This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: 4vpbEP1Sg1IvCXHQUDuwdKILzZA4UIR9RxHaij54h2A= Subject key identifier: 9D:EC:5B:DA:A9:1C:75:1E:98:8A:4D:53:61:0A:A1:27:CC:AF:2D:C0 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 0207 Signing time: Fri 05 Dec 2025 00:45:22 +0000 Manifest this update: Fri 05 Dec 2025 00:45:21 +0000 Manifest next update: Fri 12 Dec 2025 00:45:21 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: 4B0vb6VWqjX7HThUNlXGJgSCRN30ydtIDiIvDKlXWCQ=) 2: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: KbkzuU5qC68AOUq0JQmcukOnqpcHO3TNFWyQWU16A8E=) 3: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: P40/jJ7W+/O+PiJ/8mhL5CI3A7Dxo/gaXDncIVQuKdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Dec 5 00:45:21 2025 GMT Not After : Dec 12 00:45:21 2025 GMT Subject: CN=69322b22-cf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:ce:b1:00:cc:5c:58:37:66:fb:4d:58:b1: fa:40:ef:7f:38:e9:46:fe:45:4c:5f:c6:31:74:7d: 26:36:62:6f:31:99:8d:5e:f5:97:18:01:ce:eb:6f: 10:42:33:74:94:e7:fd:8d:d2:8c:fb:90:6e:07:83: 5c:ea:37:65:6a:e7:80:67:b7:32:68:e2:3b:2c:b9: 2c:e3:d8:d9:df:64:5a:9b:ea:65:c4:e2:66:a1:e0: ea:91:0a:bf:98:67:82:75:fc:dd:36:f1:ce:ee:eb: 6b:27:60:49:38:2d:31:f6:93:70:8c:8c:bf:bd:f8: 3a:17:e1:9e:06:43:56:a1:05:d6:e6:a6:11:cc:d7: ba:03:b9:9b:77:d3:0d:ce:f2:21:0d:29:8d:27:1f: 6a:d1:a3:36:14:87:64:ab:49:35:0d:a7:80:67:9d: 73:95:ca:a0:6d:01:67:5c:e7:77:ea:c7:73:f8:90: db:9a:94:8b:26:24:20:66:45:50:9b:b6:18:76:10: ba:34:3d:11:b0:9f:65:c1:80:9a:3a:8d:ea:70:82: 16:8a:52:8e:f8:8e:4e:4e:bc:a3:20:ee:2c:24:94: 07:59:25:c8:ec:dc:c1:49:ea:01:3d:4f:67:46:15: 74:33:14:91:9e:22:19:0e:2d:e8:f8:7f:26:ad:c7: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:5B:DA:A9:1C:75:1E:98:8A:4D:53:61:0A:A1:27:CC:AF:2D:C0 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:53:d8:65:b7:af:01:f5:44:dd:c9:ae:95:a8:f9:9d:94:18: 9f:cd:19:65:f8:cc:2e:f7:d6:10:62:86:b9:be:35:90:d5:99: d6:f4:d3:a6:d6:cb:f9:bd:db:1b:40:03:6a:81:80:39:cd:95: 70:d5:b7:41:59:8f:0e:45:ec:57:0b:40:44:71:9d:b1:b1:1f: 13:ea:34:6f:8c:ac:11:16:b2:9b:94:6d:33:a6:82:94:d8:63: b1:3e:e7:a4:fd:46:03:e2:4d:ea:f1:3a:a0:f6:e6:55:49:56: 4e:b6:d5:d9:20:49:51:c0:f4:ce:94:a2:c0:b9:17:0e:d6:b7: aa:aa:e4:fa:03:52:84:50:65:6c:21:a7:27:f4:8f:22:91:3d: f6:1d:de:a0:00:94:0a:5a:52:38:66:c7:f3:2f:a6:11:ed:d1: 47:1c:0c:b7:71:80:70:7c:8e:a8:68:78:39:57:8d:2e:29:f5: 3b:7c:38:1d:a5:67:49:5a:de:43:27:8e:37:0a:93:10:5f:bc: d7:b2:f2:29:74:4e:f7:2f:b3:31:dd:e6:9b:f8:79:3e:29:3d: 7f:ba:f9:68:29:0b:46:c8:3c:69:2d:0d:1f:e8:54:5d:de:9d: 77:ac:ea:88:ec:21:19:fa:dc:21:bc:9d:02:fc:df:20:c7:c9: 64:ec:39:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjUxMjA1MDA0NTIxWhcNMjUxMjEyMDA0NTIxWjAYMRYwFAYD VQQDEw02OTMyMmIyMi1jZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qXOsQDMXFg3ZvtNWLH6QO9/OOlG/kVMX8YxdH0mNmJvMZmNXvWXGAHO628Q QjN0lOf9jdKM+5BuB4Nc6jdlaueAZ7cyaOI7LLks49jZ32Ram+plxOJmoeDqkQq/ mGeCdfzdNvHO7utrJ2BJOC0x9pNwjIy/vfg6F+GeBkNWoQXW5qYRzNe6A7mbd9MN zvIhDSmNJx9q0aM2FIdkq0k1DaeAZ51zlcqgbQFnXOd36sdz+JDbmpSLJiQgZkVQ m7YYdhC6ND0RsJ9lwYCaOo3qcIIWilKO+I5OTryjIO4sJJQHWSXI7NzBSeoBPU9n RhV0MxSRniIZDi3o+H8mrceNpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3sW9qp HHUemIpNU2EKoSfMry3AMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjU9hlt68B9UTdya6VqPmdlBifzRll+Mwu99YQYoa5vjWQ1ZnW9NOm 1sv5vdsbQANqgYA5zZVw1bdBWY8ORexXC0BEcZ2xsR8T6jRvjKwRFrKblG0zpoKU 2GOxPuek/UYD4k3q8Tqg9uZVSVZOttXZIElRwPTOlKLAuRcO1reqquT6A1KEUGVs Iacn9I8ikT32Hd6gAJQKWlI4ZsfzL6YR7dFHHAy3cYBwfI6oaHg5V40uKfU7fDgd pWdJWt5DJ443CpMQX7zXsvIpdE73L7Mx3eab+Hk+KT1/uvloKQtGyDxpLQ0f6FRd 3p13rOqI7CEZ+twhvJ0C/N8gx8lk7Dm0 -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:47 2025 by rpki-client