This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: OGBX9Qn/WLgHlIZ2pY6WGdb7Vy0yubBfDKDPKQ0aZL0= Subject key identifier: 20:EF:FF:BA:B8:FB:B7:AE:22:E6:88:F9:B0:01:F4:2B:58:94:FE:87 Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0C00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0BF9 Signing time: Thu 04 Dec 2025 18:13:55 +0000 Manifest this update: Thu 04 Dec 2025 18:13:55 +0000 Manifest next update: Thu 11 Dec 2025 18:13:55 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: nDl9wEiuw70jYvrlOyT43wWtvZSMsQmazg7lXmLwjT0=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3072 (0xc00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Dec 4 18:13:55 2025 GMT Not After : Dec 11 18:13:55 2025 GMT Subject: CN=6931cf63-80a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:47:52:55:41:2d:46:67:be:26:c5:04:2d: 73:87:9d:4c:3d:95:ae:89:1a:1a:f2:a4:46:97:50: f7:c0:82:02:0f:a2:81:a9:fd:2a:76:b2:b5:99:d9: e7:13:89:46:10:75:70:12:ac:1b:dd:c7:23:20:74: 1f:23:23:06:67:c7:f2:0b:43:71:c7:eb:0d:2a:d0: 9e:ba:44:a1:1b:75:4a:e0:10:89:7e:e0:88:c0:c2: d6:71:4c:8d:fe:6f:c0:b9:78:4f:f5:8f:30:26:ee: f7:8a:10:e4:60:4d:d4:90:d6:ad:dc:f1:0d:69:e7: c0:42:ec:a1:3c:c2:85:41:df:2d:92:4e:0d:67:24: 85:72:ee:e3:47:2e:5d:3f:2f:18:2f:1d:43:ca:23: 04:a3:b4:19:f6:a4:ab:5d:46:74:b9:a0:fe:66:b1: 55:b0:44:0f:b6:ae:7f:42:3f:ba:c8:3e:23:28:55: da:37:03:10:1f:0a:c7:69:de:f1:cc:26:34:c4:f8: 18:60:45:34:30:2e:d8:0f:5a:4f:f6:0d:32:0a:ef: a3:11:3a:79:4d:a3:71:03:16:bf:40:2e:e4:8c:97: d6:d0:22:d1:f8:75:07:13:c1:cb:be:b9:4c:00:1e: 76:84:c3:8c:45:db:16:fe:6e:b7:85:7f:b5:a8:26: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EF:FF:BA:B8:FB:B7:AE:22:E6:88:F9:B0:01:F4:2B:58:94:FE:87 X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:37:63:6e:05:e2:0b:51:12:ae:c6:8e:f2:7b:6c:44:0c:a7: da:8d:ff:a5:b4:d2:02:a2:e2:0a:10:a7:4b:60:e5:7a:bd:54: 55:47:c0:45:0b:fd:c8:bf:d8:f8:e9:da:f1:f8:20:30:e4:53: 43:d1:87:f8:76:15:48:61:b1:87:22:c6:2b:82:c9:1f:47:0a: e5:49:92:ba:39:f8:53:a9:46:d0:fd:c2:74:19:71:7a:10:9b: 8f:f3:09:12:47:03:2a:a8:47:df:d6:fc:27:22:4f:3a:19:52: ea:77:19:2b:07:1d:df:96:1b:39:cc:40:b1:e5:3b:a3:2b:4f: 6e:9c:7d:26:3a:45:99:a6:ea:ad:24:12:e5:c4:a8:ae:86:dc: f7:b1:11:79:0b:51:41:68:53:ff:73:17:3f:c0:07:1a:c0:32: 45:dc:d1:3a:1a:6a:ea:30:6e:99:95:a7:72:bd:6b:34:00:83: 26:0f:27:64:46:fc:47:c7:a3:bc:57:76:df:2b:01:50:10:4d: 6f:bf:4c:74:de:5b:ec:d8:7b:22:9b:a5:b9:35:0b:b4:3b:c3: 34:fa:9f:82:ed:1a:60:e9:e9:c9:a0:c5:09:79:fd:74:92:9e: 47:43:fa:e9:c3:0a:d2:83:9d:e7:99:d2:26:a2:28:89:43:97: fd:b7:50:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUxMjA0MTgxMzU1WhcNMjUxMjExMTgxMzU1WjAYMRYwFAYD VQQDEw02OTMxY2Y2My04MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgJHUlVBLUZnvibFBC1zh51MPZWuiRoa8qRGl1D3wIICD6KBqf0qdrK1mdnn E4lGEHVwEqwb3ccjIHQfIyMGZ8fyC0Nxx+sNKtCeukShG3VK4BCJfuCIwMLWcUyN /m/AuXhP9Y8wJu73ihDkYE3UkNat3PENaefAQuyhPMKFQd8tkk4NZySFcu7jRy5d Py8YLx1DyiMEo7QZ9qSrXUZ0uaD+ZrFVsEQPtq5/Qj+6yD4jKFXaNwMQHwrHad7x zCY0xPgYYEU0MC7YD1pP9g0yCu+jETp5TaNxAxa/QC7kjJfW0CLR+HUHE8HLvrlM AB52hMOMRdsW/m63hX+1qCbMuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDv/7q4 +7euIuaI+bAB9CtYlP6HMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIN2NuBeILURKuxo7ye2xEDKfajf+ltNICouIKEKdLYOV6vVRVR8BF C/3Iv9j46drx+CAw5FND0Yf4dhVIYbGHIsYrgskfRwrlSZK6OfhTqUbQ/cJ0GXF6 EJuP8wkSRwMqqEff1vwnIk86GVLqdxkrBx3flhs5zECx5TujK09unH0mOkWZpuqt JBLlxKiuhtz3sRF5C1FBaFP/cxc/wAcawDJF3NE6GmrqMG6ZladyvWs0AIMmDydk RvxHx6O8V3bfKwFQEE1vv0x03lvs2Hsim6W5NQu0O8M0+p+C7Rpg6enJoMUJef10 kp5HQ/rpwwrSg53nmdImoiiJQ5f9t1Cj -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:13 2025 by rpki-client