This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json) Hash identifier: S79erpLcuoyf4C9l5RZdCP8GhuVvy7KTKHkj6EuolNo= Subject key identifier: EF:B6:FB:AA:72:01:9B:0B:B5:F1:F7:D4:4B:84:83:1B:1C:5F:3B:F2 Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft Manifest number: 0B Signing time: Fri 05 Dec 2025 05:55:09 +0000 Manifest this update: Fri 05 Dec 2025 05:55:09 +0000 Manifest next update: Fri 12 Dec 2025 05:55:09 +0000 Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: huc25hHjVS//PvyC4e6DmcclPMZ4ir5b/wqUWJSpLt4=) 2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: ekpamxD7hzwb1PEjW+tSW6XvcWqgsSy+CPAuO9Zq2Cw=) 3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: 0Zi7a8zsLY38+Kw5x0ohUceb8AdyaS+jD2hPBxt1gYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Validity Not Before: Dec 5 05:55:09 2025 GMT Not After : Dec 12 05:55:09 2025 GMT Subject: CN=693273bd-7be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:1b:ee:5a:a2:35:bf:f9:e6:18:75:da:16: 50:e3:c0:77:82:7b:c1:b8:21:cd:d7:9d:5f:73:9e: de:f9:de:dc:42:ad:c9:25:26:d0:21:b4:e9:76:95: 38:8a:dc:6a:af:99:9e:61:d7:0b:57:04:52:33:8f: ca:ab:f0:2f:4e:a6:83:d1:8c:3b:a0:36:5b:4c:eb: 30:85:0f:fb:a2:3d:14:09:8b:8e:ff:3b:cb:aa:3c: 3c:05:5d:46:29:45:d4:b1:0c:ad:6b:43:90:9c:9f: 96:13:4d:ff:31:aa:b2:35:56:0c:e5:c8:2f:c8:e4: 7a:6b:6d:e1:9e:96:26:5a:8c:b3:5f:6b:af:80:33: 25:7a:52:f0:43:85:9a:3d:c0:1d:63:5f:f2:f2:da: 6c:c1:84:62:bd:48:2b:9a:b5:9c:b3:0a:60:2e:8f: 68:c5:0d:06:92:5f:36:4b:3b:ef:63:e2:17:88:33: 1b:f0:1b:c7:14:bb:25:40:28:79:94:9f:2d:c0:f2: 8e:95:60:51:d8:1c:c3:be:69:68:1f:7c:15:a8:f1: 0f:16:59:fc:22:25:94:00:f9:51:8a:66:41:3b:a1: 7c:df:c5:04:fa:57:33:42:6b:d2:db:bd:bd:cb:b0: 0b:64:17:1f:a8:59:93:9a:02:43:54:fe:7f:9e:5b: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:FB:AA:72:01:9B:0B:B5:F1:F7:D4:4B:84:83:1B:1C:5F:3B:F2 X509v3 Authority Key Identifier: keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a6:ad:f4:df:55:c3:c9:e5:4e:f4:63:29:42:7e:9c:0c:fb: 93:ba:ce:5d:97:f9:97:d9:5f:01:83:74:a3:83:d6:53:43:22: 48:b4:d1:9e:bb:13:21:f8:d3:ee:d0:fa:e1:4a:1f:f5:72:3d: d5:ef:3f:9f:8d:59:55:26:4a:19:44:81:e1:a4:39:43:d8:3e: b8:a9:ae:90:b5:d2:c7:f5:c4:78:d9:88:05:37:ec:ad:03:bc: 3e:f8:98:39:3d:04:98:28:3c:cd:f9:80:03:c5:8e:d5:17:d5: 37:0e:d8:ee:12:d1:84:70:74:66:fb:91:de:86:5d:f0:6d:03: 4e:03:15:c9:46:3a:ef:09:d8:14:32:b1:9c:c1:f7:4b:84:89: 4b:57:91:d8:25:60:9c:fd:20:ae:fa:bd:45:fa:85:40:bc:ce: d6:93:ef:56:62:5b:61:81:87:3f:8e:85:4f:19:f0:26:40:66: 14:95:49:c1:3a:cc:80:7b:98:69:3d:05:a8:bd:79:92:8a:58: 8b:06:96:13:91:eb:15:74:35:22:b6:9b:e6:92:01:74:9a:df: c5:fc:95:69:0d:49:8f:6a:0f:4d:1d:1f:91:2e:6c:4d:39:ea: 7e:02:cc:c6:25:00:1e:40:53:be:f2:f6:ef:06:45:a0:aa:27: 93:46:e7:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDBERjExMC8GA1UEBRMoRkI0NzFGODQxMzA4OUVENzAxQkRBQjQwQUU2M0M3ODhG NTI2QUI2RjAeFw0yNTEyMDUwNTU1MDlaFw0yNTEyMTIwNTU1MDlaMBgxFjAUBgNV BAMTDTY5MzI3M2JkLTdiZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRdxvuWqI1v/nmGHXaFlDjwHeCe8G4Ic3XnV9znt753txCrcklJtAhtOl2lTiK 3GqvmZ5h1wtXBFIzj8qr8C9OpoPRjDugNltM6zCFD/uiPRQJi47/O8uqPDwFXUYp RdSxDK1rQ5Ccn5YTTf8xqrI1VgzlyC/I5HprbeGeliZajLNfa6+AMyV6UvBDhZo9 wB1jX/Ly2mzBhGK9SCuatZyzCmAuj2jFDQaSXzZLO+9j4heIMxvwG8cUuyVAKHmU ny3A8o6VYFHYHMO+aWgffBWo8Q8WWfwiJZQA+VGKZkE7oXzfxQT6VzNCa9Lbvb3L sAtkFx+oWZOaAkNU/n+eWz/bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU77b7qnIB mwu18ffUS4SDGxxfO/IwHwYDVR0jBBgwFoAU+0cfhBMIntcBvatArmPHiPUmq28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwMERGLzI3Nzc4RjM4Q0JE MTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRjQnZhdEFybVBIaVBVbXEy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBjZmhCTUludGNCdmF0QXJtUEhpUFVtcTI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw MERGLzI3Nzc4RjM4Q0JEMTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRj QnZhdEFybVBIaVBVbXEyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOmrfTfVcPJ5U70YylCfpwM+5O6zl2X+ZfZXwGDdKOD1lNDIki00Z67 EyH40+7Q+uFKH/VyPdXvP5+NWVUmShlEgeGkOUPYPriprpC10sf1xHjZiAU37K0D vD74mDk9BJgoPM35gAPFjtUX1TcO2O4S0YRwdGb7kd6GXfBtA04DFclGOu8J2BQy sZzB90uEiUtXkdglYJz9IK76vUX6hUC8ztaT71ZiW2GBhz+OhU8Z8CZAZhSVScE6 zIB7mGk9Bai9eZKKWIsGlhOR6xV0NSK2m+aSAXSa38X8lWkNSY9qD00dH5EubE05 6n4CzMYlAB5AU77y9u8GRaCqJ5NG58o= -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:29 2025 by rpki-client