This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: 6vMR/32/61eQxyT3xo7hkg6SIK2TyMWyYJRK/fIU0IU= Subject key identifier: F6:60:5D:03:2C:02:D0:63:50:43:B4:EA:7E:F5:AF:3F:C8:C2:EC:A4 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 01BA Signing time: Fri 05 Dec 2025 01:17:29 +0000 Manifest this update: Fri 05 Dec 2025 01:17:28 +0000 Manifest next update: Fri 12 Dec 2025 01:17:28 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: lAHbmASsGwGdrmzRH4FcdOTJNOy/79S7zEo+TpV8ydE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Dec 5 01:17:28 2025 GMT Not After : Dec 12 01:17:28 2025 GMT Subject: CN=693232a8-3713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:39:55:d1:ce:42:5e:ad:17:bc:cc:eb:fd: 90:a7:80:cd:71:b7:31:ab:2b:73:0e:89:df:fd:eb: 19:9e:91:37:a0:21:4b:4b:8e:3f:3d:a7:e6:13:c8: e6:87:4b:4c:d3:7c:f2:b3:c8:c7:e4:8c:bf:7e:03: dd:f7:c5:6a:e8:f5:a6:47:48:7e:7f:bb:b9:65:0c: 99:35:2c:0e:89:39:97:14:ba:b9:23:88:e7:7a:a0: a2:69:cf:a3:fa:c4:a6:19:c9:f1:fd:43:7d:49:80: 78:7b:90:68:24:1a:6e:2a:9f:8d:56:a4:24:12:ae: 3f:3b:50:a8:b4:aa:62:29:a9:d7:51:1b:52:fc:8b: bb:22:4d:9f:e7:55:30:74:94:90:c8:28:cc:70:d7: a2:7f:f7:41:40:75:ce:09:72:1b:5d:4b:ab:dc:bd: b2:1c:59:17:ea:2b:83:8d:4d:81:5c:7c:be:99:0c: e0:8e:55:fb:b2:29:a5:56:27:aa:24:0f:33:a5:80: f3:dc:e8:67:3e:b4:95:85:05:b8:70:32:82:32:95: f1:17:17:14:45:02:95:3d:a2:5b:6b:a7:e0:9f:6d: 1c:50:b5:b1:e7:c6:4f:e3:23:5b:a1:d2:6d:25:ff: 76:af:7a:ab:9b:8c:ff:a2:4b:4d:f4:a0:c5:64:95: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:5D:03:2C:02:D0:63:50:43:B4:EA:7E:F5:AF:3F:C8:C2:EC:A4 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fd:1a:72:b8:07:2f:66:52:f5:6c:3b:0c:56:03:af:54:d4: 62:82:14:8e:7c:c9:db:09:3a:a7:03:fb:8a:74:37:20:19:b9: 7f:ff:c2:2c:a4:8d:dc:84:22:02:24:02:df:34:19:e9:20:63: a2:ff:2c:17:e4:3d:ae:7c:f7:0a:92:87:05:0b:f0:7f:d6:4f: 6c:f0:19:a0:18:08:11:50:ca:bb:70:d8:4a:4e:98:a5:81:f3: 6b:a5:8f:94:bf:53:8e:99:16:78:a1:cd:cb:89:88:02:76:68: 38:94:d7:83:f2:9b:b8:5c:19:22:8c:20:1c:78:59:12:b0:73: 1d:93:5f:06:d6:f8:ab:ec:c1:9c:4b:01:48:f8:f3:05:6a:e2: f7:9e:29:47:e2:c9:6b:28:dd:b7:23:a3:50:f8:f3:f5:3b:34: 29:54:31:ee:12:e9:3f:bd:3c:8a:7d:4e:b2:6a:0d:16:c9:01: 3b:66:93:bd:da:15:d3:27:11:f5:ad:af:f8:ce:da:0c:5b:a1: ee:49:5b:18:22:29:69:1e:50:e5:ca:4b:aa:d8:e3:db:18:7e: 4a:fd:8f:2c:82:45:b7:f5:84:97:5a:bd:16:40:6c:28:e9:c2: 1e:df:bf:75:44:34:14:2a:85:04:e8:6b:d9:47:57:2e:8a:2b: fe:c5:9e:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUxMjA1MDExNzI4WhcNMjUxMjEyMDExNzI4WjAYMRYwFAYD VQQDEw02OTMyMzJhOC0zNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWI5VdHOQl6tF7zM6/2Qp4DNcbcxqytzDonf/esZnpE3oCFLS44/PafmE8jm h0tM03zys8jH5Iy/fgPd98Vq6PWmR0h+f7u5ZQyZNSwOiTmXFLq5I4jneqCiac+j +sSmGcnx/UN9SYB4e5BoJBpuKp+NVqQkEq4/O1CotKpiKanXURtS/Iu7Ik2f51Uw dJSQyCjMcNeif/dBQHXOCXIbXUur3L2yHFkX6iuDjU2BXHy+mQzgjlX7simlVieq JA8zpYDz3OhnPrSVhQW4cDKCMpXxFxcURQKVPaJba6fgn20cULWx58ZP4yNbodJt Jf92r3qrm4z/oktN9KDFZJV2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZgXQMs AtBjUEO06n71rz/IwuykMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/RpyuAcvZlL1bDsMVgOvVNRighSOfMnbCTqnA/uKdDcgGbl//8Is pI3chCICJALfNBnpIGOi/ywX5D2ufPcKkocFC/B/1k9s8BmgGAgRUMq7cNhKTpil gfNrpY+Uv1OOmRZ4oc3LiYgCdmg4lNeD8pu4XBkijCAceFkSsHMdk18G1vir7MGc SwFI+PMFauL3nilH4slrKN23I6NQ+PP1OzQpVDHuEuk/vTyKfU6yag0WyQE7ZpO9 2hXTJxH1ra/4ztoMW6HuSVsYIilpHlDlykuq2OPbGH5K/Y8sgkW39YSXWr0WQGwo 6cIe3791RDQUKoUE6GvZR1cuiiv+xZ5N -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:26 2025 by rpki-client