This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: zDCg34RDvStjYZ7Ylx1wHSkN8FyN1BA3yOVcr0B5clg= Subject key identifier: 84:1C:F6:B8:B1:D6:81:FA:8D:D0:40:EE:BB:87:4F:27:EF:B1:F4:B7 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CF8 Signing time: Sat 06 Dec 2025 17:29:14 +0000 Manifest this update: Sat 06 Dec 2025 17:29:14 +0000 Manifest next update: Sat 13 Dec 2025 17:29:14 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: 3SnQ1m6nF0rc/U0AjuStoTG8Uif/5r7zZ3IHbASBEzQ=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: 7aBlRGKjzxRqNTE4/k88lfJou1zQvjo1o2zcrm10Xw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Dec 6 17:29:14 2025 GMT Not After : Dec 13 17:29:14 2025 GMT Subject: CN=693467ea-8086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:05:cb:20:89:80:96:c7:37:ad:a8:06:34: 05:78:cd:9d:e8:b4:e0:4b:c3:85:99:49:13:d4:c2: de:cf:b9:16:9a:0b:24:4d:eb:f4:f7:bb:ce:92:60: 9e:7b:c9:e0:1c:b3:05:27:e1:47:56:74:71:88:68: c5:fe:1e:a9:d3:f5:f2:81:98:d4:dc:c7:66:a3:fb: 7c:dc:51:95:ef:24:86:0e:20:88:95:76:52:dc:47: d7:cc:2d:de:8e:10:ef:d5:06:d3:66:a7:a6:84:5f: 2a:90:e2:f4:45:54:fa:32:f1:1b:a5:c9:5d:f3:e1: 19:dd:82:06:2b:64:0b:4a:ee:c7:6d:f3:3b:cf:23: 9b:96:38:1c:42:87:f7:bb:92:cb:72:ff:fe:bf:f1: 80:9e:5e:63:14:c4:83:d7:e5:fb:0c:51:ce:02:ab: 97:37:75:5f:1d:1f:da:f7:15:a5:f2:fe:53:09:6d: fa:e6:4b:ae:3c:22:2b:03:0a:20:bc:0c:02:e2:39: 7b:c7:e4:78:50:fb:eb:00:8a:43:b8:dc:3e:17:10: b1:9f:6c:ab:b5:6f:d1:e4:61:6e:e3:c7:7f:e5:37: d4:7e:67:4a:1b:a0:a0:ac:6e:6e:df:06:d4:70:4c: 1d:5c:49:9f:8c:46:da:00:ed:05:25:ca:f2:29:39: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:F6:B8:B1:D6:81:FA:8D:D0:40:EE:BB:87:4F:27:EF:B1:F4:B7 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e0:85:e8:fa:0b:e9:47:eb:08:f4:7c:2f:79:1d:0a:46:ad: a9:91:36:f2:77:b6:a1:31:38:e7:fd:0b:b2:18:47:1b:32:a0: ce:db:38:8b:ef:13:63:8a:21:a6:63:5a:ee:59:9c:a6:9b:1d: c6:39:4e:59:63:c3:e2:5d:17:d9:ac:91:2c:27:a9:f8:5f:c8: 19:70:93:d7:d5:08:05:c4:f4:09:5b:9b:07:c0:17:28:dd:ad: 5c:d3:d4:bc:d4:ea:e8:27:e4:b9:db:25:11:15:b6:52:70:62: ab:22:ee:dc:45:7b:0f:8f:8d:c3:e8:ce:67:ca:ef:2d:cf:0b: 51:19:1b:77:62:3f:b0:04:a8:68:e3:c7:27:2a:d5:03:0f:b6: 01:91:54:00:dc:28:96:97:4a:80:bf:de:67:eb:a9:2d:49:69: 33:10:de:5c:38:87:03:3e:b2:0f:3b:69:ee:a2:6f:b8:b2:bb: f0:48:d2:98:fb:fa:ae:6f:c8:b2:cc:fa:11:56:ed:94:73:53: 9e:6e:a2:20:a7:26:11:30:c8:2b:1e:02:11:c0:11:25:b9:ec: 07:66:51:39:b8:1d:27:0c:04:b0:c7:70:9e:24:c8:d5:61:76: f0:66:fe:e8:5e:b5:2b:f6:ee:fd:ab:c3:6e:59:66:df:6a:ba: f5:8c:d7:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUxMjA2MTcyOTE0WhcNMjUxMjEzMTcyOTE0WjAYMRYwFAYD VQQDEw02OTM0NjdlYS04MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1QFyyCJgJbHN62oBjQFeM2d6LTgS8OFmUkT1MLez7kWmgskTev097vOkmCe e8ngHLMFJ+FHVnRxiGjF/h6p0/XygZjU3Mdmo/t83FGV7ySGDiCIlXZS3EfXzC3e jhDv1QbTZqemhF8qkOL0RVT6MvEbpcld8+EZ3YIGK2QLSu7HbfM7zyObljgcQof3 u5LLcv/+v/GAnl5jFMSD1+X7DFHOAquXN3VfHR/a9xWl8v5TCW365kuuPCIrAwog vAwC4jl7x+R4UPvrAIpDuNw+FxCxn2yrtW/R5GFu48d/5TfUfmdKG6CgrG5u3wbU cEwdXEmfjEbaAO0FJcryKTkQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQc9rix 1oH6jdBA7ruHTyfvsfS3MB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE4IXo+gvpR+sI9HwveR0KRq2pkTbyd7ahMTjn/QuyGEcbMqDO2ziL 7xNjiiGmY1ruWZymmx3GOU5ZY8PiXRfZrJEsJ6n4X8gZcJPX1QgFxPQJW5sHwBco 3a1c09S81OroJ+S52yURFbZScGKrIu7cRXsPj43D6M5nyu8tzwtRGRt3Yj+wBKho 48cnKtUDD7YBkVQA3CiWl0qAv95n66ktSWkzEN5cOIcDPrIPO2nuom+4srvwSNKY +/qub8iyzPoRVu2Uc1OebqIgpyYRMMgrHgIRwBEluewHZlE5uB0nDASwx3CeJMjV YXbwZv7oXrUr9u79q8NuWWbfarr1jNdb -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:26 2025 by rpki-client