This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: 0bhZfx0k39cHShwdYkk55LhJ6CEYts0JJ3VtaTFnoG0= Subject key identifier: 91:36:F4:F6:0C:CE:05:1F:D6:0B:CB:19:5D:A7:60:8F:98:78:F2:40 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 02F3 Signing time: Thu 04 Dec 2025 23:40:28 +0000 Manifest this update: Thu 04 Dec 2025 23:40:28 +0000 Manifest next update: Thu 11 Dec 2025 23:40:27 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: q766NjukeEQSFxj5KQcUM0ykc73VVowGxuRFH+JGIeA=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: 9v/ZeGZKD58JIKPG+TPtlKNDrryBJF2rWiKbvOcAj4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Dec 4 23:40:28 2025 GMT Not After : Dec 11 23:40:27 2025 GMT Subject: CN=69321bec-e0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:32:4f:cf:16:73:44:1d:d0:f8:0a:42:51: f1:a3:b9:39:c6:db:6b:0d:26:d8:b8:dc:4b:c7:40: 0b:85:09:0d:9d:5a:d9:37:dd:8c:dc:26:b9:09:12: ec:3c:e2:3a:bd:a8:f6:eb:53:ed:cc:c8:af:0e:64: 7c:3f:df:1a:8c:e5:64:e4:1b:16:35:aa:37:fd:d4: 27:8a:34:f5:89:b7:25:80:9f:17:a9:23:73:50:b8: 54:f3:71:13:96:5d:bb:19:59:4b:8c:f7:0c:02:6f: 13:84:72:3e:5e:90:59:d0:16:4b:48:c2:2e:7f:b6: 86:81:c5:ac:77:56:4c:ea:5c:20:46:88:fe:57:be: 52:b7:c6:27:49:2c:80:45:f7:b5:ff:9e:fa:ba:0d: 9b:f9:bf:6e:68:72:f6:63:0c:3a:c8:6f:1a:ba:71: d0:9c:0c:3b:a9:d0:af:ad:36:52:64:d6:71:d5:c2: 8e:0e:c9:29:a3:41:68:8f:7c:ab:c1:74:e3:50:ee: 7b:34:05:e8:b3:8e:bb:dd:8a:92:14:91:98:38:16: b6:a7:45:97:da:ce:5c:1c:74:a1:87:93:bb:80:96: b4:86:b6:8c:24:b9:81:fe:28:83:88:85:f8:3c:4f: 3b:58:bd:10:d3:94:f7:37:46:a6:b6:4f:e8:d9:12: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:F4:F6:0C:CE:05:1F:D6:0B:CB:19:5D:A7:60:8F:98:78:F2:40 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8b:67:78:da:b2:33:ff:93:d1:3a:fb:8e:1e:3a:82:4f:29: a4:96:96:8d:c4:45:00:f0:3a:dd:38:6d:33:5f:76:09:80:62: 92:d7:ef:3f:4c:cf:21:fc:05:d1:dc:c2:e0:ba:61:b1:8d:1b: 13:82:a8:6d:1e:8b:c7:81:38:3c:5c:01:51:0a:29:22:51:ed: e2:22:45:65:df:b3:0c:92:25:f4:0e:c1:6f:78:0c:6c:00:f2: 9a:43:e5:51:f6:ee:ff:aa:d3:06:0e:f1:d2:2a:f3:ba:82:9e: 14:d9:b4:5c:a5:40:6b:ff:b8:de:94:43:7d:20:7d:29:8a:6c: 0b:6d:05:f4:11:af:cf:d1:fe:9b:85:f6:d5:27:c5:01:39:bd: d8:eb:d9:da:6c:fa:97:54:4a:ad:e5:04:c2:7c:f0:a7:83:dd: 18:99:bd:bb:4d:00:ac:ee:94:1a:54:48:96:92:b3:2c:70:35: 95:b0:7c:70:91:c9:23:f8:d0:de:18:77:3c:63:c0:79:98:0a: ae:d9:23:14:fb:59:b9:d9:4c:9e:47:6e:70:70:bf:bf:0d:e5: f4:97:a7:8f:85:7f:f6:38:bc:64:2a:cc:35:16:50:02:1c:e4: b7:9c:20:70:ad:02:25:27:c9:5b:da:d2:44:89:a3:04:c0:6b: 01:ac:8a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUxMjA0MjM0MDI4WhcNMjUxMjExMjM0MDI3WjAYMRYwFAYD VQQDEw02OTMyMWJlYy1lMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JUyT88Wc0Qd0PgKQlHxo7k5xttrDSbYuNxLx0ALhQkNnVrZN92M3Ca5CRLs POI6vaj261PtzMivDmR8P98ajOVk5BsWNao3/dQnijT1ibclgJ8XqSNzULhU83ET ll27GVlLjPcMAm8ThHI+XpBZ0BZLSMIuf7aGgcWsd1ZM6lwgRoj+V75St8YnSSyA Rfe1/576ug2b+b9uaHL2Yww6yG8aunHQnAw7qdCvrTZSZNZx1cKODskpo0Foj3yr wXTjUO57NAXos4673YqSFJGYOBa2p0WX2s5cHHShh5O7gJa0hraMJLmB/iiDiIX4 PE87WL0Q05T3N0amtk/o2RIVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJE29PYM zgUf1gvLGV2nYI+YePJAMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7i2d42rIz/5PROvuOHjqCTymklpaNxEUA8DrdOG0zX3YJgGKS1+8/ TM8h/AXR3MLgumGxjRsTgqhtHovHgTg8XAFRCikiUe3iIkVl37MMkiX0DsFveAxs APKaQ+VR9u7/qtMGDvHSKvO6gp4U2bRcpUBr/7jelEN9IH0pimwLbQX0Ea/P0f6b hfbVJ8UBOb3Y69nabPqXVEqt5QTCfPCng90Ymb27TQCs7pQaVEiWkrMscDWVsHxw kckj+NDeGHc8Y8B5mAqu2SMU+1m52UyeR25wcL+/DeX0l6ePhX/2OLxkKsw1FlAC HOS3nCBwrQIlJ8lb2tJEiaMEwGsBrIr4 -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:47 2025 by rpki-client