This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: zk2UmGq9tBShdeNRsimqq1J4baHsjR9fML+fyyNFQGg= Subject key identifier: 46:4F:CD:00:C5:63:07:F7:55:5B:A6:70:E8:DA:DB:AC:6C:A8:EF:7D Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 0948 Signing time: Sat 06 Dec 2025 19:27:21 +0000 Manifest this update: Sat 06 Dec 2025 19:27:21 +0000 Manifest next update: Sat 13 Dec 2025 19:27:21 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: Bw95VfM29R7IYUuItEPW54XDurTlOxwJi7YbTcnK1z4=) 2: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: Ms6hkj2gNBoVKwju3YpVFi7TOZ5XoCEB+ud2155SGQw=) 3: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: krOpio4wz9zZ7mzvOOi6fz/jljv3s2vU7Ok4eA4dM3Q=) 4: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: Qpx6+MAMFv4aX1D2NecodjsfaY0GuU6bXaL2b1GdFHc=) 5: 88252000B55C11ECA9565039C4F9AE02.roa (hash: ROM2aBA2uOLvGraWZ2OMfhtRxZ5DusfnSKSNI9N61E8=) 6: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=) 7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: Ejx3yVkwMIGPx4PH4VpagQp/pASvV9ahz0Vqhx7EKZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Dec 6 19:27:21 2025 GMT Not After : Dec 13 19:27:21 2025 GMT Subject: CN=69348399-d29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:19:0e:a0:7a:47:3f:e2:41:83:0f:51:2e: 3b:29:ae:e9:fd:b8:8c:73:7b:4d:df:d7:16:e3:60: 01:b0:6f:c4:b4:61:9c:1e:e4:d3:ab:b4:15:81:1b: ec:1f:f6:25:51:b2:e7:42:3b:07:99:82:c3:ea:ab: e2:f5:c9:99:81:b1:07:34:9f:a8:dc:f1:06:cd:9f: 4c:ce:bc:08:96:c9:8c:e1:8b:04:d8:76:c1:b8:55: db:d7:65:36:1e:75:2e:d3:22:08:66:80:7c:d4:03: ec:9e:c5:b1:a3:28:b7:fb:ef:23:91:af:9d:4e:b6: f6:53:a9:24:98:6d:0a:dc:e1:a2:fa:3b:bf:31:45: 2d:fa:0c:98:e5:ca:d9:14:b2:aa:10:20:e9:81:60: c1:f5:e0:5d:ed:80:9c:0d:bf:5c:86:6f:5b:dc:4e: 6f:a9:e1:01:c7:9f:6a:ce:9f:17:80:39:2e:6c:2d: a0:45:aa:84:2e:f8:cb:ec:24:e5:91:10:0c:0b:fc: 98:7b:37:ba:95:57:81:87:e2:e1:13:13:09:7f:d2: c8:8c:a1:e4:e0:b5:67:83:a2:8b:29:93:3d:7c:df: 00:45:81:17:38:92:31:1a:63:04:2b:3e:e2:e6:2e: 6c:b5:f9:29:ba:5f:03:f0:ee:6c:6f:45:df:c8:17: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4F:CD:00:C5:63:07:F7:55:5B:A6:70:E8:DA:DB:AC:6C:A8:EF:7D X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:31:34:f2:88:32:9e:39:79:74:c1:65:7c:97:7a:94:dd:a3: 44:c2:ef:45:55:f3:57:16:12:bb:b4:b5:71:be:8b:85:c9:42: 75:60:6c:d2:c8:b8:ad:41:74:35:d7:2d:01:26:51:b5:bc:c0: 26:4b:1c:81:fb:ff:c8:3a:1b:54:8f:d1:c1:0d:81:f5:a8:63: ec:81:70:9e:fe:cc:3d:04:c1:d9:65:4c:f1:e2:f0:a1:39:20: 39:d4:90:82:e4:ce:2b:04:50:2d:e4:5b:25:dd:7c:cf:a2:f9: de:42:68:46:a1:9f:f9:c7:47:ee:3a:bb:bb:28:28:0f:7f:e3: 7b:22:df:f1:ea:eb:f0:f7:dd:e4:18:f7:27:5b:63:df:ee:8c: 4c:11:9d:2c:72:0b:ee:01:14:56:26:31:9f:7f:65:7a:93:66: 3c:66:e6:56:16:ea:ed:f1:ad:b0:a1:dd:47:df:74:34:35:07: 77:ed:a6:e0:2d:b6:07:e8:4e:c8:03:61:0c:34:09:9d:fc:9f: ce:13:2e:0c:93:42:a2:de:22:a7:64:99:88:41:31:fb:99:91: 70:00:63:e0:06:2e:4c:55:00:ad:9f:1d:a9:2c:ad:99:2d:90: 4e:df:d6:17:ca:0d:cc:2d:5d:dd:bc:f1:bb:f3:eb:77:63:e2: a3:88:4b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUxMjA2MTkyNzIxWhcNMjUxMjEzMTkyNzIxWjAYMRYwFAYD VQQDEw02OTM0ODM5OS1kMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxwZDqB6Rz/iQYMPUS47Ka7p/biMc3tN39cW42ABsG/EtGGcHuTTq7QVgRvs H/YlUbLnQjsHmYLD6qvi9cmZgbEHNJ+o3PEGzZ9MzrwIlsmM4YsE2HbBuFXb12U2 HnUu0yIIZoB81APsnsWxoyi3++8jka+dTrb2U6kkmG0K3OGi+ju/MUUt+gyY5crZ FLKqECDpgWDB9eBd7YCcDb9chm9b3E5vqeEBx59qzp8XgDkubC2gRaqELvjL7CTl kRAMC/yYeze6lVeBh+LhExMJf9LIjKHk4LVng6KLKZM9fN8ARYEXOJIxGmMEKz7i 5i5stfkpul8D8O5sb0XfyBf40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZPzQDF Ywf3VVumcOja26xsqO99MB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXMTTyiDKeOXl0wWV8l3qU3aNEwu9FVfNXFhK7tLVxvouFyUJ1YGzS yLitQXQ11y0BJlG1vMAmSxyB+//IOhtUj9HBDYH1qGPsgXCe/sw9BMHZZUzx4vCh OSA51JCC5M4rBFAt5Fsl3XzPovneQmhGoZ/5x0fuOru7KCgPf+N7It/x6uvw993k GPcnW2Pf7oxMEZ0scgvuARRWJjGff2V6k2Y8ZuZWFurt8a2wod1H33Q0NQd37abg LbYH6E7IA2EMNAmd/J/OEy4Mk0Ki3iKnZJmIQTH7mZFwAGPgBi5MVQCtnx2pLK2Z LZBO39YXyg3MLV3dvPG78+t3Y+KjiEv3 -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:29 2025 by rpki-client