This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: Exsv6yFHQ+vVQCeag5YXuuhySXbWMfcLw8ILbbsMIwY= Subject key identifier: 4E:E0:1A:FA:42:02:2F:12:77:C2:6B:84:D7:2F:CA:B9:2D:A8:7C:7D Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 07F9 Signing time: Thu 04 Dec 2025 20:07:00 +0000 Manifest this update: Thu 04 Dec 2025 20:06:59 +0000 Manifest next update: Thu 11 Dec 2025 20:06:59 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: hGwaTXvYrRD/UlIqi7bGTr78qtBgwLRbBfeh9gBoIYw=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: +LCAkAjuOva0wvpdg8eQD1RUB4/36WnSyP1+IZjx2KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Dec 4 20:06:59 2025 GMT Not After : Dec 11 20:06:59 2025 GMT Subject: CN=6931e9e3-135b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:da:9f:fa:ab:6e:89:b5:b2:f9:b6:6d:10: c9:d9:fc:cc:c7:4d:1a:dc:f6:a1:81:64:02:b0:4e: 24:09:c7:97:b7:f9:42:11:13:67:bd:52:93:02:9f: c6:93:64:63:9b:96:26:eb:fa:42:f1:2f:b4:23:29: 3c:f6:17:b5:52:7d:8b:ea:07:f8:2a:f1:71:c1:a7: 1c:b6:99:35:79:35:73:ac:5a:f0:4c:18:53:bf:4f: 46:7e:0d:b3:56:40:6a:4f:a5:35:45:8d:ea:8f:d1: 80:3a:97:42:80:a7:da:5e:55:fa:fb:2d:87:5a:6c: c6:91:a7:0b:79:07:ef:7c:ef:05:04:21:15:d9:3d: 55:2b:8a:84:7e:76:77:d8:ee:b8:e3:a1:b2:fa:52: d6:69:74:dc:a1:a6:b7:92:40:aa:44:ad:24:18:b8: b6:54:e2:8b:bf:3d:6a:35:66:01:81:3a:d2:d4:87: 38:d0:f6:39:82:19:e6:39:d6:3c:2a:27:19:f8:4e: e4:70:d8:19:2a:33:31:fa:55:e4:b1:74:b6:01:88: 18:77:9d:95:67:e7:22:bb:ac:bb:01:fa:8a:25:4a: f3:2f:9c:24:ec:91:37:17:f3:5b:cc:e7:65:f9:bf: dd:31:b8:23:19:99:fd:42:83:a6:43:93:c5:4c:3b: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E0:1A:FA:42:02:2F:12:77:C2:6B:84:D7:2F:CA:B9:2D:A8:7C:7D X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:82:66:e1:9d:77:b5:fb:84:72:3d:ee:cd:35:6c:50:76:d3: f6:9d:c5:a2:55:8b:9c:28:bf:2e:e0:73:eb:f4:2f:ab:98:d8: cf:e8:84:0c:41:2f:f4:71:b7:cc:c1:ad:a5:52:a3:99:1f:90: b9:b2:4c:8c:99:77:de:b2:3b:94:10:19:da:6d:d1:00:ee:1c: 1b:7e:83:91:8c:cf:6f:7e:ee:3d:e8:6a:4b:28:a0:1b:9a:8b: 6f:6a:d0:0f:d4:ee:51:56:77:27:b8:36:3b:1e:08:d8:60:32: 95:ad:43:71:07:c3:d8:99:f5:be:5c:62:dd:8c:42:a3:ab:a9: 62:0a:56:4e:8e:fe:fb:3e:5c:1c:f3:6a:d3:1d:b6:72:3c:84: 54:17:71:59:e1:5b:ce:cf:82:aa:a9:ff:72:ad:ce:20:10:95: d6:1d:b2:c7:1d:4b:00:91:6b:b4:3e:1d:68:c2:53:80:da:97: 03:af:a8:30:39:79:0a:cf:97:33:fb:8b:53:62:8c:c4:79:f8: 9e:32:68:32:e8:79:bc:98:46:aa:b0:fc:9a:a3:6e:3f:64:4c: 46:2a:5e:b7:4f:70:59:7e:79:c3:3c:32:0c:3f:63:c0:13:39: 35:43:37:1f:08:a2:54:c9:9b:ba:28:a2:7d:39:48:ed:3f:04: 2f:7a:2b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjUxMjA0MjAwNjU5WhcNMjUxMjExMjAwNjU5WjAYMRYwFAYD VQQDEw02OTMxZTllMy0xMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5zan/qrbom1svm2bRDJ2fzMx00a3PahgWQCsE4kCceXt/lCERNnvVKTAp/G k2Rjm5Ym6/pC8S+0Iyk89he1Un2L6gf4KvFxwacctpk1eTVzrFrwTBhTv09Gfg2z VkBqT6U1RY3qj9GAOpdCgKfaXlX6+y2HWmzGkacLeQfvfO8FBCEV2T1VK4qEfnZ3 2O6446Gy+lLWaXTcoaa3kkCqRK0kGLi2VOKLvz1qNWYBgTrS1Ic40PY5ghnmOdY8 KicZ+E7kcNgZKjMx+lXksXS2AYgYd52VZ+ciu6y7AfqKJUrzL5wk7JE3F/NbzOdl +b/dMbgjGZn9QoOmQ5PFTDuhFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7gGvpC Ai8Sd8JrhNcvyrktqHx9MB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCygmbhnXe1+4RyPe7NNWxQdtP2ncWiVYucKL8u4HPr9C+rmNjP6IQM QS/0cbfMwa2lUqOZH5C5skyMmXfesjuUEBnabdEA7hwbfoORjM9vfu496GpLKKAb motvatAP1O5RVncnuDY7HgjYYDKVrUNxB8PYmfW+XGLdjEKjq6liClZOjv77Plwc 82rTHbZyPIRUF3FZ4VvOz4Kqqf9yrc4gEJXWHbLHHUsAkWu0Ph1owlOA2pcDr6gw OXkKz5cz+4tTYozEefieMmgy6Hm8mEaqsPyao24/ZExGKl63T3BZfnnDPDIMP2PA Ezk1QzcfCKJUyZu6KKJ9OUjtPwQveit6 -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:04 2025 by rpki-client