This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: NrS1NEx7okIiVlm0Pm1HV6bv7rcBpghTTpm3zUsQuQw= Subject key identifier: 8E:18:C8:F4:86:D2:B3:EB:14:93:16:67:3C:84:57:68:DB:A2:72:ED Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 07C8 Signing time: Sat 20 Dec 2025 20:40:41 +0000 Manifest this update: Sat 20 Dec 2025 20:40:41 +0000 Manifest next update: Sat 27 Dec 2025 20:40:41 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: FwPpGLbSuJKcTOsooOlk4qTPNAjDQ0FpA7zwg4X4irk=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Dec 20 20:40:41 2025 GMT Not After : Dec 27 20:40:41 2025 GMT Subject: CN=694709c9-ea59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:47:e5:2f:32:25:2d:e2:1d:3a:03:ea:1e:7d: 03:6b:f7:cb:e5:e4:d8:69:69:eb:e5:52:bc:8e:98: ea:fe:23:45:98:7c:dd:cd:23:eb:b1:9c:fb:57:ec: 53:43:f7:a8:bf:6f:f3:f5:c2:ca:d5:6b:85:94:17: 8e:d8:2d:db:c9:1c:19:02:77:27:15:3d:2b:83:1c: 6f:d9:c9:4e:58:a9:0b:4c:0d:49:0a:dd:c9:a4:1d: bb:26:de:31:3f:54:00:4b:aa:b6:a5:e8:52:09:60: 08:aa:04:67:19:e0:3f:0f:bb:8f:41:3f:ad:6c:47: 7f:27:e5:96:fa:63:48:00:83:72:c9:2a:c1:03:5b: 61:7b:90:2a:4d:89:10:ec:07:26:16:93:bd:02:d8: 50:dd:7c:50:bd:7d:36:6d:57:35:d0:60:19:56:10: 38:69:94:c9:b5:a0:a8:b4:14:91:e8:96:57:d5:ea: 93:8a:a3:25:22:d2:fe:93:d0:3f:b2:1e:63:0e:a3: 1e:9a:be:1b:49:1d:9b:da:bd:e8:1c:0e:8a:0b:7a: 19:10:b0:3c:7f:8a:ed:50:44:d6:d5:42:5f:a4:54: c6:99:0d:ee:6b:13:9d:5f:70:81:8e:ff:c0:bb:1a: 2a:85:28:87:55:f0:9a:85:23:92:3c:60:17:a5:b8: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:18:C8:F4:86:D2:B3:EB:14:93:16:67:3C:84:57:68:DB:A2:72:ED X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:33:6c:e1:70:c7:c3:bc:1f:0d:79:1b:27:f6:b0:0f:f6: 98:7e:bf:3b:bf:bb:5a:a7:5f:8d:7a:a0:da:90:16:06:23:96: fa:73:62:c9:41:98:e6:d8:4e:35:59:f5:e1:f8:12:ae:6d:4b: 39:06:bf:57:53:d4:2a:b6:77:2e:cd:7b:1d:0a:1b:0d:6a:86: f7:99:dd:7f:29:d9:94:0a:31:2a:d7:65:73:dd:b7:20:b6:2e: 1f:14:ad:09:26:c4:14:d8:68:c7:18:96:4f:5b:4c:bb:38:90: fb:f7:37:e0:ea:59:52:61:94:eb:34:08:80:ce:81:2a:9d:07: 83:fb:c4:a4:dd:ae:f8:6f:00:2a:3f:cc:11:45:3d:5e:32:0a: 68:f9:3e:c0:3f:c2:c2:fa:91:e9:d7:53:a3:f5:5e:de:e8:e0: 12:55:80:a2:03:24:13:7b:a2:da:f4:88:3c:cd:1d:44:50:5f: ad:37:89:95:8a:b6:a9:13:1e:98:43:a7:46:75:2d:88:82:b9: 73:cc:5f:9c:b6:be:ff:b9:df:2e:07:60:1e:ae:fc:53:cb:e7: af:8e:f0:80:71:1d:0a:8a:08:1a:84:3a:f6:48:38:19:05:a7: 79:ac:f9:89:f8:e1:32:25:85:1c:38:d6:24:75:d0:bd:77:bb: c1:88:3e:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUxMjIwMjA0MDQxWhcNMjUxMjI3MjA0MDQxWjAYMRYwFAYD VQQDDA02OTQ3MDljOS1lYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9EflLzIlLeIdOgPqHn0Da/fL5eTYaWnr5VK8jpjq/iNFmHzdzSPrsZz7V+xT Q/eov2/z9cLK1WuFlBeO2C3byRwZAncnFT0rgxxv2clOWKkLTA1JCt3JpB27Jt4x P1QAS6q2pehSCWAIqgRnGeA/D7uPQT+tbEd/J+WW+mNIAINyySrBA1the5AqTYkQ 7AcmFpO9AthQ3XxQvX02bVc10GAZVhA4aZTJtaCotBSR6JZX1eqTiqMlItL+k9A/ sh5jDqMemr4bSR2b2r3oHA6KC3oZELA8f4rtUETW1UJfpFTGmQ3uaxOdX3CBjv/A uxoqhSiHVfCahSOSPGAXpbhnfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4YyPSG 0rPrFJMWZzyEV2jbonLtMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIZDNs4XDHw7wfDXkbJ/awD/aYfr87v7tap1+NeqDakBYGI5b6c2LJ QZjm2E41WfXh+BKubUs5Br9XU9QqtncuzXsdChsNaob3md1/KdmUCjEq12Vz3bcg ti4fFK0JJsQU2GjHGJZPW0y7OJD79zfg6llSYZTrNAiAzoEqnQeD+8Sk3a74bwAq P8wRRT1eMgpo+T7AP8LC+pHp11Oj9V7e6OASVYCiAyQTe6La9Ig8zR1EUF+tN4mV irapEx6YQ6dGdS2IgrlzzF+ctr7/ud8uB2AervxTy+evjvCAcR0KiggahDr2SDgZ Bad5rPmJ+OEyJYUcONYkddC9d7vBiD7J -----END CERTIFICATE-----Generated at Sun Dec 21 22:06:44 2025 by rpki-client