This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: PDXDXMJ9H8gCoqKcI67sZjTFVshDCXwxF8czeFFzp4E= Subject key identifier: 99:43:36:92:6C:EF:D5:E1:49:72:C8:1D:E3:F0:C1:5E:FE:AD:2E:83 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: 0104 Signing time: Sun 07 Dec 2025 03:20:51 +0000 Manifest this update: Sun 07 Dec 2025 03:20:50 +0000 Manifest next update: Sun 14 Dec 2025 03:20:50 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: 7vOGOD58V65R0oH8rax2XVrmcebJNVx7L2lMD8IS3OA=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Dec 7 03:20:50 2025 GMT Not After : Dec 14 03:20:50 2025 GMT Subject: CN=6934f292-91ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:c4:a0:7a:f4:54:ec:63:86:3c:b0:58:63: 3e:7b:eb:34:8a:f7:51:3d:69:75:d3:2a:66:57:df: 0a:88:42:2b:a0:16:d0:c3:36:0b:8d:86:0f:f6:57: ab:59:64:66:0d:01:13:b1:3e:b1:de:c6:71:ce:e2: 8d:39:ce:98:78:ad:41:e5:2d:88:c7:e9:ab:21:72: 70:7a:2f:35:13:4f:a4:34:6e:c0:6b:90:ff:e0:fe: a0:b4:63:99:26:9c:ed:bc:67:f6:78:16:66:06:81: 0b:ef:48:ce:10:24:40:e7:a3:b6:01:7f:7f:0a:fc: 5b:81:76:bc:85:aa:67:84:0b:b6:c1:33:d4:42:1c: 9d:ba:14:81:89:dd:79:52:f6:ad:e2:8f:9c:09:a6: 7d:43:8d:36:9e:ae:30:84:a2:4e:28:17:3c:3b:1a: 13:36:59:cd:cd:ff:f1:3c:ab:79:61:d0:ab:5d:11: f8:fb:83:b8:7d:2b:c7:3e:a7:73:ce:b7:f0:3f:02: 53:12:55:b5:c0:3a:d0:97:ed:93:c5:f7:30:1e:12: 3b:26:61:64:b6:f3:19:da:53:f9:32:ef:af:ce:af: 63:9e:66:ef:03:e7:67:12:e3:a8:4b:eb:8a:84:4f: 09:b1:90:84:a6:91:bc:5b:22:d5:bf:60:ce:02:04: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:43:36:92:6C:EF:D5:E1:49:72:C8:1D:E3:F0:C1:5E:FE:AD:2E:83 X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ce:ba:33:48:3d:11:2e:da:d8:ef:e2:a1:7d:0d:ff:4a:35: 8f:0f:05:13:21:e6:a7:75:69:a4:57:19:69:b3:bc:c7:b7:3d: 57:28:70:df:ed:55:6b:df:8b:d1:d6:b7:31:88:de:87:d3:16: e1:d4:58:5d:46:1e:eb:37:64:c6:98:cc:aa:93:72:af:f2:3c: cf:39:a7:26:3e:bb:16:d2:62:9e:dc:11:3e:bc:4d:2e:d9:a7: bd:46:ca:47:cf:f0:28:9e:be:ba:8b:fd:9e:15:eb:28:01:4e: 35:62:17:ea:b4:6c:43:1d:15:8b:14:d2:9d:8c:be:67:5f:21: 5c:48:c9:7d:5c:57:04:ba:29:b7:26:7b:7f:a0:8b:1d:a6:16: 6c:f8:c5:47:a2:2a:02:77:58:75:a0:46:5f:c8:8c:d6:0e:c1: 07:8f:1f:ee:56:a3:f0:67:ae:e2:ae:20:70:b3:a6:a0:27:5e: 20:e5:d5:b9:a3:3d:4d:76:b2:6f:70:d3:da:ae:24:69:14:f8: 68:0b:29:84:6c:4a:cc:27:51:de:ce:22:d7:89:7c:be:20:1b: 89:b0:41:f1:60:19:bd:23:72:d1:0d:bd:bc:ad:2a:37:89:18: 75:34:61:7f:5e:ba:2a:3c:03:d7:bb:79:51:85:57:a9:da:59: 53:4c:32:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUxMjA3MDMyMDUwWhcNMjUxMjE0MDMyMDUwWjAYMRYwFAYD VQQDEw02OTM0ZjI5Mi05MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZbEoHr0VOxjhjywWGM+e+s0ivdRPWl10ypmV98KiEIroBbQwzYLjYYP9ler WWRmDQETsT6x3sZxzuKNOc6YeK1B5S2Ix+mrIXJwei81E0+kNG7Aa5D/4P6gtGOZ JpztvGf2eBZmBoEL70jOECRA56O2AX9/CvxbgXa8hapnhAu2wTPUQhyduhSBid15 Uvat4o+cCaZ9Q402nq4whKJOKBc8OxoTNlnNzf/xPKt5YdCrXRH4+4O4fSvHPqdz zrfwPwJTElW1wDrQl+2TxfcwHhI7JmFktvMZ2lP5Mu+vzq9jnmbvA+dnEuOoS+uK hE8JsZCEppG8WyLVv2DOAgRn9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlDNpJs 79XhSXLIHePwwV7+rS6DMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWzrozSD0RLtrY7+KhfQ3/SjWPDwUTIeandWmkVxlps7zHtz1XKHDf 7VVr34vR1rcxiN6H0xbh1FhdRh7rN2TGmMyqk3Kv8jzPOacmPrsW0mKe3BE+vE0u 2ae9RspHz/Aonr66i/2eFesoAU41YhfqtGxDHRWLFNKdjL5nXyFcSMl9XFcEuim3 Jnt/oIsdphZs+MVHoioCd1h1oEZfyIzWDsEHjx/uVqPwZ67iriBws6agJ14g5dW5 oz1NdrJvcNPariRpFPhoCymEbErMJ1HeziLXiXy+IBuJsEHxYBm9I3LRDb28rSo3 iRh1NGF/XroqPAPXu3lRhVep2llTTDIk -----END CERTIFICATE-----Generated at Sun Dec 7 07:09:01 2025 by rpki-client