This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft File: rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json) Hash identifier: h34Xh/ZFySASmNdkgOsTBr2ttciFQp///j2xA/R3IbI= Subject key identifier: 0B:41:6E:58:9B:C3:C2:29:9B:8F:BD:E8:EF:7D:AE:A6:E6:CD:F8:67 Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft Manifest number: 0151 Signing time: Mon 15 Dec 2025 03:38:35 +0000 Manifest this update: Mon 15 Dec 2025 03:38:34 +0000 Manifest next update: Mon 22 Dec 2025 03:38:34 +0000 Files and hashes: 1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: 2G01dvMT1KPeXLzknrkKONiXAn8wCHl6vRsxQBhEV28=) 2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: SK6ZvVianDlVw+18irRafax8Eg6g34dqTzqJORJNKeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Validity Not Before: Dec 15 03:38:34 2025 GMT Not After : Dec 22 03:38:34 2025 GMT Subject: CN=693f82bb-16bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:aa:8b:d7:f7:ac:3e:f5:37:d2:71:31:7b: 71:5b:f6:cf:0c:5f:57:2a:f2:5d:46:cf:f5:25:81: 68:ea:e0:15:05:d5:01:e0:15:52:16:8f:b3:8e:51: fe:37:3b:61:69:38:d1:bc:c2:0f:10:bb:0f:d1:d8: eb:57:7e:6b:ee:d8:58:da:66:0c:64:5a:ce:78:80: f0:e0:e8:6e:45:dd:e5:ea:0d:41:d2:c6:d2:aa:6e: 9e:71:cc:61:27:36:44:97:fe:74:8c:bd:88:24:60: 7f:63:60:bb:f4:64:05:3c:cb:9b:23:55:5d:3f:e1: 33:c9:5c:7d:fa:2c:6f:65:bf:b8:77:c1:6a:d9:8e: 43:de:79:14:0d:15:58:70:61:76:39:13:49:06:3b: 30:26:e0:3b:41:17:57:17:fd:2b:8c:b4:b9:fc:1e: 2d:68:e7:9a:e8:d6:1b:8b:af:dc:25:25:c6:72:93: 8c:3e:0c:58:42:85:fb:c6:35:d8:76:52:19:35:11: 21:63:34:a4:55:02:f1:b5:38:53:f4:21:96:78:13: bb:10:7a:44:84:4b:4e:45:39:1f:09:6c:39:f8:3c: e1:20:3c:89:24:7e:eb:7e:36:d0:64:91:28:df:6f: cc:1b:c4:f4:01:26:f8:da:18:9c:15:6b:07:6a:8a: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:41:6E:58:9B:C3:C2:29:9B:8F:BD:E8:EF:7D:AE:A6:E6:CD:F8:67 X509v3 Authority Key Identifier: keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:96:d1:62:c0:c5:72:4e:70:54:e6:94:36:43:fd:27:35:a1: 62:15:bb:39:57:30:5b:0b:7a:05:21:71:53:72:31:7f:22:d1: 6c:ef:8f:5c:91:43:0a:92:f5:7d:76:8d:f5:62:9a:50:9c:b4: 71:52:61:87:80:be:23:d1:38:f9:13:f0:1c:08:fa:a3:cd:5c: a2:48:fd:ac:76:ab:61:b0:38:b1:35:ff:02:5c:dd:f7:e0:2c: eb:d6:96:f8:54:ae:1b:2e:61:86:43:a4:06:c6:b6:c2:1c:7c: f8:ac:7b:7b:6f:1e:48:0f:51:b7:a8:6e:54:b8:e3:e8:54:97: 51:cf:a0:0d:30:09:38:00:72:6d:00:1b:e0:1b:19:9c:62:21: 3a:0b:75:f0:a5:e6:13:73:36:6b:e6:54:78:b3:77:5c:13:12: 35:8d:f6:2d:6c:73:d2:ea:ee:96:3e:af:d2:91:13:68:88:a0: d3:db:ef:95:99:6b:73:39:3e:cd:5d:89:20:4f:eb:d8:8d:e3: 4a:1b:d7:f3:38:0e:17:8f:52:d5:8f:b4:9c:86:81:b8:5b:eb: a4:97:3e:a8:e5:6c:1e:0b:f8:e8:08:a5:63:1b:7e:79:7e:27: 75:91:ef:68:52:72:ff:42:ea:90:75:d4:ea:70:66:11:4e:6e: 32:fd:78:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0OTgxMTAvBgNVBAUTKEFEQ0Q1QTREQjU5OUM3MUFFRDkzRDA5NkFCMTRDQUZB MDgxNUU2MTcwHhcNMjUxMjE1MDMzODM0WhcNMjUxMjIyMDMzODM0WjAYMRYwFAYD VQQDDA02OTNmODJiYi0xNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxaqi9f3rD71N9JxMXtxW/bPDF9XKvJdRs/1JYFo6uAVBdUB4BVSFo+zjlH+ NzthaTjRvMIPELsP0djrV35r7thY2mYMZFrOeIDw4OhuRd3l6g1B0sbSqm6eccxh JzZEl/50jL2IJGB/Y2C79GQFPMubI1VdP+EzyVx9+ixvZb+4d8Fq2Y5D3nkUDRVY cGF2ORNJBjswJuA7QRdXF/0rjLS5/B4taOea6NYbi6/cJSXGcpOMPgxYQoX7xjXY dlIZNREhYzSkVQLxtThT9CGWeBO7EHpEhEtORTkfCWw5+DzhIDyJJH7rfjbQZJEo 32/MG8T0ASb42hicFWsHaopTaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtBblib w8Ipm4+96O99rqbmzfhnMB8GA1UdIwQYMBaAFK3NWk21mcca7ZPQlqsUyvoIFeYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ5OC9CM0M4QTk3Q0RG QjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4cnRrOUNXcXhUSy1nZ1Y1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjMWFUYldaeHhydGs5Q1dxeFRLLWdnVjVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ5OC9CM0M4QTk3Q0RGQjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4 cnRrOUNXcXhUSy1nZ1Y1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSltFiwMVyTnBU5pQ2Q/0nNaFiFbs5VzBbC3oFIXFTcjF/ItFs749c kUMKkvV9do31YppQnLRxUmGHgL4j0Tj5E/AcCPqjzVyiSP2sdqthsDixNf8CXN33 4Czr1pb4VK4bLmGGQ6QGxrbCHHz4rHt7bx5ID1G3qG5UuOPoVJdRz6ANMAk4AHJt ABvgGxmcYiE6C3XwpeYTczZr5lR4s3dcExI1jfYtbHPS6u6WPq/SkRNoiKDT2++V mWtzOT7NXYkgT+vYjeNKG9fzOA4Xj1LVj7SchoG4W+uklz6o5WweC/joCKVjG355 fid1ke9oUnL/QuqQddTqcGYRTm4y/Xg3 -----END CERTIFICATE-----Generated at Mon Dec 15 20:20:51 2025 by rpki-client