This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: n7MNBOlzAbIx6b2O+lO4W1YK2mm1tcngMTR/KebgDbI= Subject key identifier: 0F:AF:65:62:45:7F:90:96:85:D5:6D:76:51:38:7F:EF:D1:04:14:C7 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 023B Signing time: Fri 05 Dec 2025 00:15:25 +0000 Manifest this update: Fri 05 Dec 2025 00:15:25 +0000 Manifest next update: Fri 12 Dec 2025 00:15:25 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: ZHrUW/ubKniRwq79SlmrRQ2XB77wPcV/fJJc7OZkW/o=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: eBrKZQqIUQgxJsjLbBp6BZmWWZAOHf0P0YyuhSY1Lts=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 2ABgaw5i7gtrVWQKQRB2kERFT6VG3t9JHA5FdKRAAjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Dec 5 00:15:25 2025 GMT Not After : Dec 12 00:15:25 2025 GMT Subject: CN=6932241d-d606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:cb:7e:5a:39:85:31:30:95:74:2e:30:01: c5:88:ed:08:75:fa:c0:61:da:79:6b:57:6d:41:52: d6:c4:d0:74:96:8a:ca:8a:5a:31:a3:83:6b:e9:e6: b2:13:fb:42:da:2b:25:75:01:b6:e5:8a:50:ee:fa: d5:74:a7:8a:93:90:3e:a3:7f:3f:44:80:27:d7:2e: 97:18:5b:2e:c1:5a:29:b1:92:8c:21:dc:92:bc:de: d9:aa:34:25:b3:fb:61:76:ee:3e:02:8d:c5:b6:c1: 33:cc:fc:c2:d7:4e:33:21:46:09:b0:04:e0:8a:74: c7:08:b5:29:f0:f8:25:10:19:a9:59:9d:16:8b:ec: 18:70:70:09:53:ac:38:5c:41:46:48:dd:04:4d:03: b7:56:77:fc:dc:46:b1:c5:0d:c9:f3:70:72:96:5d: 61:dc:24:c5:1b:d3:90:cc:e9:b6:e0:20:ff:18:97: 49:ce:83:d7:c1:1a:4e:42:02:4a:2e:54:8d:dc:14: bd:a9:81:97:17:ed:20:43:c5:13:30:62:d4:36:a4: dd:de:a1:07:40:ad:32:48:90:b9:a3:57:b5:30:96: 3f:28:fa:60:47:ea:2e:68:d4:5e:01:17:b2:49:a2: 9e:ef:a9:95:51:52:5e:cf:11:88:8a:94:6b:14:2c: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:65:62:45:7F:90:96:85:D5:6D:76:51:38:7F:EF:D1:04:14:C7 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bb:eb:d2:78:63:06:71:b1:3d:86:52:65:ec:04:52:b2:8d: c7:40:68:24:b4:2a:b0:83:a6:98:2f:2c:c0:1c:1f:08:11:d5: 4b:c7:dd:c7:e8:df:b4:1c:ca:25:f4:d6:24:da:a9:f6:ab:ec: c8:cd:9e:7e:49:d6:d1:18:23:f6:4c:c8:dd:88:81:91:cb:c5: dd:79:29:62:16:ee:b3:ad:ae:eb:58:80:3b:4f:d0:77:90:9b: 29:c0:c9:ac:49:a8:23:48:49:06:a9:ae:91:ba:0b:00:8b:b3: b9:93:c5:8e:53:50:08:a1:c3:b9:d7:46:c6:7c:97:2a:72:2b: 92:39:59:be:68:04:94:ee:10:6f:47:fd:48:6d:ad:9b:11:69: e0:c9:f4:ba:c4:1e:2d:32:19:79:e8:1a:4e:8c:54:31:44:90: 69:3a:57:cf:c6:31:d7:38:46:5e:e9:2b:cf:05:29:b8:77:d8: 61:1a:7d:37:de:63:03:47:1c:22:2d:5a:82:56:a9:ae:6b:0b: 88:fc:c6:07:73:86:d1:74:b3:f6:0a:39:5d:ed:f1:78:1d:5e: 88:97:29:4a:b1:dd:34:33:b3:a4:9e:98:8a:65:6c:8c:a6:f3: 73:f4:b1:2e:6d:3a:93:4e:a6:4c:f3:bf:61:ce:73:0f:ea:a2: 19:75:24:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUxMjA1MDAxNTI1WhcNMjUxMjEyMDAxNTI1WjAYMRYwFAYD VQQDEw02OTMyMjQxZC1kNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu83Lflo5hTEwlXQuMAHFiO0IdfrAYdp5a1dtQVLWxNB0lorKiloxo4Nr6eay E/tC2isldQG25YpQ7vrVdKeKk5A+o38/RIAn1y6XGFsuwVopsZKMIdySvN7ZqjQl s/thdu4+Ao3FtsEzzPzC104zIUYJsATginTHCLUp8PglEBmpWZ0Wi+wYcHAJU6w4 XEFGSN0ETQO3Vnf83EaxxQ3J83Byll1h3CTFG9OQzOm24CD/GJdJzoPXwRpOQgJK LlSN3BS9qYGXF+0gQ8UTMGLUNqTd3qEHQK0ySJC5o1e1MJY/KPpgR+ouaNReARey SaKe76mVUVJezxGIipRrFCwrLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+vZWJF f5CWhdVtdlE4f+/RBBTHMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGu+vSeGMGcbE9hlJl7ARSso3HQGgktCqwg6aYLyzAHB8IEdVLx93H 6N+0HMol9NYk2qn2q+zIzZ5+SdbRGCP2TMjdiIGRy8XdeSliFu6zra7rWIA7T9B3 kJspwMmsSagjSEkGqa6RugsAi7O5k8WOU1AIocO510bGfJcqciuSOVm+aASU7hBv R/1Iba2bEWngyfS6xB4tMhl56BpOjFQxRJBpOlfPxjHXOEZe6SvPBSm4d9hhGn03 3mMDRxwiLVqCVqmuawuI/MYHc4bRdLP2Cjld7fF4HV6IlylKsd00M7OknpiKZWyM pvNz9LEubTqTTqZM879hznMP6qIZdSSC -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:40 2025 by rpki-client