This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json) Hash identifier: QrmvPRyaRBXJlH8qnY/4BFk6r1/be78hD9mjt5F7xCs= Subject key identifier: AE:F2:64:02:7F:44:99:B0:F7:C3:D7:1C:CD:D6:07:27:8A:57:BF:BA Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft Manifest number: 01D2 Signing time: Fri 05 Dec 2025 01:08:13 +0000 Manifest this update: Fri 05 Dec 2025 01:08:13 +0000 Manifest next update: Fri 12 Dec 2025 01:08:13 +0000 Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: bAj8yGOCuhJ06hHMoJE8lVo/biNwYsFhJaI4TGmQg60=) 2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: 9gR2lRbVVIU22KEWmoGtOBdRGANvKvJYg+mYVptNNuo=) 3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: UlpJBRG/slW4YmDu7jI0m8GwClz9FqM/W/iTuDuu4YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Validity Not Before: Dec 5 01:08:13 2025 GMT Not After : Dec 12 01:08:13 2025 GMT Subject: CN=6932307d-9e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:fe:7f:80:14:6a:c8:83:18:22:89:24:56: 99:8a:cb:60:67:8d:0c:93:7e:5b:2e:ac:c6:22:98: 6c:c5:80:18:b9:0d:e2:5b:ed:73:dc:09:68:80:22: 12:e9:34:5d:16:fb:51:5e:90:bb:1d:01:2d:d4:cd: 67:dc:b5:0c:b6:e4:1a:a8:6f:c7:1a:80:eb:e2:d5: 3a:56:12:5b:87:12:2c:c6:0e:c3:10:61:20:ba:89: fe:91:c0:4e:95:30:66:31:7c:91:d8:63:d5:1c:9a: be:b6:1a:dc:9e:aa:29:80:9e:a2:5e:45:06:c5:51: 03:be:b5:97:d5:38:31:23:64:da:3e:17:41:fe:8f: 82:7d:5b:cf:ed:bb:c4:cb:4a:75:30:67:6c:ae:fa: 12:6e:c7:b1:94:98:5a:88:65:32:c8:1d:32:ab:cf: 7e:34:9f:3e:43:92:24:4b:e6:82:d4:57:df:54:88: a8:5a:94:4b:7d:39:47:1a:ff:13:cc:50:64:44:92: 59:e5:9f:f7:cd:ca:9f:62:d3:80:a4:5e:a7:dc:6b: f1:c1:e6:00:8a:75:5f:df:7a:d2:38:a0:df:cb:33: c3:af:92:aa:11:13:7d:d6:c4:58:0a:de:2a:ab:fc: 46:f2:a5:15:55:8a:0e:64:70:67:c0:0b:98:ad:09: ad:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F2:64:02:7F:44:99:B0:F7:C3:D7:1C:CD:D6:07:27:8A:57:BF:BA X509v3 Authority Key Identifier: keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2c:07:b7:45:58:ab:73:ac:5a:51:ef:43:4b:d7:56:29:04: d7:2d:7d:af:12:bd:4c:38:e5:79:72:25:46:69:05:6f:e6:9a: 89:a7:17:4c:b3:a0:c6:fc:03:e4:2b:f0:f3:88:47:49:ad:ae: e6:cb:fa:77:fd:e3:1e:ea:a7:d1:a4:39:86:53:51:18:77:19: 69:df:53:19:e4:1a:66:e4:32:e5:e8:aa:1c:de:c8:01:4c:28: c7:2b:80:76:b9:4a:f9:c6:af:98:72:89:e0:db:0e:b9:f8:cc: a6:49:cf:a6:4d:65:3f:84:40:f0:19:e5:d7:1f:33:16:7e:4c: 83:50:be:0e:79:7e:06:96:00:39:c4:ca:26:62:89:14:91:66: e0:d6:42:c4:fe:35:20:c8:17:9a:c6:6a:3c:cf:65:9b:b3:0d: 64:50:57:4f:4f:db:0c:d1:3e:f8:7f:ee:a8:66:6a:0a:7b:d2: 60:a1:71:b7:ff:39:94:51:d4:46:65:8e:5f:17:6c:fa:0a:af: c7:a7:60:e9:89:a5:11:d4:37:78:45:37:91:9b:68:28:75:a2: fb:77:d0:2d:27:f4:e9:2e:9d:2c:b9:57:3f:d8:ea:cb:4d:58: 41:3e:85:7d:5e:73:86:79:99:8d:71:b6:f8:67:a2:b3:7e:ba: 7b:db:ba:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MkUxMTAvBgNVBAUTKEVGNjcwMkE3RDBBRUM4MzRERUZCOEY0MTY4QjJGRThG NEQ1ODQzRTgwHhcNMjUxMjA1MDEwODEzWhcNMjUxMjEyMDEwODEzWjAYMRYwFAYD VQQDEw02OTMyMzA3ZC05ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3P+f4AUasiDGCKJJFaZistgZ40Mk35bLqzGIphsxYAYuQ3iW+1z3AlogCIS 6TRdFvtRXpC7HQEt1M1n3LUMtuQaqG/HGoDr4tU6VhJbhxIsxg7DEGEguon+kcBO lTBmMXyR2GPVHJq+thrcnqopgJ6iXkUGxVEDvrWX1TgxI2TaPhdB/o+CfVvP7bvE y0p1MGdsrvoSbsexlJhaiGUyyB0yq89+NJ8+Q5IkS+aC1FffVIioWpRLfTlHGv8T zFBkRJJZ5Z/3zcqfYtOApF6n3GvxweYAinVf33rSOKDfyzPDr5KqERN91sRYCt4q q/xG8qUVVYoOZHBnwAuYrQmttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7yZAJ/ RJmw98PXHM3WByeKV7+6MB8GA1UdIwQYMBaAFO9nAqfQrsg03vuPQWiy/o9NWEPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyRS9EQzMzNTk3QzBC NjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlEVGUtNDlCYUxMLWowMVlR LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyY0NwOUN1eURUZS00OUJhTEwtajAxWVEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyRS9EQzMzNTk3QzBCNjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlE VGUtNDlCYUxMLWowMVlRLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOLAe3RVirc6xaUe9DS9dWKQTXLX2vEr1MOOV5ciVGaQVv5pqJpxdM s6DG/APkK/DziEdJra7my/p3/eMe6qfRpDmGU1EYdxlp31MZ5Bpm5DLl6Koc3sgB TCjHK4B2uUr5xq+Ycong2w65+MymSc+mTWU/hEDwGeXXHzMWfkyDUL4OeX4GlgA5 xMomYokUkWbg1kLE/jUgyBeaxmo8z2Wbsw1kUFdPT9sM0T74f+6oZmoKe9JgoXG3 /zmUUdRGZY5fF2z6Cq/Hp2DpiaUR1Dd4RTeRm2godaL7d9AtJ/TpLp0suVc/2OrL TVhBPoV9XnOGeZmNcbb4Z6Kzfrp727oM -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:30 2025 by rpki-client