This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft File: M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json) Hash identifier: PHyTFi8A46rJoeFU5IcL4GQ4XrzPkT7NMPv1NGOiyng= Subject key identifier: D2:5F:69:11:B7:85:C8:A9:6A:D5:B9:5F:73:10:44:06:13:53:BE:F8 Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A Certificate issuer: /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft Manifest number: 0377 Signing time: Thu 04 Dec 2025 23:20:38 +0000 Manifest this update: Thu 04 Dec 2025 23:20:38 +0000 Manifest next update: Thu 11 Dec 2025 23:20:38 +0000 Files and hashes: 1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: OWMVqQsdytpQqNIslG5C0Bsf/r5LP8nTFVNv1FPcC50=) 2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: hpv7gHEkBMfI8IhiYswhvBmYC+76f/Bx92ErHlGJsZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A Validity Not Before: Dec 4 23:20:38 2025 GMT Not After : Dec 11 23:20:38 2025 GMT Subject: CN=69321746-f5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:71:b1:79:bc:b5:49:c7:4c:d3:75:71:ca: 78:ce:a7:41:e0:b4:ce:bd:3e:c0:68:1e:c1:6c:3d: df:96:1a:30:d0:89:b6:3e:7c:b4:3a:c8:3c:e1:ce: 65:11:91:85:80:a5:25:86:1b:f4:51:af:56:2f:66: f0:2a:6a:20:8c:34:0e:73:b5:c5:7b:1c:b8:e4:81: 3d:91:85:24:0c:68:58:53:2c:92:2a:0f:9c:e9:8b: 71:d4:3e:66:ba:fc:cc:d0:d3:4c:c2:b5:e7:d5:2c: 77:3e:81:a0:e6:ff:a6:37:02:ca:33:d2:be:22:97: d4:61:dd:da:79:a1:f5:63:65:9c:df:85:44:cf:33: de:b5:b6:0b:b2:d7:3d:c4:17:a2:6c:75:b0:4c:7e: bb:5a:f9:7d:1b:c9:11:89:0d:b6:f1:ed:c2:98:8f: 12:4f:d8:68:52:d6:d3:ce:d5:89:29:ce:5c:a3:1e: 5f:60:a4:c8:cb:6b:68:8c:01:39:15:77:63:15:36: 9d:dd:ba:cb:51:29:82:5c:ee:2f:0b:ca:1a:4b:9b: 8e:fc:22:a9:7a:ba:ac:80:97:b0:07:9e:0e:d6:ed: a0:b6:50:eb:49:94:24:20:62:8a:98:6c:f5:41:93: de:da:06:e8:e1:4a:29:1b:cb:9a:d6:f5:aa:cc:7c: 11:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:69:11:B7:85:C8:A9:6A:D5:B9:5F:73:10:44:06:13:53:BE:F8 X509v3 Authority Key Identifier: keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:78:65:6a:7a:53:eb:16:13:68:55:69:43:f6:ab:23:77:48: 67:ca:1c:2c:0b:36:b8:d7:e3:33:39:97:0b:ae:da:d9:11:fb: a8:01:3b:59:49:69:de:5e:98:03:b7:6e:9d:3b:f9:97:40:aa: 1b:5c:d5:46:3c:5c:84:ac:91:de:8f:0d:04:6a:9e:ad:ef:6a: 2b:e8:d8:8a:e6:0f:83:02:8f:da:0c:91:8c:d2:66:6b:f4:14: ae:af:80:df:66:52:a9:7b:53:50:84:3a:9a:1f:60:e7:b3:1d: 7b:c2:e0:c9:c0:54:43:78:8e:c4:5e:17:8f:b9:6a:43:f4:e9: 8c:f5:f4:a6:f3:2c:4b:3b:77:f1:da:83:bc:37:ba:32:46:a7: fb:cc:3b:df:d0:88:74:c0:32:ab:e9:39:e2:7e:24:d3:9c:ed: a2:88:19:6a:1b:39:dd:e4:51:36:1f:e1:b2:71:3e:76:0e:b9: 3d:f9:2b:ca:69:96:db:77:fa:24:a9:24:3b:17:48:5f:54:2d: ce:d9:2e:ba:02:7c:f3:ad:01:98:64:d7:23:60:03:4e:4e:3c: bf:e6:8c:e5:51:ba:bd:08:a1:2d:b4:3a:f3:50:10:99:73:24: 95:6e:98:5e:a6:f7:de:49:99:02:79:73:11:5c:d4:ee:dc:1e: a5:1b:6c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc2RTIxMTAvBgNVBAUTKDMzNDRBNDM5NjBEQzRBNDc3M0JCMURGMEZGMDM4REY0 MTYwRjM1N0EwHhcNMjUxMjA0MjMyMDM4WhcNMjUxMjExMjMyMDM4WjAYMRYwFAYD VQQDEw02OTMyMTc0Ni1mNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9BxsXm8tUnHTNN1ccp4zqdB4LTOvT7AaB7BbD3flhow0Im2Pny0Osg84c5l EZGFgKUlhhv0Ua9WL2bwKmogjDQOc7XFexy45IE9kYUkDGhYUyySKg+c6Ytx1D5m uvzM0NNMwrXn1Sx3PoGg5v+mNwLKM9K+IpfUYd3aeaH1Y2Wc34VEzzPetbYLstc9 xBeibHWwTH67Wvl9G8kRiQ228e3CmI8ST9hoUtbTztWJKc5cox5fYKTIy2tojAE5 FXdjFTad3brLUSmCXO4vC8oaS5uO/CKperqsgJewB54O1u2gtlDrSZQkIGKKmGz1 QZPe2gbo4UopG8ua1vWqzHwRMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJfaRG3 hcipatW5X3MQRAYTU774MB8GA1UdIwQYMBaAFDNEpDlg3EpHc7sd8P8DjfQWDzV6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFMi8yMjU5QTE4NkQ4 NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1NrZHp1eDN3X3dPTjlCWVBO WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00wU2tPV0RjU2tkenV4M3dfd09OOUJZUE5Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzZFMi8yMjU5QTE4NkQ4NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1Nr ZHp1eDN3X3dPTjlCWVBOWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3eGVqelPrFhNoVWlD9qsjd0hnyhwsCza41+MzOZcLrtrZEfuoATtZ SWneXpgDt26dO/mXQKobXNVGPFyErJHejw0Eap6t72or6NiK5g+DAo/aDJGM0mZr 9BSur4DfZlKpe1NQhDqaH2Dnsx17wuDJwFRDeI7EXhePuWpD9OmM9fSm8yxLO3fx 2oO8N7oyRqf7zDvf0Ih0wDKr6TnifiTTnO2iiBlqGznd5FE2H+GycT52Drk9+SvK aZbbd/okqSQ7F0hfVC3O2S66AnzzrQGYZNcjYANOTjy/5ozlUbq9CKEttDrzUBCZ cySVbphepvfeSZkCeXMRXNTu3B6lG2zY -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:45 2025 by rpki-client