This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: eYSD46QKu1HtmMMx7fEx7DzU/mj0kEv2k584Wtvw2t8= Subject key identifier: 4E:00:EE:17:85:55:60:33:15:FB:D7:00:A1:1C:0C:F9:FF:B1:7A:66 Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 0824 Signing time: Sat 20 Dec 2025 20:16:54 +0000 Manifest this update: Sat 20 Dec 2025 20:16:53 +0000 Manifest next update: Sat 27 Dec 2025 20:16:53 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: hgIfC6tGjk1xNDRZee+E3tXBElqjKh+R7pJaXeuf5d0=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: HjcVeeuGfQ4vkp/U3mV4vagewWLSC858iVp7rCqO1Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Dec 20 20:16:53 2025 GMT Not After : Dec 27 20:16:53 2025 GMT Subject: CN=69470436-beac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:9c:cd:cf:bd:1a:1a:41:ce:dd:a2:66:51: d3:dd:5e:3d:f6:f6:b8:88:f0:d0:80:37:a5:16:3c: 51:04:ac:e6:50:13:2d:c9:c7:00:c6:8e:a6:d7:d4: 5f:4f:c0:f5:47:11:e7:85:7a:40:97:96:4a:e5:f5: e4:60:ed:e3:1a:d8:d9:61:96:ff:0e:2e:dc:77:b8: fc:19:47:a1:f6:4c:29:5b:03:e2:14:5c:05:0f:d2: 6c:19:b9:bb:07:ef:88:9d:35:01:7b:fc:7d:3a:f3: fc:ff:2c:05:68:5b:f7:d3:40:86:c6:1a:09:38:a6: 49:43:c8:6b:f7:4f:a3:70:ee:38:69:0f:07:62:f8: b5:35:42:36:0d:e4:98:da:e2:f5:a5:24:e4:93:9e: 58:18:2c:9c:c5:0b:94:dd:94:a2:b7:6d:d6:ef:41: 75:6b:31:72:c5:0e:08:66:81:6c:dd:d3:98:99:38: bb:2b:0b:d1:d7:e3:b4:75:95:90:74:14:96:3d:f6: a2:f7:e5:19:62:dc:48:18:fa:db:28:ef:a7:6b:93: 05:a2:0f:ab:b4:5f:e9:5a:cd:a2:a0:f2:b2:6e:a9: 1d:e4:87:fc:42:4b:38:ea:a5:f5:41:73:2e:82:86: 2a:48:17:f4:2c:1d:c4:6f:ec:1c:b4:73:da:19:f4: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:EE:17:85:55:60:33:15:FB:D7:00:A1:1C:0C:F9:FF:B1:7A:66 X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:da:39:8d:09:a7:bd:a4:5e:10:f7:d9:a1:27:b4:e1:ae:16: f0:aa:83:9c:a5:d7:d0:28:30:0f:bd:09:85:3f:4a:68:87:4c: 05:ae:7a:21:de:af:06:31:57:e4:3f:63:7e:af:6d:49:9c:28: 92:06:4a:e8:31:83:29:39:b9:1b:62:0e:14:2f:c6:35:ad:7b: 53:47:c5:5a:aa:e5:2f:83:2c:4f:ba:fa:10:4a:fd:fd:96:b4: c2:bd:a3:30:06:4d:e4:26:15:f3:d3:22:4a:d5:82:95:9f:74: af:15:ce:79:45:76:e8:44:7d:a7:44:e0:c3:52:c9:2b:08:22: 4d:75:9a:06:d0:28:4a:32:4a:bd:3b:f3:31:fa:8b:1f:26:16: 9d:23:86:1f:f4:87:5e:8d:90:f6:bf:d5:70:23:a5:10:d9:65: 20:a1:94:7b:ef:f4:ee:92:b0:f8:cf:1e:07:eb:fe:f8:db:88: c5:06:fc:4d:05:53:4c:21:fa:82:97:e1:77:fc:5d:d7:1c:ae: 35:ac:6a:5a:04:8c:7f:b9:16:75:0b:44:ea:35:73:17:4b:a7: 6d:bb:bd:b8:fe:f9:47:0e:2e:94:56:1a:b8:8d:68:60:d4:88: 10:ff:c6:e7:aa:ec:d7:87:aa:de:2e:96:d3:f0:1e:3c:fa:ba: e4:6f:e3:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUxMjIwMjAxNjUzWhcNMjUxMjI3MjAxNjUzWjAYMRYwFAYD VQQDDA02OTQ3MDQzNi1iZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Cczc+9GhpBzt2iZlHT3V499va4iPDQgDelFjxRBKzmUBMtyccAxo6m19Rf T8D1RxHnhXpAl5ZK5fXkYO3jGtjZYZb/Di7cd7j8GUeh9kwpWwPiFFwFD9JsGbm7 B++InTUBe/x9OvP8/ywFaFv300CGxhoJOKZJQ8hr90+jcO44aQ8HYvi1NUI2DeSY 2uL1pSTkk55YGCycxQuU3ZSit23W70F1azFyxQ4IZoFs3dOYmTi7KwvR1+O0dZWQ dBSWPfai9+UZYtxIGPrbKO+na5MFog+rtF/pWs2ioPKybqkd5If8Qks46qX1QXMu goYqSBf0LB3Eb+wctHPaGfT96QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4A7heF VWAzFfvXAKEcDPn/sXpmMB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz2jmNCae9pF4Q99mhJ7ThrhbwqoOcpdfQKDAPvQmFP0poh0wFrnoh 3q8GMVfkP2N+r21JnCiSBkroMYMpObkbYg4UL8Y1rXtTR8VaquUvgyxPuvoQSv39 lrTCvaMwBk3kJhXz0yJK1YKVn3SvFc55RXboRH2nRODDUskrCCJNdZoG0ChKMkq9 O/Mx+osfJhadI4Yf9IdejZD2v9VwI6UQ2WUgoZR77/TukrD4zx4H6/7424jFBvxN BVNMIfqCl+F3/F3XHK41rGpaBIx/uRZ1C0TqNXMXS6dtu724/vlHDi6UVhq4jWhg 1IgQ/8bnquzXh6reLpbT8B48+rrkb+O7 -----END CERTIFICATE-----Generated at Sun Dec 21 08:52:42 2025 by rpki-client