This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: SI0fNZp1hWt3BxIsUn4hVT6A2fQiXm04sEVT12vNEJg= Subject key identifier: F2:A1:BC:C6:0A:B8:99:8D:9E:00:EA:B1:51:79:CF:D8:5D:20:D5:0D Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 104B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FC6 Signing time: Sat 20 Dec 2025 17:16:44 +0000 Manifest this update: Sat 20 Dec 2025 17:16:43 +0000 Manifest next update: Sat 27 Dec 2025 17:16:43 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: Lg5hUuSZWWJgNVHi5VOo9Nt+KdChmycS1Fj86NXb0p8=) 2: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) 3: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 4: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: zq3r2bqYk5JoyYAxGmuwDEsSoCRJP0AIOXoJJj3slFs=) 5: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 05k3Et6L9d2nE0FPEy+35+jv6KXbsZR/t8jrPFetuWc=) 6: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: ZKO21v7I5AsbeHedpQVwlDjC0YYOzEud39SdbR3CgmA=) 7: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 8: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) 9: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 10: B35E5B46334111EF9770A542C4F9AE02.roa (hash: eo1b+Yq2Qt1v8H4Ltid7fTu6HkQPul0DLMpDr+LxnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4171 (0x104b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Dec 20 17:16:43 2025 GMT Not After : Dec 27 17:16:43 2025 GMT Subject: CN=6946d9fc-17da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:19:59:0c:83:e4:cc:d1:be:f7:f6:71:53: eb:29:9a:51:4a:4a:08:92:e3:f5:47:9e:b5:0c:17: 9f:ec:8c:c0:1a:94:37:d8:22:23:f3:77:12:2c:3b: c9:4e:bc:06:cc:46:7a:11:5b:f2:85:81:af:1c:8a: 6f:81:47:31:4d:3b:cb:5b:29:e2:c9:49:ee:46:86: 16:a3:1b:fc:8a:5f:28:bc:2d:4b:90:77:54:fa:61: 10:63:95:90:ca:fa:30:1a:6c:4b:b4:2f:f8:80:f7: 0f:79:65:c4:a7:cc:61:2f:a8:36:20:b4:5d:80:e0: 9b:d0:8c:5a:6a:01:e9:1b:cf:c6:33:60:8a:41:9f: 53:d1:28:f9:19:47:3d:6a:b4:98:31:76:f5:48:74: 86:34:59:9d:80:32:fc:5a:52:52:26:ea:2a:cf:44: c3:e7:fe:d3:08:a3:b4:b3:9b:cf:a3:4b:78:17:29: 67:58:de:30:05:58:22:1a:93:71:47:c8:99:24:0d: fc:47:21:7e:7d:98:09:68:07:2e:b7:14:9a:76:f1: f4:96:41:ce:41:9d:82:8d:fc:ff:f0:c8:76:d2:d4: 5f:00:5d:46:7d:25:01:8b:49:51:bd:a0:d5:0c:55: ec:d3:1f:8e:7f:21:2c:0b:c8:23:28:fa:34:c0:81: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A1:BC:C6:0A:B8:99:8D:9E:00:EA:B1:51:79:CF:D8:5D:20:D5:0D X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:ce:47:96:6f:25:f5:8b:47:ca:80:20:c1:5e:0c:6e:c4:46: 0e:0d:ac:8d:1c:41:5b:2d:fb:d7:02:86:5c:ac:3f:8c:2c:87: 58:4a:73:64:05:81:33:c4:39:01:71:b2:5e:9b:1c:6b:95:9a: 83:b9:ed:be:79:42:d1:b9:01:0c:69:19:86:f1:a6:f9:6a:f2: c8:03:f7:95:54:53:9f:f9:bf:59:45:80:22:98:90:80:dd:8e: 05:41:68:28:35:81:51:a0:ae:cf:7f:84:fc:20:66:6a:69:7a: 28:b2:09:c1:d0:bd:c8:14:e8:ac:99:e9:e2:22:3d:23:31:1e: 7d:05:d5:51:0a:d7:27:e9:11:40:d1:b7:3e:33:fe:ec:67:9c: 61:af:d8:8e:0a:ee:f5:c9:8f:55:58:36:6b:5b:a4:96:2a:e8: d1:df:cb:bb:6a:c6:df:0d:e3:5d:0d:ac:0c:85:74:43:66:ab: 05:91:71:de:e1:b5:bc:11:ee:eb:a3:46:7c:eb:8e:78:f6:1f: f2:66:05:d0:3b:23:8f:f7:51:4a:fa:7e:71:8d:35:f5:90:7c: 45:7b:c7:5f:ea:aa:c0:84:9c:93:2a:e9:9c:29:9a:b2:ec:73: 94:e3:78:20:ba:65:66:b5:57:33:de:e6:ff:dd:76:dc:ed:19: 3c:c0:b8:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUxMjIwMTcxNjQzWhcNMjUxMjI3MTcxNjQzWjAYMRYwFAYD VQQDDA02OTQ2ZDlmYy0xN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFsZWQyD5MzRvvf2cVPrKZpRSkoIkuP1R561DBef7IzAGpQ32CIj83cSLDvJ TrwGzEZ6EVvyhYGvHIpvgUcxTTvLWyniyUnuRoYWoxv8il8ovC1LkHdU+mEQY5WQ yvowGmxLtC/4gPcPeWXEp8xhL6g2ILRdgOCb0IxaagHpG8/GM2CKQZ9T0Sj5GUc9 arSYMXb1SHSGNFmdgDL8WlJSJuoqz0TD5/7TCKO0s5vPo0t4FylnWN4wBVgiGpNx R8iZJA38RyF+fZgJaAcutxSadvH0lkHOQZ2Cjfz/8Mh20tRfAF1GfSUBi0lRvaDV DFXs0x+OfyEsC8gjKPo0wIFn/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKhvMYK uJmNngDqsVF5z9hdINUNMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjzkeWbyX1i0fKgCDBXgxuxEYODayNHEFbLfvXAoZcrD+MLIdYSnNk BYEzxDkBcbJemxxrlZqDue2+eULRuQEMaRmG8ab5avLIA/eVVFOf+b9ZRYAimJCA 3Y4FQWgoNYFRoK7Pf4T8IGZqaXoosgnB0L3IFOismeniIj0jMR59BdVRCtcn6RFA 0bc+M/7sZ5xhr9iOCu71yY9VWDZrW6SWKujR38u7asbfDeNdDawMhXRDZqsFkXHe 4bW8Ee7ro0Z864549h/yZgXQOyOP91FK+n5xjTX1kHxFe8df6qrAhJyTKumcKZqy 7HOU43ggumVmtVcz3ub/3Xbc7Rk8wLjX -----END CERTIFICATE-----Generated at Mon Dec 22 14:31:00 2025 by rpki-client