This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: zdSVxOUWDPup4Q/HNPRVY8xiU/OuX6MTlRDYSht8Iyw= Subject key identifier: 2D:86:79:B5:BB:11:29:54:80:CB:94:81:4B:60:A1:45:D1:23:50:57 Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 08F5 Signing time: Sat 20 Dec 2025 19:46:55 +0000 Manifest this update: Sat 20 Dec 2025 19:46:54 +0000 Manifest next update: Sat 27 Dec 2025 19:46:54 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: Sh0IFF3m4UYo2HcKjYQLjXhCDvQEZr5SHlfUrhREm4U=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: PLkHHx8GaTekc9dmC5heFwXjJ3zz86/8Y8QSgJQ+mrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: Dec 20 19:46:54 2025 GMT Not After : Dec 27 19:46:54 2025 GMT Subject: CN=6946fd2f-7d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:ac:08:47:21:91:3d:54:82:95:9b:2f:69:52: bf:49:4a:c2:c5:03:5b:b3:17:2b:a0:f2:bd:84:44: c2:7f:83:8f:c2:ad:4b:b9:56:90:6f:90:21:36:cf: 63:12:b8:32:64:cc:02:45:bb:de:e1:5a:ea:6a:b3: 9f:04:9d:c0:13:4d:0b:90:2c:5c:72:72:41:ba:b1: ed:45:2b:da:98:fa:b7:dc:d0:98:c4:27:6c:98:b5: d9:c6:3c:b7:49:de:43:d9:8f:0b:a1:b2:be:5f:c7: 5e:04:92:a7:5b:65:5d:64:fa:41:e7:0e:f4:64:0a: a6:bd:52:c4:19:22:88:c1:95:c1:a6:fc:8c:94:b5: 4a:8f:46:c2:93:02:7e:2f:51:e6:28:7c:2a:13:64: a7:f6:2e:44:f7:00:dc:a0:c7:15:92:94:81:5d:2e: a8:19:f9:b2:24:50:07:87:a4:89:de:0c:5c:98:38: e0:9e:e5:78:42:3a:45:66:f3:ab:d4:c6:1c:21:9c: 4b:24:c0:ae:96:2b:1f:2c:29:29:02:42:23:58:56: 34:97:92:8b:fb:57:ae:7d:4e:c5:88:b4:40:2e:d2: 28:1c:a4:72:28:e6:36:55:70:6e:9c:e0:43:5c:83: f6:de:62:2e:d8:06:89:40:fe:5f:61:c2:60:3d:82: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:79:B5:BB:11:29:54:80:CB:94:81:4B:60:A1:45:D1:23:50:57 X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d3:5a:f1:cb:8c:7b:c3:b0:b1:14:07:0c:8a:e5:d0:e3:16: cb:65:52:66:c5:0f:f8:fa:7f:3a:fb:a0:9c:2e:0f:d1:e0:2a: a9:5c:8a:dc:b6:23:27:89:97:2c:c6:3f:4a:00:9c:c6:aa:8a: 06:54:bf:a1:76:cf:5a:16:70:9b:1f:ad:05:af:5b:73:2a:c7: d9:b2:cb:57:57:8b:11:63:05:91:cb:38:89:12:08:53:66:25: 3b:a7:d7:df:50:27:2d:ef:cd:52:6f:fe:5e:19:fd:7e:4a:69: 11:32:f6:6c:89:06:51:7c:f5:de:cc:db:bf:d2:35:1c:03:2c: e0:f2:31:3b:d2:e3:1a:6b:10:29:a4:39:53:bc:03:55:00:ee: d2:e4:6f:d6:7f:f6:6d:b7:24:af:93:a2:21:07:80:94:2f:c3: fd:3a:cb:ad:c8:40:75:0b:50:4e:6b:c7:cd:6a:8e:8c:43:42: 54:0a:57:38:cd:98:ae:c5:8b:36:2b:0b:27:77:ab:59:56:23: 54:f6:16:4e:e6:45:3a:58:ba:19:5b:1d:a6:59:b1:36:b3:bb: 5a:24:37:36:2e:dd:cc:91:e4:dc:41:9d:ad:db:66:b1:a4:53: 0e:cb:f3:9b:06:c5:75:93:b9:22:f9:a9:b2:92:c6:99:9f:02: a4:a0:33:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjUxMjIwMTk0NjU0WhcNMjUxMjI3MTk0NjU0WjAYMRYwFAYD VQQDDA02OTQ2ZmQyZi03ZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/qwIRyGRPVSClZsvaVK/SUrCxQNbsxcroPK9hETCf4OPwq1LuVaQb5AhNs9j ErgyZMwCRbve4VrqarOfBJ3AE00LkCxccnJBurHtRSvamPq33NCYxCdsmLXZxjy3 Sd5D2Y8LobK+X8deBJKnW2VdZPpB5w70ZAqmvVLEGSKIwZXBpvyMlLVKj0bCkwJ+ L1HmKHwqE2Sn9i5E9wDcoMcVkpSBXS6oGfmyJFAHh6SJ3gxcmDjgnuV4QjpFZvOr 1MYcIZxLJMCulisfLCkpAkIjWFY0l5KL+1eufU7FiLRALtIoHKRyKOY2VXBunOBD XIP23mIu2AaJQP5fYcJgPYKsdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2GebW7 ESlUgMuUgUtgoUXRI1BXMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp01rxy4x7w7CxFAcMiuXQ4xbLZVJmxQ/4+n86+6CcLg/R4CqpXIrc tiMniZcsxj9KAJzGqooGVL+hds9aFnCbH60Fr1tzKsfZsstXV4sRYwWRyziJEghT ZiU7p9ffUCct781Sb/5eGf1+SmkRMvZsiQZRfPXezNu/0jUcAyzg8jE70uMaaxAp pDlTvANVAO7S5G/Wf/ZttySvk6IhB4CUL8P9OsutyEB1C1BOa8fNao6MQ0JUClc4 zZiuxYs2Kwsnd6tZViNU9hZO5kU6WLoZWx2mWbE2s7taJDc2Lt3MkeTcQZ2t22ax pFMOy/ObBsV1k7ki+amyksaZnwKkoDOU -----END CERTIFICATE-----Generated at Mon Dec 22 14:09:01 2025 by rpki-client