This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json) Hash identifier: AMhvCT9zEI9JJKU2xviXOb8kigWMuXy2scFXCdCEykk= Subject key identifier: 41:F2:72:C8:97:88:C5:90:4C:65:B3:A0:4C:77:26:44:A2:9F:F0:B4 Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft Manifest number: 0275 Signing time: Sun 21 Dec 2025 00:49:14 +0000 Manifest this update: Sun 21 Dec 2025 00:49:13 +0000 Manifest next update: Sun 28 Dec 2025 00:49:13 +0000 Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: 7QaYBGA8gla8LTZN347J9W+c1wKZf5kFRzGwisJpD4Y=) 2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: 31J9yBONwQ0Slze1cZAXabZLSH29F7mH7omWRFxw8QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Validity Not Before: Dec 21 00:49:13 2025 GMT Not After : Dec 28 00:49:13 2025 GMT Subject: CN=6947440a-f07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:6a:f0:50:71:8a:e4:88:0d:24:88:5a:94: f7:7d:f6:8f:86:f4:1b:26:d6:39:3e:16:97:b6:57: 22:7f:5f:54:04:09:95:ae:cd:ba:14:83:51:33:e9: 53:03:ab:c4:ee:e8:85:8d:36:f1:f0:c9:d6:31:0c: ad:e8:1a:a8:08:57:df:8f:09:1e:49:25:2e:22:d1: d7:fb:94:27:e8:8e:71:8a:3e:c0:fb:b3:4f:fd:81: 31:67:74:c5:f9:25:b6:ab:86:99:c7:75:c4:95:9d: e3:9d:50:71:42:7a:f2:16:15:c5:84:22:39:14:94: 30:89:6c:94:99:32:c8:07:77:47:ef:a6:61:11:00: b3:c9:cc:04:0e:ff:64:fa:1a:40:10:c5:82:53:3c: a5:d8:c1:7d:bb:2c:d4:14:00:1b:35:3f:1a:fe:72: 37:75:8a:26:72:80:7f:16:bc:d3:9b:cf:0a:71:35: c0:e0:89:a0:e2:e8:d7:04:9b:cc:ae:0e:8b:d5:b4: 70:3a:c7:fe:67:81:f6:8e:9d:ea:60:df:ce:5f:4b: 5d:d6:64:30:46:26:97:d7:80:f2:57:48:85:1c:54: 40:e6:23:25:7f:4e:01:fb:7e:b3:9e:26:9a:bb:34: d4:49:6e:a9:e5:5d:95:6b:0f:ae:09:ab:3c:8d:d9: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F2:72:C8:97:88:C5:90:4C:65:B3:A0:4C:77:26:44:A2:9F:F0:B4 X509v3 Authority Key Identifier: keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:60:3f:0d:d7:f7:f6:b8:ae:d5:e3:ca:de:df:1b:02:7b:39: 6c:35:ed:07:77:f6:01:2c:e5:a4:7c:08:6f:65:63:1c:c4:5a: b4:e4:ad:a9:14:f2:8c:1f:2f:1d:6c:39:1d:be:2e:87:a6:e2: 21:84:a4:c4:cc:b2:f1:2b:cb:af:cc:be:35:02:ce:31:47:76: 2f:9e:1b:8e:91:8b:a8:6b:4a:9b:27:03:49:a3:4e:b8:8e:80: 2b:b8:18:72:80:6a:b6:71:79:e7:e8:31:75:75:7f:eb:7c:c8: fa:0c:26:27:2c:f2:fa:05:0e:82:95:95:1f:eb:4b:24:43:bd: b7:7e:c7:43:c1:e7:6d:3f:ed:af:58:ee:db:45:66:32:5b:e1: 75:0b:de:f4:cd:85:b3:4b:b0:2f:e4:34:c3:19:20:65:2e:b5: d4:6c:a6:61:b7:f9:9a:d8:f0:60:13:d3:a3:55:21:d0:8d:07: 08:2e:4e:38:67:d8:85:5c:7d:3e:10:95:43:0f:e9:64:04:37: 26:24:0b:a3:c0:9e:07:37:93:c6:4a:cf:2c:94:da:8b:df:e7: fb:c0:fd:63:52:7e:2c:ba:1b:76:1f:c5:97:e4:22:42:6c:e7: 95:36:09:04:a3:cb:79:0d:9c:87:cf:4d:e4:82:70:e4:2c:e0: 98:67:06:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2 QkQ3NTVGOTYwHhcNMjUxMjIxMDA0OTEzWhcNMjUxMjI4MDA0OTEzWjAYMRYwFAYD VQQDDA02OTQ3NDQwYS1mMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1exq8FBxiuSIDSSIWpT3ffaPhvQbJtY5PhaXtlcif19UBAmVrs26FINRM+lT A6vE7uiFjTbx8MnWMQyt6BqoCFffjwkeSSUuItHX+5Qn6I5xij7A+7NP/YExZ3TF +SW2q4aZx3XElZ3jnVBxQnryFhXFhCI5FJQwiWyUmTLIB3dH76ZhEQCzycwEDv9k +hpAEMWCUzyl2MF9uyzUFAAbNT8a/nI3dYomcoB/FrzTm88KcTXA4Img4ujXBJvM rg6L1bRwOsf+Z4H2jp3qYN/OX0td1mQwRiaX14DyV0iFHFRA5iMlf04B+36zniaa uzTUSW6p5V2Vaw+uCas8jdkmcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHycsiX iMWQTGWzoEx3JkSin/C0MB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3 RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2 TWZKY29BaGt2RHByMTFYNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRYD8N1/f2uK7V48re3xsCezlsNe0Hd/YBLOWkfAhvZWMcxFq05K2p FPKMHy8dbDkdvi6HpuIhhKTEzLLxK8uvzL41As4xR3YvnhuOkYuoa0qbJwNJo064 joAruBhygGq2cXnn6DF1dX/rfMj6DCYnLPL6BQ6ClZUf60skQ723fsdDwedtP+2v WO7bRWYyW+F1C970zYWzS7Av5DTDGSBlLrXUbKZht/ma2PBgE9OjVSHQjQcILk44 Z9iFXH0+EJVDD+lkBDcmJAujwJ4HN5PGSs8slNqL3+f7wP1jUn4suht2H8WX5CJC bOeVNgkEo8t5DZyHz03kgnDkLOCYZwYC -----END CERTIFICATE-----Generated at Sun Dec 21 21:47:31 2025 by rpki-client