This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: eZ+IoJOCmvMazu8Q0gJHOLb7kUYhHZ13gMjPINMhplA= Subject key identifier: 85:E6:27:C9:5E:7E:7D:D5:21:C9:29:BB:68:4A:E5:F9:B4:F2:B3:34 Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 090D Signing time: Sat 20 Dec 2025 19:43:41 +0000 Manifest this update: Sat 20 Dec 2025 19:43:40 +0000 Manifest next update: Sat 27 Dec 2025 19:43:40 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: BlBBAfxrrBVfOwYNnzuTsVb1beCq1UYkBVtzjCnAu5c=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Dec 20 19:43:40 2025 GMT Not After : Dec 27 19:43:40 2025 GMT Subject: CN=6946fc6d-6401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:e2:2d:40:38:22:5e:7c:9f:84:70:6d:ef: 86:a5:9a:3d:d1:78:15:f5:f1:16:89:2b:a9:83:38: 8f:ca:19:d2:4e:2a:51:ad:dc:fd:83:e6:f6:c9:d5: 6f:22:0e:ad:ce:39:70:5c:52:79:0d:1b:a4:a4:5e: ba:31:ea:be:34:79:67:45:fd:7b:c9:0d:12:df:e7: 91:34:1e:e8:3a:ea:1b:2b:d9:68:2d:83:e3:23:86: 9a:c5:d6:56:49:12:6e:33:01:86:e8:2a:77:8c:0a: 95:90:1f:40:c4:ac:70:11:42:74:42:26:44:eb:62: 56:c6:41:7d:e3:a8:1a:53:1c:18:10:68:44:45:21: 39:94:d2:ad:b4:98:56:54:b8:50:d0:b3:97:af:63: 4b:10:ab:f8:5c:65:8c:e0:b9:b4:ec:2d:ae:97:b2: 81:e4:5f:a2:25:fc:fe:5e:b0:48:0e:d8:bb:28:77: 56:cf:bb:93:1e:00:e6:3b:a6:ce:50:8c:56:27:c2: ed:48:7f:a3:fc:3e:01:10:a6:21:2e:52:69:69:71: 9c:07:fd:b2:05:08:98:33:9c:bd:4d:13:bc:d8:d7: ae:d1:bd:98:18:e6:d6:a6:9b:db:d0:23:2a:3c:39: 6e:90:0d:07:c6:5c:31:09:75:98:98:c1:25:a7:9b: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:27:C9:5E:7E:7D:D5:21:C9:29:BB:68:4A:E5:F9:B4:F2:B3:34 X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:21:ba:e5:f4:4b:26:e6:1a:78:10:10:13:1f:20:81:b6:49: 7a:87:08:49:2c:59:19:c8:b5:18:cf:4f:52:46:ca:5f:bd:25: f3:d1:45:46:27:80:35:e6:22:79:ab:69:90:41:e5:1c:e5:45: c7:dc:16:43:56:8a:8e:cd:eb:0f:df:67:6a:fe:b9:ad:a0:28: 27:27:f1:b7:97:c2:ae:b5:58:35:96:88:c7:33:03:99:7d:f7: 53:c4:19:f4:e7:cf:8c:c6:11:67:58:1f:00:a4:81:3b:74:1c: 12:47:eb:c0:df:1c:2b:2f:60:71:f3:1a:f1:c2:ce:c6:ad:16: e4:74:9d:c2:ef:7b:c8:fc:4c:9a:0f:e8:92:02:15:dd:fe:c2: a9:88:b1:3c:9f:bd:6f:80:b5:49:3f:e1:d6:39:bc:8f:bc:bc: 50:3e:e0:f9:56:00:14:44:39:00:da:85:b0:14:b9:14:c0:7e: b8:96:6c:98:49:bd:21:6c:12:fe:c0:41:ad:62:ef:be:46:9b: 94:8e:c3:a9:5b:49:d8:bf:33:66:d5:6b:3e:24:b3:17:ab:e3: fe:cd:cf:21:5e:47:a4:ae:5f:82:db:4f:b8:91:b8:75:b6:ba: 8d:ae:9e:aa:4f:0d:30:77:e8:ac:b0:94:e0:2d:eb:1d:99:c7: bb:1a:85:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUxMjIwMTk0MzQwWhcNMjUxMjI3MTk0MzQwWjAYMRYwFAYD VQQDDA02OTQ2ZmM2ZC02NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypTiLUA4Il58n4Rwbe+GpZo90XgV9fEWiSupgziPyhnSTipRrdz9g+b2ydVv Ig6tzjlwXFJ5DRukpF66Meq+NHlnRf17yQ0S3+eRNB7oOuobK9loLYPjI4aaxdZW SRJuMwGG6Cp3jAqVkB9AxKxwEUJ0QiZE62JWxkF946gaUxwYEGhERSE5lNKttJhW VLhQ0LOXr2NLEKv4XGWM4Lm07C2ul7KB5F+iJfz+XrBIDti7KHdWz7uTHgDmO6bO UIxWJ8LtSH+j/D4BEKYhLlJpaXGcB/2yBQiYM5y9TRO82Neu0b2YGObWppvb0CMq PDlukA0HxlwxCXWYmMElp5t9yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXmJ8le fn3VIckpu2hK5fm08rM0MB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmIbrl9Esm5hp4EBATHyCBtkl6hwhJLFkZyLUYz09SRspfvSXz0UVG J4A15iJ5q2mQQeUc5UXH3BZDVoqOzesP32dq/rmtoCgnJ/G3l8KutVg1lojHMwOZ ffdTxBn058+MxhFnWB8ApIE7dBwSR+vA3xwrL2Bx8xrxws7GrRbkdJ3C73vI/Eya D+iSAhXd/sKpiLE8n71vgLVJP+HWObyPvLxQPuD5VgAURDkA2oWwFLkUwH64lmyY Sb0hbBL+wEGtYu++RpuUjsOpW0nYvzNm1Ws+JLMXq+P+zc8hXkekrl+C20+4kbh1 trqNrp6qTw0wd+issJTgLesdmce7GoUJ -----END CERTIFICATE-----Generated at Sun Dec 21 19:20:49 2025 by rpki-client