This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: jZ0tU8/Pt/MybAsyGZL4u8BayIC6lVBT95vHz7olmrs= Subject key identifier: 4E:73:30:58:60:1C:BD:A0:32:C1:72:1C:5F:96:32:89:91:E3:56:7F Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1D6A Signing time: Thu 04 Dec 2025 15:53:00 +0000 Manifest this update: Thu 04 Dec 2025 15:52:59 +0000 Manifest next update: Thu 11 Dec 2025 15:52:59 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: sgLXJl1ahxZ6KOrr1rAaYNcW+CDV9xMAYkHPbpJSLdw=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: kiqsqwNMBPh3qwxfNJAfqtQq0GlxcHUCDHglujirUPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7542 (0x1d76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Dec 4 15:52:59 2025 GMT Not After : Dec 11 15:52:59 2025 GMT Subject: CN=6931ae5c-70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:8a:73:29:e8:9b:48:88:32:e5:05:6b:04: 61:84:65:45:5a:29:0d:cf:d3:d1:0b:c3:f2:7b:71: 44:b7:f0:e1:0e:5b:84:cc:8b:03:9a:f1:61:bc:7e: 69:4a:5a:68:76:cd:8f:87:26:7d:43:e5:46:cb:00: 5d:9f:37:e7:c0:fe:2b:96:98:b4:c1:44:3c:07:6b: ea:7d:3b:ee:0b:fd:d8:8f:43:99:29:63:45:72:70: 62:33:3e:b1:f6:93:28:cf:a9:b7:c8:8c:40:11:8f: c9:96:72:43:67:1c:54:6c:85:63:89:3c:c1:fe:2b: ae:28:7a:f9:21:74:1d:af:e6:87:d7:06:0a:0e:29: 2c:5a:24:48:a5:b4:82:95:d1:19:ca:84:3d:1a:af: 8a:83:24:e4:c6:23:d0:6d:f6:e9:a6:52:e9:93:3a: 66:1f:e1:c9:4f:0c:43:b0:4b:83:fb:d6:a7:91:cd: d7:61:32:72:d0:af:19:ea:c1:83:d3:f9:86:ad:4c: bc:fc:c8:2c:a3:02:72:a6:7e:ac:f1:12:29:3a:52: 3a:3c:2d:8e:ff:61:ad:49:e4:09:c9:d8:0b:48:6a: 25:cf:09:3b:20:8b:fa:1b:22:a9:e6:43:19:e7:2a: cf:86:f8:50:93:ce:77:33:75:e5:1d:e7:85:98:5b: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:30:58:60:1C:BD:A0:32:C1:72:1C:5F:96:32:89:91:E3:56:7F X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6a:a0:7b:75:a6:ae:67:82:b8:09:98:dd:08:8f:a2:0e:90: 7f:8e:8a:39:f7:1d:a4:14:08:05:22:55:ac:4d:d2:e3:d8:dc: f0:39:7e:63:64:94:aa:75:a7:b0:53:79:ac:f7:8f:73:86:2a: cd:9b:6f:e1:84:26:13:d9:e9:52:26:03:f3:5d:12:91:45:57: 42:56:79:d8:be:0d:b7:a6:55:b0:05:e4:75:98:38:08:28:f2: 66:a8:d8:84:d6:5b:fa:c4:84:30:52:f4:77:82:ec:96:44:09: 64:d1:de:42:da:1e:9e:98:f8:79:b2:b0:2d:c8:c0:0e:45:53: 31:40:7b:12:3f:3b:8e:7d:1a:83:3d:43:ef:ae:9d:f8:f2:25: 4d:84:af:a9:f8:3e:80:03:83:ed:f0:8a:da:7e:86:e5:12:55: 84:25:ab:ff:e9:9b:44:37:1e:38:8a:58:67:23:14:d0:8c:25: ad:6e:3b:e8:d9:6e:e5:30:35:72:d6:2b:50:b0:fe:3f:c1:ab: ac:1b:3b:e7:18:9e:11:b2:fb:42:a0:ad:d3:49:f3:c3:c3:c2: cc:64:85:1b:c9:8d:b2:65:31:5b:8a:1b:65:27:0b:4c:2d:83: c2:b8:1a:d7:6b:8f:81:a7:7a:bf:26:64:d9:a0:95:07:79:ad: d8:c8:87:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUxMjA0MTU1MjU5WhcNMjUxMjExMTU1MjU5WjAYMRYwFAYD VQQDEw02OTMxYWU1Yy03MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzeKcynom0iIMuUFawRhhGVFWikNz9PRC8Pye3FEt/DhDluEzIsDmvFhvH5p Slpods2PhyZ9Q+VGywBdnzfnwP4rlpi0wUQ8B2vqfTvuC/3Yj0OZKWNFcnBiMz6x 9pMoz6m3yIxAEY/JlnJDZxxUbIVjiTzB/iuuKHr5IXQdr+aH1wYKDiksWiRIpbSC ldEZyoQ9Gq+KgyTkxiPQbfbpplLpkzpmH+HJTwxDsEuD+9ankc3XYTJy0K8Z6sGD 0/mGrUy8/MgsowJypn6s8RIpOlI6PC2O/2GtSeQJydgLSGolzwk7IIv6GyKp5kMZ 5yrPhvhQk853M3XlHeeFmFu6TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5zMFhg HL2gMsFyHF+WMomR41Z/MB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaaqB7daauZ4K4CZjdCI+iDpB/joo59x2kFAgFIlWsTdLj2NzwOX5j ZJSqdaewU3ms949zhirNm2/hhCYT2elSJgPzXRKRRVdCVnnYvg23plWwBeR1mDgI KPJmqNiE1lv6xIQwUvR3guyWRAlk0d5C2h6emPh5srAtyMAORVMxQHsSPzuOfRqD PUPvrp348iVNhK+p+D6AA4Pt8IrafoblElWEJav/6ZtENx44ilhnIxTQjCWtbjvo 2W7lMDVy1itQsP4/wausGzvnGJ4RsvtCoK3TSfPDw8LMZIUbyY2yZTFbihtlJwtM LYPCuBrXa4+Bp3q/JmTZoJUHea3YyIfp -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:52 2025 by rpki-client