This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json) Hash identifier: YtrmyZ7VqsfuRDtmNcDZcRjRmTATPoVXEOOxmh3SEIU= Subject key identifier: 0F:08:00:26:01:E0:7E:C0:F6:B4:F8:5F:76:1E:A7:72:2F:1A:4B:19 Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft Manifest number: A2 Signing time: Sun 07 Dec 2025 04:31:20 +0000 Manifest this update: Sun 07 Dec 2025 04:31:19 +0000 Manifest next update: Sun 14 Dec 2025 04:31:19 +0000 Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: Z25eDRGbvTasyZmnEBvvM19/sy8PUtz6PQbQH3wsUvA=) 2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: C95CWdcWS0/9Z9oU15qyADSExZ8oTkF5cAIWUUfMLiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Validity Not Before: Dec 7 04:31:19 2025 GMT Not After : Dec 14 04:31:19 2025 GMT Subject: CN=69350318-c829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:98:43:3a:a5:f7:6f:76:7a:56:52:84:8c: 63:c6:35:32:48:82:44:bb:3d:d9:88:86:1d:c5:fd: b8:9f:d3:d3:c4:02:71:3d:07:d5:d8:ab:5b:36:bb: 07:88:ae:fb:23:80:14:5a:91:77:da:71:01:87:9e: eb:8f:cd:08:4c:00:62:80:13:bb:b9:ff:3a:38:e5: 28:39:c5:f9:c9:e4:f0:e3:21:15:80:96:8a:be:0f: 4c:9d:1a:05:fd:5f:92:82:d8:e6:51:23:6c:a7:a9: f9:85:52:c0:f1:bb:88:91:18:03:67:87:81:01:f0: 00:96:53:5c:4e:f0:6d:5b:27:c9:dd:38:ee:6e:1f: 3a:68:dd:d5:8a:ad:a4:d5:57:14:f9:cb:c5:81:c1: 52:21:8e:e9:f6:2e:56:66:5f:f4:63:81:6f:d1:96: 5c:9d:62:e0:26:a4:c6:6d:87:3b:c5:58:a7:d2:46: cb:bf:4b:30:86:60:24:9b:0c:11:d2:51:a7:7f:43: 3f:b0:f6:47:91:1a:1c:c5:d8:84:30:63:1b:b9:20: 21:02:09:d7:b6:af:32:ea:0e:ec:7b:0e:97:fe:90: 09:f1:df:8d:71:67:66:7f:d2:0c:66:67:a6:f6:fe: 68:35:39:04:74:a9:a0:3f:05:37:fb:98:d3:73:27: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:08:00:26:01:E0:7E:C0:F6:B4:F8:5F:76:1E:A7:72:2F:1A:4B:19 X509v3 Authority Key Identifier: keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e8:a1:8a:ac:be:10:eb:cb:2d:ca:ea:94:c8:7e:67:1d:dc: 51:4c:2e:1b:5f:4a:80:d7:89:dd:26:6e:03:1b:21:b7:da:f9: f5:a6:66:e2:c7:91:88:19:c1:82:c0:53:4f:f2:09:2c:2e:58: 70:ef:a7:58:42:6a:90:de:d5:a4:52:5b:8b:48:9a:7c:d6:46: db:b9:5b:86:3e:52:b9:4e:c7:88:2e:d8:6f:fa:30:40:4c:50: 57:20:cb:0f:d6:27:ce:cb:cd:66:a7:a3:ac:07:3a:86:d6:80: 66:33:c7:7b:8f:a1:fd:e4:01:a2:be:d5:91:2b:af:1c:e6:de: 85:12:24:95:4a:f4:48:15:42:af:56:de:3f:2d:15:0e:a4:c8: 35:50:6f:43:f9:d3:97:28:1e:24:8d:ba:5e:f8:13:78:e0:81: 7f:5d:21:cc:03:23:a0:a9:bd:14:7e:73:9b:2d:88:74:73:e4: a3:b7:ba:c9:68:c3:41:b4:0c:14:64:56:05:68:d6:2b:d5:a7: 9d:a1:17:7b:06:5b:ee:e0:95:5e:e4:09:e2:4c:b0:7b:a9:ac: a9:03:64:c4:63:a5:75:e9:f8:79:11:52:61:d1:82:27:71:7e: f1:f5:e9:ae:68:d4:93:2a:6d:03:f3:3e:a2:6a:0f:02:60:ff: 71:b6:c0:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMDgxMTAvBgNVBAUTKDY4QUQwRDA0NzBGNkFDNkYxOUM2NEVFRjQwOTRFRTBC QjU4NzFFREEwHhcNMjUxMjA3MDQzMTE5WhcNMjUxMjE0MDQzMTE5WjAYMRYwFAYD VQQDEw02OTM1MDMxOC1jODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9SYQzql9292elZShIxjxjUySIJEuz3ZiIYdxf24n9PTxAJxPQfV2KtbNrsH iK77I4AUWpF32nEBh57rj80ITABigBO7uf86OOUoOcX5yeTw4yEVgJaKvg9MnRoF /V+SgtjmUSNsp6n5hVLA8buIkRgDZ4eBAfAAllNcTvBtWyfJ3Tjubh86aN3Viq2k 1VcU+cvFgcFSIY7p9i5WZl/0Y4Fv0ZZcnWLgJqTGbYc7xVin0kbLv0swhmAkmwwR 0lGnf0M/sPZHkRocxdiEMGMbuSAhAgnXtq8y6g7sew6X/pAJ8d+NcWdmf9IMZmem 9v5oNTkEdKmgPwU3+5jTcyckvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8IACYB 4H7A9rT4X3Yep3IvGksZMB8GA1UdIwQYMBaAFGitDQRw9qxvGcZO70CU7gu1hx7a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwOC85RTI4NTU3RUU0 RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJHOFp4azd2UUpUdUM3V0hI dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLME5CSEQyckc4WnhrN3ZRSlR1QzdXSEh0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIwOC85RTI4NTU3RUU0RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJH OFp4azd2UUpUdUM3V0hIdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC6KGKrL4Q68styuqUyH5nHdxRTC4bX0qA14ndJm4DGyG32vn1pmbi x5GIGcGCwFNP8gksLlhw76dYQmqQ3tWkUluLSJp81kbbuVuGPlK5TseILthv+jBA TFBXIMsP1ifOy81mp6OsBzqG1oBmM8d7j6H95AGivtWRK68c5t6FEiSVSvRIFUKv Vt4/LRUOpMg1UG9D+dOXKB4kjbpe+BN44IF/XSHMAyOgqb0UfnObLYh0c+Sjt7rJ aMNBtAwUZFYFaNYr1aedoRd7Blvu4JVe5AniTLB7qaypA2TEY6V16fh5EVJh0YIn cX7x9emuaNSTKm0D8z6iag8CYP9xtsCo -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:45 2025 by rpki-client