifest next update: Sun 28 Dec 2025 03:33:52 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: 0osFxv567ip86XVmcgQ6Al9X11mZdup/sK0S4oqVUrA=) 2: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) 3: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 4: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Dec 21 03:33:52 2025 GMT Not After : Dec 28 03:33:52 2025 GMT Subject: CN=69476aa0-a779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:d2:b3:a6:04:63:ec:c9:34:d5:47:c6:a6: 2d:1d:3d:b4:5a:d5:df:66:2b:a4:5a:2b:cc:c8:73: fa:8c:bb:22:1e:41:35:02:7b:75:ed:9c:39:eb:9f: 28:0e:a8:50:38:49:1f:30:e7:c0:3c:09:c4:73:c6: 2a:0b:c2:6d:43:6e:9d:16:65:0d:e6:df:7c:9e:1b: 40:b9:2f:f0:05:a8:42:14:a4:b4:9f:17:9d:cf:19: 39:3f:28:65:17:f2:ac:b3:5b:a0:3a:07:2d:06:f5: e3:6c:1b:43:d1:3d:16:23:fd:b3:f6:41:05:21:e2: 2f:f3:0b:5f:88:ac:58:41:f7:37:ef:c4:9b:c3:e9: b1:de:47:08:eb:b1:2e:9d:07:cf:f8:c4:cd:11:be: 81:17:be:98:77:d6:51:15:85:a3:a0:3a:63:c3:9b: 0d:22:d0:3f:1d:22:f3:0b:8d:e2:5f:ad:89:f5:14: 77:75:ad:94:15:65:0a:84:4d:6f:e6:65:c5:36:97: c6:55:8b:6a:70:e0:fa:ee:4c:97:d2:8a:84:22:2a: b1:35:c8:62:96:fb:03:f5:d1:e7:0e:d2:23:3d:fa: ff:0f:de:4d:ed:d8:70:88:ce:3f:2f:09:21:77:3d: 6c:e4:6f:c1:aa:d9:51:1c:4e:e2:d0:6e:d6:9b:5e: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:C9:31:DC:0F:C5:60:33:91:A3:2C:FD:25:9F:CA:46:F5:25:22 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:72:71:41:c6:fe:7e:11:60:b5:5b:38:e9:02:5f:69:42:4b: 48:07:e0:da:c5:e4:27:8d:c8:de:e1:02:09:26:07:7a:01:a6: f0:cb:fc:0b:10:57:dd:c0:d6:eb:15:5b:04:b0:f3:5d:2b:1e: 6a:7b:68:a6:41:af:82:fe:21:0d:4d:7a:5c:87:7d:ab:57:88: b4:77:dc:22:62:e9:82:53:af:b6:9a:04:ff:0f:06:65:99:62: 9b:c8:ab:2b:8a:23:ea:8f:39:4b:00:bd:d8:89:ab:4f:d4:55: fa:d7:e4:f6:dc:ec:70:98:37:40:97:9f:28:72:c0:50:2d:86: 76:1d:8b:a5:ab:9d:f7:be:92:84:10:6e:58:f9:06:85:cf:7e: 4e:c4:bd:c0:ad:5d:7f:0a:5c:d4:79:ac:e7:bb:ec:0c:83:18: be:a7:e2:b8:cd:b9:88:7f:70:13:ed:b4:22:af:f9:8d:cd:10: 1d:fe:8a:38:ad:22:96:f9:41:6f:ed:4c:a2:2d:01:75:a2:0d: b9:66:d3:5f:0a:b7:d7:c9:21:c9:aa:71:83:c8:5b:01:eb:9c: d8:74:29:b0:73:c7:e9:eb:21:59:d8:04:89:57:65:b4:ad:71: 5e:c4:5b:19:25:92:1f:14:df:a8:5f:70:07:b6:ac:f6:32:ff: b4:2c:1b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUxMjIxMDMzMzUyWhcNMjUxMjI4MDMzMzUyWjAYMRYwFAYD VQQDDA02OTQ3NmFhMC1hNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjTvSs6YEY+zJNNVHxqYtHT20WtXfZiukWivMyHP6jLsiHkE1Ant17Zw5658o DqhQOEkfMOfAPAnEc8YqC8JtQ26dFmUN5t98nhtAuS/wBahCFKS0nxedzxk5Pyhl F/Kss1ugOgctBvXjbBtD0T0WI/2z9kEFIeIv8wtfiKxYQfc378Sbw+mx3kcI67Eu nQfP+MTNEb6BF76Yd9ZRFYWjoDpjw5sNItA/HSLzC43iX62J9RR3da2UFWUKhE1v 5mXFNpfGVYtqcOD67kyX0oqEIiqxNchilvsD9dHnDtIjPfr/D95N7dhwiM4/Lwkh dz1s5G/BqtlRHE7i0G7Wm17b+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4lyTHc D8VgM5GjLP0ln8pG9SUiMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAscnFBxv5+EWC1WzjpAl9pQktIB+DaxeQnjcje4QIJJgd6Aabwy/wL EFfdwNbrFVsEsPNdKx5qe2imQa+C/iENTXpch32rV4i0d9wiYumCU6+2mgT/DwZl mWKbyKsriiPqjzlLAL3YiatP1FX61+T23OxwmDdAl58ocsBQLYZ2HYulq533vpKE EG5Y+QaFz35OxL3ArV1/ClzUeaznu+wMgxi+p+K4zbmIf3AT7bQir/mNzRAd/oo4 rSKW+UFv7UyiLQF1og25ZtNfCrfXySHJqnGDyFsB65zYdCmwc8fp6yFZ2ASJV2W0 rXFexFsZJZIfFN+oX3AHtqz2Mv+0LBsk -----END CERTIFICATE-----Generated at Sun Dec 21 12:17:46 2025 by rpki-client