This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json) Hash identifier: 5jgEtyWivh5sDRZLKgLcoSh90TsBqZXx8iJQyaWKdZs= Subject key identifier: 14:31:AE:CF:82:D8:F7:D3:78:66:84:63:40:37:29:AA:3A:14:6E:3E Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft Manifest number: DF Signing time: Fri 05 Dec 2025 03:32:12 +0000 Manifest this update: Fri 05 Dec 2025 03:32:12 +0000 Manifest next update: Fri 12 Dec 2025 03:32:12 +0000 Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: VsnR0XSAQ59lzIVAn/CyZP9+YJly49Rmfpld50s87DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Validity Not Before: Dec 5 03:32:12 2025 GMT Not After : Dec 12 03:32:12 2025 GMT Subject: CN=6932523c-4f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:33:75:1a:27:ac:4b:8e:2e:73:57:b9:ec: 09:5c:a5:cf:6f:91:36:bd:18:f4:14:da:4d:5d:94: 97:69:35:c8:5d:7d:41:81:1b:17:c9:3c:45:2b:ed: f1:d2:1b:9c:24:79:f9:29:81:4c:a5:1c:21:f2:d6: f7:36:a7:1c:ba:97:56:d2:b5:0a:7c:29:55:f8:26: 3e:e5:89:f7:86:36:af:dc:99:7b:02:99:5b:f5:6b: 4a:eb:46:8b:37:37:57:73:1f:5a:b3:0b:82:05:8d: 3b:61:e3:12:f9:1d:6a:fa:c8:f0:30:d8:54:97:b7: b3:08:5d:5a:b0:49:3d:2e:f6:5b:49:84:43:2e:31: c3:da:23:96:8d:64:cc:ee:c0:f0:a7:32:37:87:c2: ab:75:27:24:34:7e:b4:5b:05:c1:8b:32:a7:ef:ba: e9:4b:c7:43:4a:7a:da:4f:bf:ef:bc:9b:69:fd:6c: bc:9d:49:15:fe:71:26:e9:f7:d9:0a:76:b7:a4:a1: 92:c0:fe:3f:3e:12:13:95:e3:4d:49:07:8b:1a:28: fd:8c:92:88:f0:ba:ff:bf:28:1b:2b:8a:e9:23:38: c2:5d:c7:4c:f9:8e:3f:0c:21:4a:85:24:e1:a6:85: 3e:49:e1:98:7d:09:ed:6d:e5:94:41:93:40:75:67: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:AE:CF:82:D8:F7:D3:78:66:84:63:40:37:29:AA:3A:14:6E:3E X509v3 Authority Key Identifier: keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:f0:9c:23:14:50:6a:15:61:0b:89:19:44:15:39:63:1d: b0:2c:41:24:e3:d8:28:84:db:85:c9:f8:ab:d9:48:5e:23:d5: 79:d8:37:59:db:9c:d0:eb:da:01:26:17:f1:f3:06:89:c5:33: f9:02:a3:61:87:6f:bf:23:c0:3a:65:ef:c4:c8:e6:bc:c0:88: e4:81:c5:f1:4e:43:ee:94:1b:1b:93:2f:6a:76:fd:2c:4b:62: ec:bb:f6:cb:e7:a2:bc:89:2f:94:19:1b:16:a1:92:62:45:72: 90:d0:5b:b1:16:1e:6d:24:6f:bf:cc:18:cd:c5:08:90:f6:46: 04:8d:f1:cc:23:48:35:f5:b5:03:9f:e6:9b:13:b9:be:38:e9: 32:fe:f1:cf:2b:c2:1c:4b:ca:af:14:b0:54:f5:b9:36:ee:8d: 44:17:71:e3:22:b3:55:95:5e:cf:47:b7:01:47:36:fa:25:f3: d2:49:d6:8b:74:65:be:eb:d4:b5:d9:c4:9f:ea:0b:54:7a:0d: 12:32:67:f2:5e:6c:f8:81:14:2a:31:de:fb:2e:eb:7c:87:5d: 43:f7:b6:37:e6:5e:a1:e6:ac:cd:8a:11:33:41:f7:29:c8:e5: 54:c9:fc:7e:9a:e1:0e:23:99:ea:71:9f:3e:d6:de:a2:bd:8c: f7:93:50:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKDQ0RjlDNERBNDdFNjM3MUZEMUM5RjlGOEU1NjREMTgw M0EwRjMyODcwHhcNMjUxMjA1MDMzMjEyWhcNMjUxMjEyMDMzMjEyWjAYMRYwFAYD VQQDEw02OTMyNTIzYy00ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTwzdRonrEuOLnNXuewJXKXPb5E2vRj0FNpNXZSXaTXIXX1BgRsXyTxFK+3x 0hucJHn5KYFMpRwh8tb3NqccupdW0rUKfClV+CY+5Yn3hjav3Jl7Aplb9WtK60aL NzdXcx9aswuCBY07YeMS+R1q+sjwMNhUl7ezCF1asEk9LvZbSYRDLjHD2iOWjWTM 7sDwpzI3h8KrdSckNH60WwXBizKn77rpS8dDSnraT7/vvJtp/Wy8nUkV/nEm6ffZ Cna3pKGSwP4/PhITleNNSQeLGij9jJKI8Lr/vygbK4rpIzjCXcdM+Y4/DCFKhSTh poU+SeGYfQntbeWUQZNAdWdg9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQxrs+C 2PfTeGaEY0A3Kao6FG4+MB8GA1UdIwQYMBaAFET5xNpH5jcf0cn5+OVk0YA6DzKH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wQUU0ODI5MDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54X1J5Zm40NVdUUmdEb1BN b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQbkUya2ZtTnhfUnlmbjQ1V1RSZ0RvUE1vYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wQUU0ODI5MDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54 X1J5Zm40NVdUUmdEb1BNb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1dPCcIxRQahVhC4kZRBU5Yx2wLEEk49gohNuFyfir2UheI9V52DdZ 25zQ69oBJhfx8waJxTP5AqNhh2+/I8A6Ze/EyOa8wIjkgcXxTkPulBsbky9qdv0s S2Lsu/bL56K8iS+UGRsWoZJiRXKQ0FuxFh5tJG+/zBjNxQiQ9kYEjfHMI0g19bUD n+abE7m+OOky/vHPK8IcS8qvFLBU9bk27o1EF3HjIrNVlV7PR7cBRzb6JfPSSdaL dGW+69S12cSf6gtUeg0SMmfyXmz4gRQqMd77Lut8h11D97Y35l6h5qzNihEzQfcp yOVUyfx+muEOI5nqcZ8+1t6ivYz3k1DM -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:14 2025 by rpki-client