This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: NzcguhJ9QvaHniWrj/+jm+9+YEiRiiK6BBsXFg2mOME= Subject key identifier: F6:BE:7A:27:A6:98:2B:AF:3B:07:9B:30:40:8D:87:59:C5:4E:B6:B8 Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 06C6 Signing time: Thu 18 Dec 2025 21:33:41 +0000 Manifest this update: Thu 18 Dec 2025 21:33:41 +0000 Manifest next update: Thu 25 Dec 2025 21:33:41 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: BoQ2Taom107Z7AzTigXGP0+3Ag7s3pXDjNr3ucvADTQ=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: pKScxQMxg1WdvXI6uB4aKpZXfYDWDJw+VDC0QK45Pf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Dec 18 21:33:41 2025 GMT Not After : Dec 25 21:33:41 2025 GMT Subject: CN=69447335-5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:8b:8a:52:35:88:c0:3e:2e:e2:72:ab:c4: 82:f3:09:8f:76:a7:4d:6e:c4:92:4f:32:91:09:44: ae:9a:40:41:e6:6c:f3:c7:4c:1c:af:8b:68:61:e9: d0:f0:71:31:2d:89:d6:46:d6:82:34:42:3e:02:69: 74:09:42:1d:ea:93:3e:9e:d1:67:9f:b5:73:ba:ed: cb:68:b9:c4:d7:58:98:75:4c:fa:57:45:d4:ea:d0: 71:e4:fc:d0:05:4e:b4:d0:cb:f4:35:64:84:e0:97: b5:89:b0:99:52:9a:91:3e:00:fc:e3:28:a5:59:58: 71:54:e4:ef:e2:0d:2d:cd:df:f9:69:ba:7f:32:a3: a5:0c:e2:0b:0e:b7:8a:a0:3a:75:20:28:94:26:f4: 57:cf:63:76:51:af:1e:2f:c2:4d:36:49:52:55:83: fc:dc:b0:9c:00:3b:a0:ae:ab:8d:28:43:61:f3:10: 03:37:8c:c4:3e:10:d7:68:98:df:02:63:da:03:14: 09:f1:55:bd:75:a3:9b:bb:cd:15:1a:b9:ed:ac:e6: b8:fc:56:e6:d4:3f:34:dd:f2:44:12:c1:97:2c:e3: 17:d7:de:1d:a5:21:31:d4:33:21:18:c7:61:ca:d3: ef:17:74:27:87:a4:4d:68:2a:97:de:a1:97:be:db: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BE:7A:27:A6:98:2B:AF:3B:07:9B:30:40:8D:87:59:C5:4E:B6:B8 X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:87:e3:4c:81:9b:fe:ea:90:df:2b:e8:74:46:88:f9:f3:26: 97:b1:77:9c:26:5b:85:98:55:7c:3f:7d:d5:de:47:58:92:7e: b7:56:1c:48:85:fe:75:40:11:13:db:97:a2:6e:ba:60:16:19: de:ac:c3:7a:e4:68:ff:49:79:a9:0c:02:79:00:97:df:74:b1: 7e:92:86:57:5a:6b:f1:9e:0e:ca:42:b9:fb:76:ba:95:d0:3c: da:31:a3:0c:de:ca:c6:b8:08:69:98:fe:ec:6f:1c:7f:72:2a: a9:2a:c6:ca:2e:4c:33:21:22:15:16:2f:3a:ad:45:40:41:34: 78:c6:98:a9:69:74:bf:a4:06:96:47:e3:7f:d7:27:c5:78:98: 4e:d2:26:23:47:b8:18:72:d0:6f:26:46:43:6c:2a:8c:9b:63: c3:db:0f:6d:09:34:43:d1:a0:52:f7:2c:9f:48:e8:d8:f5:0c: 49:50:ae:e6:2d:b4:1c:28:c6:ca:4b:36:d3:f6:5b:c6:bf:13: e5:39:64:fa:f5:56:e5:71:89:42:e4:cc:c1:a5:45:91:a3:8f: 97:77:83:aa:df:bc:6b:53:db:9c:9f:0f:aa:df:3d:52:b9:4c: 5a:ea:5f:8a:68:28:ce:74:4f:e5:32:98:cc:66:3e:24:f5:94: d4:ae:d7:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjUxMjE4MjEzMzQxWhcNMjUxMjI1MjEzMzQxWjAYMRYwFAYD VQQDDA02OTQ0NzMzNS01NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp2LilI1iMA+LuJyq8SC8wmPdqdNbsSSTzKRCUSumkBB5mzzx0wcr4toYenQ 8HExLYnWRtaCNEI+Aml0CUId6pM+ntFnn7Vzuu3LaLnE11iYdUz6V0XU6tBx5PzQ BU600Mv0NWSE4Je1ibCZUpqRPgD84yilWVhxVOTv4g0tzd/5abp/MqOlDOILDreK oDp1ICiUJvRXz2N2Ua8eL8JNNklSVYP83LCcADugrquNKENh8xADN4zEPhDXaJjf AmPaAxQJ8VW9daObu80VGrntrOa4/Fbm1D803fJEEsGXLOMX194dpSEx1DMhGMdh ytPvF3Qnh6RNaCqX3qGXvtvfwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa+eiem mCuvOwebMECNh1nFTra4MB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBth+NMgZv+6pDfK+h0Roj58yaXsXecJluFmFV8P33V3kdYkn63VhxI hf51QBET25eibrpgFhnerMN65Gj/SXmpDAJ5AJffdLF+koZXWmvxng7KQrn7drqV 0DzaMaMM3srGuAhpmP7sbxx/ciqpKsbKLkwzISIVFi86rUVAQTR4xpipaXS/pAaW R+N/1yfFeJhO0iYjR7gYctBvJkZDbCqMm2PD2w9tCTRD0aBS9yyfSOjY9QxJUK7m LbQcKMbKSzbT9lvGvxPlOWT69VblcYlC5MzBpUWRo4+Xd4Oq37xrU9ucnw+q3z1S uUxa6l+KaCjOdE/lMpjMZj4k9ZTUrtc0 -----END CERTIFICATE-----Generated at Fri Dec 19 12:48:53 2025 by rpki-client