This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json) Hash identifier: IK7vVYdv1HlWjsOTvXyX9xdLiqlx6MX819rN3c5/K98= Subject key identifier: B1:86:6B:72:CD:41:AE:95:A0:60:97:E6:EB:FB:6D:89:52:E9:60:B8 Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft Manifest number: 06AC Signing time: Thu 04 Dec 2025 21:06:56 +0000 Manifest this update: Thu 04 Dec 2025 21:06:55 +0000 Manifest next update: Thu 11 Dec 2025 21:06:55 +0000 Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: AARSyS5hq89UUzvXSjdCY6mRhbYfh85ZHnoMSX0jabw=) 2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: /i9RofZ06AYBMENjcaJpNwKG22jU3wGWaEpuwf3htx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: Dec 4 21:06:55 2025 GMT Not After : Dec 11 21:06:55 2025 GMT Subject: CN=6931f7f0-7d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:5c:3a:9b:a6:11:62:a4:44:15:0f:b0:9c: b9:1f:30:d8:3e:dd:c4:89:7f:be:2f:60:c4:e1:8b: 75:31:62:66:5e:e4:2c:19:0b:d0:20:30:83:ee:91: 9f:95:92:f0:10:e3:58:86:89:5b:a0:86:82:28:10: 47:49:3f:08:d5:56:00:89:60:74:e9:66:41:3b:95: 2e:5d:b3:90:46:a7:00:68:a5:d7:8b:2c:87:73:93: 1a:ec:7e:26:a2:88:6d:cf:76:96:c8:07:6c:dd:24: 53:1b:26:87:34:26:29:25:eb:85:77:b7:84:28:37: 39:b1:e4:f0:58:79:ff:8c:e7:b9:bd:f9:e3:c2:c7: 7b:d5:c6:46:0e:66:2e:37:ac:c7:92:43:46:32:27: a0:23:f5:10:f8:4e:f0:e7:23:cd:2e:22:e8:1b:78: 3c:45:50:83:20:70:69:fe:f5:08:27:86:b2:de:fa: 30:97:54:07:e9:ac:6f:0e:7b:0c:30:89:3b:b4:2d: ae:95:f0:d1:d3:b6:57:19:be:7c:16:42:f7:f8:ff: 4e:2d:3e:97:1a:a8:f7:9d:bd:f6:4f:bf:28:d0:f2: e9:4a:31:5c:dc:27:b0:52:4d:4a:bc:23:8a:93:b4: d9:0f:c9:3a:1e:69:0e:a4:a0:99:1d:53:6c:10:21: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:6B:72:CD:41:AE:95:A0:60:97:E6:EB:FB:6D:89:52:E9:60:B8 X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2a:81:51:04:c9:5d:13:83:5f:6c:ab:09:19:82:15:5f:f0: ae:b8:78:01:03:16:7e:6a:e5:c1:b1:76:57:06:f9:43:3c:a6: 1f:a3:49:a9:2b:38:02:01:65:5e:7d:f7:64:54:64:e1:62:b4: 98:f8:1c:da:72:d4:dd:7c:9c:c2:99:1a:31:5e:26:81:53:f9: 8b:93:0d:ea:f8:a4:9a:d6:35:1b:5a:cb:80:fc:72:16:95:cd: 01:55:11:e5:1e:17:36:e1:3b:69:86:a7:54:a5:f0:31:cc:aa: 1d:3b:91:ce:b1:0a:58:38:df:ed:97:fd:ad:ca:ee:83:2f:82: 88:37:0f:58:e6:b1:b4:6e:a3:b4:d1:00:28:9d:fc:a2:4f:58: ad:6b:e1:0c:47:32:0d:55:50:29:38:c0:1b:1d:7c:77:6d:c4: b4:cd:45:05:6e:86:d2:70:03:ad:25:db:2b:da:f6:8f:2c:ef: 4d:d0:6a:46:d3:2c:a3:09:03:ab:c8:ba:40:8a:cd:8a:4a:08: 63:5a:98:61:59:eb:31:9b:67:c3:24:cc:c5:92:48:80:7b:50: d8:b9:21:05:da:98:46:7d:aa:2c:a5:e8:6c:65:f4:f1:08:94: 40:14:14:c3:3f:63:1f:69:68:96:a8:b5:af:94:cf:1a:56:e8: b3:39:2b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjUxMjA0MjEwNjU1WhcNMjUxMjExMjEwNjU1WjAYMRYwFAYD VQQDEw02OTMxZjdmMC03ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rZcOpumEWKkRBUPsJy5HzDYPt3EiX++L2DE4Yt1MWJmXuQsGQvQIDCD7pGf lZLwEONYholboIaCKBBHST8I1VYAiWB06WZBO5UuXbOQRqcAaKXXiyyHc5Ma7H4m oohtz3aWyAds3SRTGyaHNCYpJeuFd7eEKDc5seTwWHn/jOe5vfnjwsd71cZGDmYu N6zHkkNGMiegI/UQ+E7w5yPNLiLoG3g8RVCDIHBp/vUIJ4ay3vowl1QH6axvDnsM MIk7tC2ulfDR07ZXGb58FkL3+P9OLT6XGqj3nb32T78o0PLpSjFc3CewUk1KvCOK k7TZD8k6HmkOpKCZHVNsECFvewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGGa3LN Qa6VoGCX5uv7bYlS6WC4MB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf blNheE9scW40M2JQdGZCcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKoFRBMldE4NfbKsJGYIVX/CuuHgBAxZ+auXBsXZXBvlDPKYfo0mp KzgCAWVeffdkVGThYrSY+BzactTdfJzCmRoxXiaBU/mLkw3q+KSa1jUbWsuA/HIW lc0BVRHlHhc24TtphqdUpfAxzKodO5HOsQpYON/tl/2tyu6DL4KINw9Y5rG0bqO0 0QAonfyiT1ita+EMRzINVVApOMAbHXx3bcS0zUUFbobScAOtJdsr2vaPLO9N0GpG 0yyjCQOryLpAis2KSghjWphhWesxm2fDJMzFkkiAe1DYuSEF2phGfaospehsZfTx CJRAFBTDP2MfaWiWqLWvlM8aVuizOStI -----END CERTIFICATE-----Generated at Sat Dec 6 17:07:45 2025 by rpki-client