This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json) Hash identifier: 7HcHdcnNzuFMgGCBcjXADjeP4AMP9Vuk6HOu49pZcO4= Subject key identifier: 2B:78:AE:D3:40:7B:97:77:48:62:0C:79:C6:D1:09:6E:E0:52:A7:D3 Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft Manifest number: BF Signing time: Sun 21 Dec 2025 05:05:56 +0000 Manifest this update: Sun 21 Dec 2025 05:05:56 +0000 Manifest next update: Sun 28 Dec 2025 05:05:56 +0000 Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: ElQfPH7pX2KPs5+whg4yd6BJJ0lCDiADz/kYjcb2iFw=) 2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: TmQjJA9MkbzXubDuYe9ot48CH91CXeYRqJHt5RQNZcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Validity Not Before: Dec 21 05:05:56 2025 GMT Not After : Dec 28 05:05:56 2025 GMT Subject: CN=69478034-da3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:36:52:e3:a0:2b:2c:6c:46:12:4f:25:11: 59:e0:32:93:53:4a:b9:26:cf:e8:d2:0b:c6:7d:b4: 3e:5d:fe:68:9f:05:f1:27:1d:2b:04:65:96:cf:e6: 00:87:6b:98:85:8a:6e:e5:1b:b8:9e:75:58:47:a4: bc:75:19:4c:18:2c:37:15:74:6b:90:e0:6d:23:56: e6:70:d6:9f:ae:5a:72:04:71:45:81:77:76:16:de: 81:c7:91:cf:5b:7d:a0:a3:02:f7:b5:8c:39:31:15: 74:43:cc:88:c8:9d:e0:d5:ed:ee:7c:ac:d2:4b:e4: 34:fd:a9:e9:2d:ff:90:13:48:d7:a9:be:53:89:66: fa:5b:cf:90:cf:28:57:a9:bc:51:b5:03:f9:96:6f: 75:48:d2:f7:98:85:2f:c7:63:0d:cb:62:53:5b:dd: 58:a4:46:47:2c:82:2d:87:9c:46:78:7b:a8:16:23: 27:bb:57:48:8e:fe:6e:81:90:d4:bd:a9:94:49:5f: 61:cf:3a:64:65:1f:b0:7a:1f:b0:9d:3c:5c:6d:a7: f9:86:a2:cf:01:95:f6:35:0b:22:69:fb:1c:b8:7a: 51:6c:5a:6f:a6:10:08:8e:93:04:1b:3a:08:db:c2: 5e:80:ea:e2:c5:96:4e:c8:81:5e:7d:ec:22:95:98: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:78:AE:D3:40:7B:97:77:48:62:0C:79:C6:D1:09:6E:E0:52:A7:D3 X509v3 Authority Key Identifier: keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5e:35:94:3e:30:30:99:41:ab:75:7c:5f:ad:f1:2c:63:37: dc:09:88:d9:6c:8d:03:5e:02:37:06:a1:a0:e0:ac:48:ec:90: 73:26:ba:fb:06:0b:8c:ec:68:70:f8:8b:1f:95:57:be:1f:28: 84:0c:5e:47:e1:0c:17:d4:6e:91:00:7b:15:2a:ab:7d:c3:67: bd:58:f0:f7:1a:67:d8:db:18:0c:e5:54:17:2d:29:91:cb:e0: 35:c4:f0:4a:50:3c:0c:6d:36:db:3f:46:4b:b2:2d:e9:fc:b7: 5d:d4:88:7e:53:9b:80:71:8e:3e:31:db:b9:43:46:e8:2f:5c: 6a:68:a3:da:6c:45:a9:27:d9:1a:cc:d3:a2:5f:bc:49:ad:dc: 0f:5d:de:cc:45:fd:5c:1f:3a:bd:29:86:a9:82:ff:2a:60:b4: 9b:d3:d4:43:22:7e:3f:40:81:ab:64:82:3d:3c:27:e6:a4:b0: 96:67:f4:d1:e7:35:ba:d5:a2:cb:be:05:16:24:75:c2:76:40: bf:ac:52:84:c3:aa:f7:41:75:8e:ff:88:a3:8a:be:bc:82:77: e5:c1:cb:57:db:82:2a:04:a9:5c:bc:04:e9:8c:d4:49:36:32: ef:99:6b:d2:82:3d:a8:cf:60:09:23:3f:6c:dd:78:16:6a:2a: ab:f3:90:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzMDcxMTAvBgNVBAUTKDRCMDkyREYxMDQyODBGNDVCQzNGMjc5NkY0MDFDQzJC NEM2MTQ0RTkwHhcNMjUxMjIxMDUwNTU2WhcNMjUxMjI4MDUwNTU2WjAYMRYwFAYD VQQDDA02OTQ3ODAzNC1kYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr82UuOgKyxsRhJPJRFZ4DKTU0q5Js/o0gvGfbQ+Xf5onwXxJx0rBGWWz+YA h2uYhYpu5Ru4nnVYR6S8dRlMGCw3FXRrkOBtI1bmcNafrlpyBHFFgXd2Ft6Bx5HP W32gowL3tYw5MRV0Q8yIyJ3g1e3ufKzSS+Q0/anpLf+QE0jXqb5TiWb6W8+QzyhX qbxRtQP5lm91SNL3mIUvx2MNy2JTW91YpEZHLIIth5xGeHuoFiMnu1dIjv5ugZDU vamUSV9hzzpkZR+weh+wnTxcbaf5hqLPAZX2NQsiafscuHpRbFpvphAIjpMEGzoI 28JegOrixZZOyIFefewilZjr6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt4rtNA e5d3SGIMecbRCW7gUqfTMB8GA1UdIwQYMBaAFEsJLfEEKA9FvD8nlvQBzCtMYUTp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8yQkM5MjQ1MEJF Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0QwVzhQeWVXOUFITUsweGhS T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODMwNy8yQkM5MjQ1MEJFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0Qw VzhQeWVXOUFITUsweGhST2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfXjWUPjAwmUGrdXxfrfEsYzfcCYjZbI0DXgI3BqGg4KxI7JBzJrr7 BguM7Ghw+IsflVe+HyiEDF5H4QwX1G6RAHsVKqt9w2e9WPD3GmfY2xgM5VQXLSmR y+A1xPBKUDwMbTbbP0ZLsi3p/Ldd1Ih+U5uAcY4+Mdu5Q0boL1xqaKPabEWpJ9ka zNOiX7xJrdwPXd7MRf1cHzq9KYapgv8qYLSb09RDIn4/QIGrZII9PCfmpLCWZ/TR 5zW61aLLvgUWJHXCdkC/rFKEw6r3QXWO/4ijir68gnflwctX24IqBKlcvATpjNRJ NjLvmWvSgj2oz2AJIz9s3XgWaiqr85DC -----END CERTIFICATE-----Generated at Sun Dec 21 11:27:43 2025 by rpki-client