This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: ifKv+ZNrY3Hotgx1aIiZ3s2d7CvTssWf+7GpFZyXtp8= Subject key identifier: 89:E6:0D:96:D6:35:1A:DD:EC:4D:37:03:5B:01:CA:BC:2B:25:E0:0C Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 04C6 Signing time: Thu 04 Dec 2025 22:24:00 +0000 Manifest this update: Thu 04 Dec 2025 22:24:00 +0000 Manifest next update: Thu 11 Dec 2025 22:24:00 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: bq9FwG5x0AuO7xdmpLM0Bzd/19uvfQwUNzK4x50BTpw=) 2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: fmx4saivVaXmJUd4gXwiDyRFQMYRCvCqBBRUJpcv/Fk=) 3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: P1PBDp8Fe8uxDGasJiZSyCCWpfZTEWdvREcVTBxnWew=) 4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: Cgk1td49WwT1khDdvURu+IhFlLE5qwMRGXtWMjdRcM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Dec 4 22:24:00 2025 GMT Not After : Dec 11 22:24:00 2025 GMT Subject: CN=69320a00-4a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:c3:e4:fb:04:45:b0:6e:58:db:34:6e:01: 07:23:3e:a4:d7:36:49:1d:9f:43:66:f3:c4:93:71: db:fd:31:7e:97:3d:ea:14:48:87:2e:e5:14:da:84: 12:5a:78:aa:4c:c5:6b:75:42:30:de:2f:89:5f:69: d2:ee:51:fe:21:b6:4b:b9:3f:42:3d:6a:fd:6e:bd: cb:a7:7d:e0:77:ef:6c:2e:4e:f5:6a:f9:ef:8c:a2: 56:86:ff:0e:15:94:12:68:13:d4:4d:87:eb:4e:5b: 4f:5e:77:2d:7e:e8:de:5f:ee:bb:3b:32:15:b5:42: d6:2b:21:b9:d5:40:f9:e2:3b:d2:f7:bf:c5:6a:e0: ce:96:3f:f1:39:92:a5:6d:4c:59:fa:ae:6a:31:76: 86:ba:65:7d:75:08:ad:c4:81:e3:94:f9:3a:b4:7a: 6e:51:c5:6a:f7:5b:56:46:5e:16:bd:ef:72:a5:56: 8b:12:1c:9a:f9:7e:4a:dd:a7:eb:e4:e3:4b:5e:5e: e7:1a:eb:3b:5f:4a:74:1b:2a:ac:f7:03:cd:b4:53: 18:88:f5:c7:ea:9f:df:24:b2:97:d7:41:57:e6:d8: 05:4c:76:a4:9a:3e:52:2e:b8:f2:86:01:e4:a1:2b: 2c:49:3f:61:8e:2b:24:f3:9b:8e:f7:f3:f1:5d:39: 3a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E6:0D:96:D6:35:1A:DD:EC:4D:37:03:5B:01:CA:BC:2B:25:E0:0C X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:06:e0:e9:bb:ae:94:bf:a8:34:79:7f:a8:e3:15:56:5d: 00:a5:a1:d7:05:2c:64:0a:68:21:96:58:46:8a:99:e4:9e:95: d2:06:72:c8:d7:31:e4:a1:05:23:2b:ab:15:81:52:40:bd:b2: 0b:4a:11:a8:4e:b1:33:6d:4f:83:b2:33:4d:b3:cb:b5:5c:a4: fc:2d:e6:ee:bd:48:1c:f6:6e:22:75:a0:f4:b0:75:b8:c8:66: f7:6f:8a:c0:01:78:78:68:99:dc:38:22:fc:da:6a:94:b8:97: 93:59:e7:6c:93:b8:22:45:d0:da:bf:ec:62:b4:9b:96:00:6b: 6d:02:59:27:d4:a3:45:e3:0c:ad:04:89:2e:de:53:79:42:b5: 81:10:33:c1:ac:0e:46:f0:ba:47:66:0b:d5:a7:38:45:35:3a: eb:a8:78:ba:04:bc:3e:35:93:b7:2c:b2:5f:ce:57:57:43:5b: d6:bf:bd:f1:90:0c:05:d2:b0:70:be:7d:90:d1:d1:ef:e9:fb: c6:77:f8:7f:ad:eb:92:0b:c3:8b:11:2d:cf:60:59:9b:4c:2c: 76:d6:ee:52:22:bd:62:9c:d8:37:01:b8:a5:34:c6:81:8d:c8: db:98:11:a0:c0:70:00:c4:c2:97:f3:3f:95:56:9b:d3:50:82: eb:37:e3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjUxMjA0MjIyNDAwWhcNMjUxMjExMjIyNDAwWjAYMRYwFAYD VQQDEw02OTMyMGEwMC00YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPbD5PsERbBuWNs0bgEHIz6k1zZJHZ9DZvPEk3Hb/TF+lz3qFEiHLuUU2oQS WniqTMVrdUIw3i+JX2nS7lH+IbZLuT9CPWr9br3Lp33gd+9sLk71avnvjKJWhv8O FZQSaBPUTYfrTltPXnctfujeX+67OzIVtULWKyG51UD54jvS97/FauDOlj/xOZKl bUxZ+q5qMXaGumV9dQitxIHjlPk6tHpuUcVq91tWRl4Wve9ypVaLEhya+X5K3afr 5ONLXl7nGus7X0p0Gyqs9wPNtFMYiPXH6p/fJLKX10FX5tgFTHakmj5SLrjyhgHk oSssST9hjisk85uO9/PxXTk6dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInmDZbW NRrd7E03A1sByrwrJeAMMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZTQbg6buulL+oNHl/qOMVVl0ApaHXBSxkCmghllhGipnknpXSBnLI 1zHkoQUjK6sVgVJAvbILShGoTrEzbU+DsjNNs8u1XKT8LebuvUgc9m4idaD0sHW4 yGb3b4rAAXh4aJncOCL82mqUuJeTWedsk7giRdDav+xitJuWAGttAlkn1KNF4wyt BIku3lN5QrWBEDPBrA5G8LpHZgvVpzhFNTrrqHi6BLw+NZO3LLJfzldXQ1vWv73x kAwF0rBwvn2Q0dHv6fvGd/h/reuSC8OLES3PYFmbTCx21u5SIr1inNg3AbilNMaB jcjbmBGgwHAAxMKX8z+VVpvTUILrN+Og -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:14 2025 by rpki-client