This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: R47C+cBSqV4O4wGwRrTOhuQS7zfotzPnvXlRnMRCa10= Subject key identifier: 89:2A:B2:68:B8:EE:59:96:E5:72:F0:A2:29:54:B6:49:19:DF:E6:79 Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 01C1 Signing time: Fri 05 Dec 2025 01:16:27 +0000 Manifest this update: Fri 05 Dec 2025 01:16:26 +0000 Manifest next update: Fri 12 Dec 2025 01:16:26 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: DMDO4HPXqt/X2eN0IkaqUSxFPRuXxRRKWlPBF74CgZI=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: SraOPRWyc/dP6CmZHQSFQKbaOH7T0tjQk0r0ukGNNTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Dec 5 01:16:26 2025 GMT Not After : Dec 12 01:16:26 2025 GMT Subject: CN=6932326b-12fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:00:60:3f:d8:f3:10:ba:2b:91:8a:a5:2c: e4:20:9b:cb:07:aa:85:0d:13:10:b8:5b:f4:ff:47: 5d:16:e4:eb:4a:74:5f:61:8e:12:9e:2a:6f:04:11: 82:64:e5:89:57:fb:66:5a:6f:7f:8d:b5:60:35:36: f6:20:6c:a4:d8:91:5b:ee:27:9e:81:cc:5b:f6:2b: ff:26:5a:89:6b:c3:90:99:63:9a:96:a3:e1:25:8a: bf:60:cc:1f:4e:89:3b:7f:8b:b3:78:2a:76:b8:ee: f5:cc:26:95:ab:6a:71:43:a6:09:c3:d9:0c:16:5b: 39:20:87:6b:e2:08:bc:c0:57:4a:90:75:63:0a:1a: 21:1a:22:ae:47:ee:48:00:31:51:57:9c:14:19:fb: ea:5e:07:05:2f:80:d5:d2:3f:a0:07:e4:ce:33:4e: 19:be:0c:ab:d8:1c:4d:99:13:4b:2f:dc:bc:34:87: 34:c2:ff:ac:3e:64:22:2a:f0:60:98:3d:20:8c:55: 7d:8e:13:37:76:84:7f:84:78:aa:0b:41:dd:e1:1e: ad:0e:30:b3:aa:22:ff:7e:76:ac:c2:c3:3f:59:9e: 8f:0f:7b:ad:c8:d1:37:76:08:6c:e1:13:5a:60:c4: 2c:dc:b8:b0:17:b8:2d:86:b6:1e:50:23:7e:f9:df: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2A:B2:68:B8:EE:59:96:E5:72:F0:A2:29:54:B6:49:19:DF:E6:79 X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f5:60:a1:3f:aa:fc:3f:51:a3:b8:50:ef:dc:19:70:83:ec: a3:25:23:f0:06:2a:9b:dc:35:e4:89:23:b7:17:6f:a3:8a:e0: c7:1f:f3:91:a0:be:4c:09:5f:8f:fc:09:7f:bd:2c:e5:eb:48: 19:71:eb:15:97:4e:2d:73:b3:48:ca:53:83:3f:28:26:4f:18: 68:10:ac:b7:57:04:6d:4b:fa:a3:88:93:3c:19:30:e2:e2:42: e1:19:46:35:83:f7:7b:58:f3:34:00:78:90:ef:ce:32:44:ea: 82:9e:69:c4:7a:e6:ac:f3:fe:1c:33:f8:17:01:1a:2e:5d:15: 09:ee:cb:ca:3d:0d:7f:1c:20:cc:03:1f:8d:26:4d:e0:4b:d9: 9c:68:75:fe:24:a0:2d:f4:8b:f9:19:08:c4:e0:71:96:24:7a: 2d:1c:7e:b0:f2:c8:b1:c2:9f:5b:9f:13:3c:e9:2d:45:76:71: 4f:21:51:bb:ac:81:bf:ae:3a:ca:d3:9e:eb:ce:ca:da:1a:04: 28:ba:cf:e9:55:60:e1:fb:ae:2f:a9:8c:f1:46:71:1c:dc:32: d1:06:25:54:24:7e:22:ee:b8:16:9c:c9:99:59:f2:80:44:5e: 1a:6f:1d:9e:b7:90:1e:e1:86:d2:55:f2:e6:44:46:96:e4:44: a0:ca:6b:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUxMjA1MDExNjI2WhcNMjUxMjEyMDExNjI2WjAYMRYwFAYD VQQDEw02OTMyMzI2Yi0xMmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxAAYD/Y8xC6K5GKpSzkIJvLB6qFDRMQuFv0/0ddFuTrSnRfYY4SnipvBBGC ZOWJV/tmWm9/jbVgNTb2IGyk2JFb7ieegcxb9iv/JlqJa8OQmWOalqPhJYq/YMwf Tok7f4uzeCp2uO71zCaVq2pxQ6YJw9kMFls5IIdr4gi8wFdKkHVjChohGiKuR+5I ADFRV5wUGfvqXgcFL4DV0j+gB+TOM04Zvgyr2BxNmRNLL9y8NIc0wv+sPmQiKvBg mD0gjFV9jhM3doR/hHiqC0Hd4R6tDjCzqiL/fnaswsM/WZ6PD3utyNE3dghs4RNa YMQs3LiwF7gthrYeUCN++d9N4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkqsmi4 7lmW5XLwoilUtkkZ3+Z5MB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl9WChP6r8P1GjuFDv3Blwg+yjJSPwBiqb3DXkiSO3F2+jiuDHH/OR oL5MCV+P/Al/vSzl60gZcesVl04tc7NIylODPygmTxhoEKy3VwRtS/qjiJM8GTDi 4kLhGUY1g/d7WPM0AHiQ784yROqCnmnEeuas8/4cM/gXARouXRUJ7svKPQ1/HCDM Ax+NJk3gS9mcaHX+JKAt9Iv5GQjE4HGWJHotHH6w8sixwp9bnxM86S1FdnFPIVG7 rIG/rjrK057rzsraGgQous/pVWDh+64vqYzxRnEc3DLRBiVUJH4i7rgWnMmZWfKA RF4abx2et5Ae4YbSVfLmREaW5ESgymuF -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:46 2025 by rpki-client