This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: /VrUu8oKS5CXCzdtkJWtuW3X1qOBM57RL61JV6pFBIo= Subject key identifier: 37:15:D6:C6:E1:35:79:EF:63:54:4E:CE:A8:F8:85:B9:CF:27:85:57 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0CC7 Signing time: Sat 06 Dec 2025 17:33:48 +0000 Manifest this update: Sat 06 Dec 2025 17:33:47 +0000 Manifest next update: Sat 13 Dec 2025 17:33:47 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: FIhKJXHG2QFIT0eCPtToKHUPc1GPKkVv2V+ExyT4HA8=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: fAbemN+lwz0SU1+ivydeiDA0TzR3+7XHqo4CZ/rRSIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Dec 6 17:33:47 2025 GMT Not After : Dec 13 17:33:47 2025 GMT Subject: CN=693468fc-0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:e8:91:50:b5:fd:01:04:54:2b:e7:75:27: 9c:52:9c:21:f2:81:97:82:92:7a:33:1e:fa:01:0a: 1c:2e:7b:7b:7e:ef:bc:1c:b2:54:4c:82:c2:81:88: 4b:96:f7:72:f7:96:03:fa:03:d2:bb:25:3c:8f:f1: 2a:4a:b6:45:d4:13:c1:24:3e:9a:b0:1d:ae:cd:12: 4d:64:00:ba:e3:f9:5d:8f:46:4f:78:3a:49:85:9b: bf:38:34:d6:59:ca:8d:11:ca:37:ec:cc:33:58:27: 02:e4:27:e5:bb:8a:16:35:c6:c3:bd:4c:77:04:7e: af:e2:4d:18:71:8a:53:e7:ec:4a:b0:88:1f:6e:88: 2b:61:73:e5:91:ae:90:59:9d:79:2d:c1:33:15:2e: 64:66:e8:e8:0d:24:f7:de:28:07:91:a4:2c:6e:81: ee:7a:3e:70:0d:70:a2:e0:20:aa:1e:bd:a6:ac:a5: 74:bc:46:a4:1d:66:55:de:98:de:02:e4:3a:01:d3: d9:74:f6:6a:a7:29:93:40:74:cd:8f:1c:82:1c:1f: c4:5b:d9:09:f1:36:0d:ab:b3:e3:66:23:ee:af:68: d3:e9:78:a6:54:70:8f:0d:44:66:09:ff:2f:25:86: 9b:a1:c9:42:44:e9:5c:a9:6d:1f:67:0b:e3:fd:79: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:15:D6:C6:E1:35:79:EF:63:54:4E:CE:A8:F8:85:B9:CF:27:85:57 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:41:47:49:28:81:a3:f8:13:51:0d:42:35:fa:8e:0b:0b:6f: 39:5f:b9:21:37:ba:01:5a:73:b7:3e:ab:8d:0d:bf:aa:7b:3f: ee:ed:7f:72:23:55:f3:e6:64:c5:61:17:07:63:e6:1b:cf:e5: 98:42:51:73:17:35:50:51:29:ce:8b:b6:d1:06:21:82:8c:db: 31:8e:5b:c8:02:44:45:51:5d:05:fa:b9:32:0a:4b:67:3a:96: c4:aa:92:01:60:6d:e4:c3:9a:e8:12:60:0e:48:a2:40:10:0f: 2c:d3:05:51:b2:30:b5:d2:d7:de:ea:ce:4f:b8:36:7a:9d:88: af:53:6f:36:81:ae:b7:81:77:8d:a1:02:39:21:13:82:7e:db: d5:84:98:91:b7:56:a6:cc:01:f7:f3:0e:4a:4d:19:f5:e1:f2: 6d:44:b6:1d:8d:5f:33:07:78:30:f8:79:3c:03:8e:b9:d8:31: 5b:49:b1:b6:fd:76:8b:ea:db:8d:18:56:a7:19:53:a1:80:da: db:0b:1a:40:3d:8f:ab:82:6d:0d:a2:b2:53:ed:ae:c2:b2:0d: c0:de:a3:2d:6e:32:60:d7:79:e9:8d:dd:ad:97:77:4d:c2:49: 0a:7c:f7:e9:43:25:b0:ca:99:85:ed:05:1d:8d:a1:31:e3:e5: b4:f0:3e:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUxMjA2MTczMzQ3WhcNMjUxMjEzMTczMzQ3WjAYMRYwFAYD VQQDEw02OTM0NjhmYy0wYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z7okVC1/QEEVCvndSecUpwh8oGXgpJ6Mx76AQocLnt7fu+8HLJUTILCgYhL lvdy95YD+gPSuyU8j/EqSrZF1BPBJD6asB2uzRJNZAC64/ldj0ZPeDpJhZu/ODTW WcqNEco37MwzWCcC5Cflu4oWNcbDvUx3BH6v4k0YcYpT5+xKsIgfbogrYXPlka6Q WZ15LcEzFS5kZujoDST33igHkaQsboHuej5wDXCi4CCqHr2mrKV0vEakHWZV3pje AuQ6AdPZdPZqpymTQHTNjxyCHB/EW9kJ8TYNq7PjZiPur2jT6XimVHCPDURmCf8v JYaboclCROlcqW0fZwvj/Xn9iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcV1sbh NXnvY1ROzqj4hbnPJ4VXMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOQUdJKIGj+BNRDUI1+o4LC285X7khN7oBWnO3PquNDb+qez/u7X9y I1Xz5mTFYRcHY+Ybz+WYQlFzFzVQUSnOi7bRBiGCjNsxjlvIAkRFUV0F+rkyCktn OpbEqpIBYG3kw5roEmAOSKJAEA8s0wVRsjC10tfe6s5PuDZ6nYivU282ga63gXeN oQI5IROCftvVhJiRt1amzAH38w5KTRn14fJtRLYdjV8zB3gw+Hk8A4652DFbSbG2 /XaL6tuNGFanGVOhgNrbCxpAPY+rgm0NorJT7a7Csg3A3qMtbjJg13npjd2tl3dN wkkKfPfpQyWwypmF7QUdjaEx4+W08D41 -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:51 2025 by rpki-client