This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: 48/znyuGB5rGEOQtmo6bX3COkAax1VAAzl6MHnWzXDE= Subject key identifier: CA:29:11:E7:56:DF:B3:51:06:45:4E:01:C4:D6:50:3F:F9:A0:6A:DD Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 157B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 152F Signing time: Thu 04 Dec 2025 16:29:19 +0000 Manifest this update: Thu 04 Dec 2025 16:29:18 +0000 Manifest next update: Thu 11 Dec 2025 16:29:18 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: X1L6yc1PAnwzqPCfUwt0g//kd6PnaLvCuznQRNo9mt4=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: YK6Hmo3PllZtdE5hm6A8K6SCgV+te0dB3ba976/6MCY=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: 3SKd7JKNbo4VQv7IRdQ4lKTCd0NxnhIdEQAdsmvLftg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5499 (0x157b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Dec 4 16:29:18 2025 GMT Not After : Dec 11 16:29:18 2025 GMT Subject: CN=6931b6df-bc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:74:7b:5c:9d:3c:af:fb:d3:5c:59:99:be: e7:a3:16:80:38:38:ca:b7:31:74:ba:0a:9e:9a:26: 99:21:51:56:08:a2:df:9e:1a:89:5a:08:fc:2e:2d: 8a:53:a8:3e:e3:cc:58:8a:70:7d:56:95:90:18:ea: 84:15:48:31:54:a5:50:a2:82:0c:8b:4d:8f:42:ee: 6b:8b:56:3e:7c:8b:f6:60:46:10:94:27:a7:cf:1c: 99:d2:db:23:8c:2e:34:61:20:12:0e:2c:3a:f1:b6: 12:67:a3:64:8a:51:b7:d3:aa:0a:f3:20:60:77:df: 39:82:3b:c9:fc:92:dc:b9:d6:e4:81:1e:1c:30:99: 89:5f:b3:77:6b:45:d8:b7:d7:53:2a:fa:dc:e5:1f: 88:e5:0e:2b:2a:57:1e:96:28:34:0c:83:b8:23:03: 3e:db:3f:b0:36:a4:03:07:b5:ef:39:11:9d:77:63: 65:8f:13:5c:e1:16:73:36:f0:b4:a0:a1:37:60:1d: f4:f8:db:64:65:b5:0e:a0:d3:3f:92:4d:41:8a:0d: 1e:59:b2:3b:90:9b:d1:78:82:94:6b:d1:f2:6b:77: 10:e1:7e:2b:f6:ba:f6:46:5a:3d:b4:f3:dc:25:b8: aa:f2:f8:b6:72:94:c7:fd:e6:6e:1e:c6:be:7b:bd: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:11:E7:56:DF:B3:51:06:45:4E:01:C4:D6:50:3F:F9:A0:6A:DD X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fa:bb:ff:bf:7b:e1:49:d3:e2:64:eb:b9:be:01:78:fc:c3: 2d:e3:2e:14:33:6f:08:33:f3:da:90:07:c2:7e:ea:2b:88:53: 4e:b7:6a:0f:c9:7b:3b:cf:39:f8:dc:eb:e0:9c:03:bf:90:a1: 34:be:ad:28:72:55:7b:07:55:3a:28:29:05:ab:bf:61:e8:10: ba:27:ad:99:b6:07:64:2a:0b:cf:d4:14:c0:d6:22:66:8f:2c: e8:7b:aa:7f:ea:49:c2:70:23:c8:79:20:7a:b7:e9:e7:f5:79: 37:e2:af:21:45:a3:64:c9:0a:fb:47:83:84:df:58:cd:8c:be: 06:d6:63:76:e5:9a:65:17:a8:de:41:56:cc:b0:5d:fc:f0:bb: 74:67:d8:e7:f5:97:63:6a:fa:27:d2:92:3b:49:62:93:59:f4: 57:64:73:98:a0:6a:ae:3d:0a:18:58:6d:b5:45:ce:d2:8c:37: b5:03:86:fb:4a:2a:25:97:8e:c6:61:a9:cc:d4:a4:4a:c5:30: a1:0c:3d:a0:d1:32:f7:65:39:c3:c3:2e:a5:df:55:9c:7d:5c: c9:24:7e:14:8e:ab:e0:59:41:9d:ef:7b:a6:2a:9a:f3:6f:ec: 76:3a:74:0c:bf:dd:96:e6:75:7a:c4:67:22:3f:f7:df:ed:96: 80:a9:89:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUxMjA0MTYyOTE4WhcNMjUxMjExMTYyOTE4WjAYMRYwFAYD VQQDEw02OTMxYjZkZi1iYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3p0e1ydPK/701xZmb7noxaAODjKtzF0ugqemiaZIVFWCKLfnhqJWgj8Li2K U6g+48xYinB9VpWQGOqEFUgxVKVQooIMi02PQu5ri1Y+fIv2YEYQlCenzxyZ0tsj jC40YSASDiw68bYSZ6NkilG306oK8yBgd985gjvJ/JLcudbkgR4cMJmJX7N3a0XY t9dTKvrc5R+I5Q4rKlcelig0DIO4IwM+2z+wNqQDB7XvORGdd2NljxNc4RZzNvC0 oKE3YB30+NtkZbUOoNM/kk1Big0eWbI7kJvReIKUa9Hya3cQ4X4r9rr2Rlo9tPPc Jbiq8vi2cpTH/eZuHsa+e715oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMopEedW 37NRBkVOAcTWUD/5oGrdMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL+rv/v3vhSdPiZOu5vgF4/MMt4y4UM28IM/PakAfCfuoriFNOt2oP yXs7zzn43OvgnAO/kKE0vq0oclV7B1U6KCkFq79h6BC6J62ZtgdkKgvP1BTA1iJm jyzoe6p/6knCcCPIeSB6t+nn9Xk34q8hRaNkyQr7R4OE31jNjL4G1mN25ZplF6je QVbMsF388Lt0Z9jn9Zdjavon0pI7SWKTWfRXZHOYoGquPQoYWG21Rc7SjDe1A4b7 Sioll47GYanM1KRKxTChDD2g0TL3ZTnDwy6l31WcfVzJJH4UjqvgWUGd73umKprz b+x2OnQMv92W5nV6xGciP/ff7ZaAqYnx -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:04 2025 by rpki-client