This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: LQZc1P/iN8OH7bsl4LZODuVgIg174zx/OMDDRZRajqk= Subject key identifier: 99:47:8A:D1:A7:6B:D5:02:5C:3D:F3:27:BF:E6:34:6D:5B:81:47:63 Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 01C8 Signing time: Sun 21 Dec 2025 02:16:52 +0000 Manifest this update: Sun 21 Dec 2025 02:16:52 +0000 Manifest next update: Sun 28 Dec 2025 02:16:52 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: zBJ4oyOZwaB05u73xJduXw0ZUqQgB1nNO1el3aUPkuc=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Dec 21 02:16:52 2025 GMT Not After : Dec 28 02:16:52 2025 GMT Subject: CN=69475894-3867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:51:74:70:5a:54:e1:61:21:1a:62:0e:5e: e2:19:df:b7:5f:e3:2b:0b:e3:3e:78:46:d6:d1:13: 01:4f:dc:70:b1:be:c1:db:80:7b:04:96:ce:69:18: b6:07:1c:59:8e:72:92:55:02:fe:6a:32:61:13:d0: 23:f4:ca:51:31:14:52:86:c1:ca:ba:0b:e3:e4:cd: db:3d:2a:7d:c0:99:57:7f:46:22:a7:a6:09:94:bc: c9:ed:9d:9e:f5:91:db:2f:75:ab:ea:2e:37:8b:f6: 90:ee:8e:98:ba:23:f7:e7:08:73:ac:bc:30:dd:50: 09:7c:de:0d:a0:05:58:62:1b:83:15:8d:18:06:d7: e2:29:ae:d0:8f:bc:8f:a4:f6:40:95:21:15:cc:3d: c3:7a:f6:5b:c1:20:22:4d:9d:dc:16:42:92:94:d2: 8c:a0:0b:16:14:7e:23:2b:e3:7f:4b:f7:1e:4f:a0: 6b:7b:44:8b:21:4e:9e:3d:3b:48:cd:19:70:50:32: 82:c1:52:c8:e0:48:02:35:fd:73:d6:2d:89:be:03: 54:07:52:47:6a:3f:2f:69:25:00:cd:92:0b:29:90: b7:b7:2c:6b:01:e9:70:f9:7c:f5:69:86:a8:e1:22: c2:d7:ee:fd:55:c1:56:57:71:75:55:46:5f:39:e0: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:47:8A:D1:A7:6B:D5:02:5C:3D:F3:27:BF:E6:34:6D:5B:81:47:63 X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7a:e1:ac:52:1a:2d:6d:be:c9:79:e9:96:8f:5f:47:5f:9d: 1b:d1:0e:c2:b5:f5:90:15:06:40:ab:ef:e2:3d:cd:1e:83:ff: 97:a2:4a:b2:13:a7:02:89:76:9c:12:2a:70:f9:70:28:a7:a6: d1:07:23:7b:1f:76:39:85:2c:56:3a:d4:60:78:0d:2f:04:54: f1:fc:42:36:fd:57:71:7d:a1:22:17:23:8d:ab:1a:ae:e8:1b: b9:a7:5c:de:ba:cc:66:aa:25:1d:02:3d:75:f1:6d:a3:54:64: 7f:6d:cb:e3:b2:a8:08:00:53:af:02:5a:c9:a5:a1:2c:f2:12: 18:85:c5:5e:fb:a6:bf:c2:b8:a9:00:bc:99:9c:bb:a2:aa:eb: cf:b2:04:38:5e:5d:30:c7:07:8b:f7:59:15:02:d9:0d:23:f1: 97:6d:a9:b8:bf:2f:ff:9d:f5:b0:20:64:76:4b:4f:2c:4e:92: 98:8f:56:9e:84:f5:5d:a7:1b:b8:48:8c:15:82:82:34:c5:7d: d3:bf:d5:37:a5:b5:a8:3b:e4:b9:a1:5f:ed:15:01:bd:80:0a: d0:2a:c0:c1:bc:ec:00:61:56:a6:9b:66:58:c3:cb:f2:a6:f2: ea:c5:50:d2:f2:24:1c:9b:2f:99:12:7f:f0:d3:4e:1a:fd:89: 2f:e2:b3:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUxMjIxMDIxNjUyWhcNMjUxMjI4MDIxNjUyWjAYMRYwFAYD VQQDDA02OTQ3NTg5NC0zODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnS1RdHBaVOFhIRpiDl7iGd+3X+MrC+M+eEbW0RMBT9xwsb7B24B7BJbOaRi2 BxxZjnKSVQL+ajJhE9Aj9MpRMRRShsHKugvj5M3bPSp9wJlXf0Yip6YJlLzJ7Z2e 9ZHbL3Wr6i43i/aQ7o6YuiP35whzrLww3VAJfN4NoAVYYhuDFY0YBtfiKa7Qj7yP pPZAlSEVzD3DevZbwSAiTZ3cFkKSlNKMoAsWFH4jK+N/S/ceT6Bre0SLIU6ePTtI zRlwUDKCwVLI4EgCNf1z1i2JvgNUB1JHaj8vaSUAzZILKZC3tyxrAelw+Xz1aYao 4SLC1+79VcFWV3F1VUZfOeAoDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlHitGn a9UCXD3zJ7/mNG1bgUdjMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7euGsUhotbb7JeemWj19HX50b0Q7CtfWQFQZAq+/iPc0eg/+Xokqy E6cCiXacEipw+XAop6bRByN7H3Y5hSxWOtRgeA0vBFTx/EI2/VdxfaEiFyONqxqu 6Bu5p1zeusxmqiUdAj118W2jVGR/bcvjsqgIAFOvAlrJpaEs8hIYhcVe+6a/wrip ALyZnLuiquvPsgQ4Xl0wxweL91kVAtkNI/GXbam4vy//nfWwIGR2S08sTpKYj1ae hPVdpxu4SIwVgoI0xX3Tv9U3pbWoO+S5oV/tFQG9gArQKsDBvOwAYVamm2ZYw8vy pvLqxVDS8iQcmy+ZEn/w004a/Ykv4rO1 -----END CERTIFICATE-----Generated at Sun Dec 21 23:44:43 2025 by rpki-client