This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: RutRSr+lavWVlqzkchj9cdwpseJR8hmDrxaKkckuxpk= Subject key identifier: 33:9B:AD:A8:6D:F1:F9:DD:25:AA:76:19:6D:51:0C:CB:59:3B:3A:30 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 121D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 1203 Signing time: Sat 20 Dec 2025 16:54:07 +0000 Manifest this update: Sat 20 Dec 2025 16:54:06 +0000 Manifest next update: Sat 27 Dec 2025 16:54:06 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: WEkatn3xTvdQTMUaeigq6IA17Zwar102lqFkbyc/vh0=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4637 (0x121d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Dec 20 16:54:06 2025 GMT Not After : Dec 27 16:54:06 2025 GMT Subject: CN=6946d4af-2275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:02:00:ab:4a:a5:21:a0:3f:ee:a0:d3:dd: 1d:24:64:2f:21:ab:0f:4b:e6:f4:bd:24:2b:d3:99: 82:d3:93:40:55:e0:0b:45:8f:e1:22:6f:3e:37:c2: 25:ed:12:fd:80:e7:4a:b6:d3:67:35:bf:44:fd:e0: 69:13:b3:9b:f7:7a:0d:48:1c:d2:f6:6d:e1:29:9e: 9c:f1:b0:8d:b4:09:ef:9d:cd:fc:7f:52:1a:67:98: 68:a8:60:61:26:c9:4b:1e:b7:d6:7b:72:af:9b:57: ec:58:aa:3a:83:46:ec:84:af:81:44:93:72:7f:09: 14:38:49:e9:2b:ce:3d:d0:63:1e:55:28:1c:50:8f: 58:05:ef:73:ae:66:1d:73:2a:2d:73:40:a5:e3:b1: 5e:a6:1b:9a:f1:2b:eb:93:64:19:da:f3:37:4a:a1: 8a:40:bf:64:d5:fa:50:25:55:46:33:2e:60:f9:a8: e2:d0:4b:5e:e0:f7:48:8f:8f:b5:93:16:e9:4c:83: 45:1d:15:25:77:e3:60:ee:7e:81:03:20:97:b7:db: 73:3e:ad:5f:2a:4e:8e:a4:9f:f2:49:f1:8a:97:c9: 02:79:5b:fd:b1:ef:c6:64:7f:20:6b:81:f3:91:b5: dd:49:c6:c7:a8:a3:e8:18:2b:27:6a:cf:8c:55:f1: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9B:AD:A8:6D:F1:F9:DD:25:AA:76:19:6D:51:0C:CB:59:3B:3A:30 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3f:47:09:05:85:78:47:cc:4a:26:98:cc:2f:29:a8:46:f3: cd:ed:1e:8d:ca:52:04:de:c1:e2:dc:76:62:61:c2:cc:d6:f2: 0d:0f:fe:c3:aa:ca:87:9f:40:14:82:3f:52:10:8a:c9:d5:cf: 16:e2:3c:a2:1b:d9:26:e6:6a:71:82:69:14:15:65:13:7e:1d: 63:2f:f6:e6:c5:74:28:75:15:ae:6f:cc:84:57:48:22:ee:72: 36:16:21:e3:a5:44:73:22:c3:2e:0a:20:9b:bf:f4:b5:2b:81: 90:d1:fd:d5:00:0b:79:1c:f9:82:d8:88:43:c0:84:33:3d:02: 73:58:b7:7f:c0:d4:6b:97:25:f5:0c:91:35:d2:0d:21:18:64: 0e:f2:eb:c1:17:5d:c1:77:b6:36:cc:00:13:c9:48:9f:f7:ea: 51:3f:b2:48:7d:1a:8e:f8:db:3a:bb:0d:85:e6:c5:69:82:24: fd:2a:e8:f8:46:63:7f:37:1c:08:a9:36:19:b3:c9:91:0a:d8: e4:e0:08:e9:19:73:f5:04:5d:a5:96:a4:c8:b6:4c:18:22:55: d0:3e:ec:4d:e4:f6:38:bc:14:b2:ba:a2:5b:90:54:71:75:8f: b6:31:99:7f:89:02:00:bd:a5:16:b7:38:4b:e4:09:4b:96:6e: 24:20:38:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUxMjIwMTY1NDA2WhcNMjUxMjI3MTY1NDA2WjAYMRYwFAYD VQQDDA02OTQ2ZDRhZi0yMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d4CAKtKpSGgP+6g090dJGQvIasPS+b0vSQr05mC05NAVeALRY/hIm8+N8Il 7RL9gOdKttNnNb9E/eBpE7Ob93oNSBzS9m3hKZ6c8bCNtAnvnc38f1IaZ5hoqGBh JslLHrfWe3Kvm1fsWKo6g0bshK+BRJNyfwkUOEnpK8490GMeVSgcUI9YBe9zrmYd cyotc0Cl47Fephua8Svrk2QZ2vM3SqGKQL9k1fpQJVVGMy5g+aji0Ete4PdIj4+1 kxbpTINFHRUld+Ng7n6BAyCXt9tzPq1fKk6OpJ/ySfGKl8kCeVv9se/GZH8ga4Hz kbXdScbHqKPoGCsnas+MVfEwhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDObraht 8fndJap2GW1RDMtZOzowMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIP0cJBYV4R8xKJpjMLymoRvPN7R6NylIE3sHi3HZiYcLM1vIND/7D qsqHn0AUgj9SEIrJ1c8W4jyiG9km5mpxgmkUFWUTfh1jL/bmxXQodRWub8yEV0gi 7nI2FiHjpURzIsMuCiCbv/S1K4GQ0f3VAAt5HPmC2IhDwIQzPQJzWLd/wNRrlyX1 DJE10g0hGGQO8uvBF13Bd7Y2zAATyUif9+pRP7JIfRqO+Ns6uw2F5sVpgiT9Kuj4 RmN/NxwIqTYZs8mRCtjk4AjpGXP1BF2llqTItkwYIlXQPuxN5PY4vBSyuqJbkFRx dY+2MZl/iQIAvaUWtzhL5AlLlm4kIDhx -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:51 2025 by rpki-client