This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: +XQuPGjRoB0NUl2iTh8qZXxVo/FTtqPNUv7NZ3PxVE4= Subject key identifier: D8:83:7E:C9:A0:77:E7:28:00:8F:B0:6E:A7:15:C8:83:29:26:E5:DD Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 02D0 Signing time: Thu 04 Dec 2025 23:45:45 +0000 Manifest this update: Thu 04 Dec 2025 23:45:45 +0000 Manifest next update: Thu 11 Dec 2025 23:45:45 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: fqsKmOJ5zERQaczNB6PrmS5B7edgW9jSyXdWwpEKyZE=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 4fisicBAeKubIonB57hBazR6RO+LBjqN2TabpEOEpNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Dec 4 23:45:45 2025 GMT Not After : Dec 11 23:45:45 2025 GMT Subject: CN=69321d29-0a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:f3:90:8b:c0:f0:e3:f1:3e:a4:96:d7:fa: 09:f9:05:e4:1e:8a:44:fe:72:db:a5:30:35:5e:68: 12:ad:7d:ce:e8:32:20:9a:a4:a7:67:8d:09:70:9a: bb:3a:2f:04:ae:c1:e3:ca:98:e2:59:69:b2:7f:42: 1d:4a:ed:29:51:ed:d1:b5:81:3b:94:55:0b:c2:f9: 48:b1:29:c4:4b:1e:ba:a7:9d:de:91:79:36:1c:0a: 2a:be:9f:e4:43:4a:0d:ca:57:61:1d:3a:de:fe:72: f7:94:0c:cd:74:a3:a2:cf:32:72:03:93:20:26:dd: a2:ce:12:6d:b0:07:25:6a:22:39:72:7a:75:85:5f: 63:fa:76:ad:bc:7e:36:92:09:e1:2f:f0:b3:1b:39: de:fa:fe:cd:6d:4a:75:f6:20:20:3f:60:bb:25:fc: d0:80:c9:2f:41:5f:43:35:59:1f:f2:a9:72:0f:9d: 43:78:ef:9f:10:9e:49:73:71:18:13:a0:e4:93:29: 6f:09:76:94:bb:ca:f0:79:8e:b1:07:9e:f7:b0:6a: b0:0d:31:d9:73:c2:aa:ea:ad:9e:55:1f:f1:7c:d7: f2:35:dd:fd:f9:f8:02:51:37:aa:56:36:e0:7d:0a: 9d:e9:53:ea:5e:e9:2f:30:24:ce:2b:60:bc:39:3d: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:7E:C9:A0:77:E7:28:00:8F:B0:6E:A7:15:C8:83:29:26:E5:DD X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:03:6f:4c:3b:9a:f8:63:e5:6f:d2:51:4e:18:db:d7:09:21: 0d:f1:1b:4e:f7:36:69:0f:e6:42:a6:18:53:74:28:e6:15:5d: 59:5c:05:b0:5b:15:13:a1:12:4e:44:8e:27:3b:a2:07:0f:0a: e5:b3:26:75:07:4f:52:e0:f0:bc:8d:6a:48:e7:59:92:6d:a3: 55:b2:40:d4:04:00:fd:8a:74:0c:b3:9f:50:dd:73:72:bd:f7: ef:d4:37:7c:a0:a8:7e:3f:bd:ba:b3:5f:a9:51:cf:9f:e4:58: 37:af:1d:8a:86:85:af:4e:59:dd:aa:a9:7d:dd:1f:0d:6d:cc: f4:4e:9c:41:cd:46:7f:4f:17:73:91:bd:67:87:0e:94:50:80: 8f:db:72:b9:ba:ff:13:e3:62:8d:fd:eb:97:59:80:4e:ad:2a: 03:c4:11:7a:40:09:c4:b5:db:6b:f4:e6:18:c7:c4:5f:3f:60: 13:c1:7a:19:2d:a6:a3:06:89:1b:43:1a:7f:3d:b4:82:be:d2: d0:19:ed:0a:62:ff:9f:5d:8e:88:4f:ae:3b:db:64:cb:7e:5f: f8:84:c8:ca:d8:65:bc:3e:ca:b6:4e:2a:06:39:fc:c1:aa:4b: 64:b6:c8:59:16:1c:2a:f5:9e:97:4f:64:d2:38:49:1d:67:1c: bb:5f:22:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUxMjA0MjM0NTQ1WhcNMjUxMjExMjM0NTQ1WjAYMRYwFAYD VQQDEw02OTMyMWQyOS0wYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPfzkIvA8OPxPqSW1/oJ+QXkHopE/nLbpTA1XmgSrX3O6DIgmqSnZ40JcJq7 Oi8ErsHjypjiWWmyf0IdSu0pUe3RtYE7lFULwvlIsSnESx66p53ekXk2HAoqvp/k Q0oNyldhHTre/nL3lAzNdKOizzJyA5MgJt2izhJtsAclaiI5cnp1hV9j+natvH42 kgnhL/CzGzne+v7NbUp19iAgP2C7JfzQgMkvQV9DNVkf8qlyD51DeO+fEJ5Jc3EY E6DkkylvCXaUu8rweY6xB573sGqwDTHZc8Kq6q2eVR/xfNfyNd39+fgCUTeqVjbg fQqd6VPqXukvMCTOK2C8OT17IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiDfsmg d+coAI+wbqcVyIMpJuXdMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRA29MO5r4Y+Vv0lFOGNvXCSEN8RtO9zZpD+ZCphhTdCjmFV1ZXAWw WxUToRJORI4nO6IHDwrlsyZ1B09S4PC8jWpI51mSbaNVskDUBAD9inQMs59Q3XNy vffv1Dd8oKh+P726s1+pUc+f5Fg3rx2KhoWvTlndqql93R8Nbcz0TpxBzUZ/Txdz kb1nhw6UUICP23K5uv8T42KN/euXWYBOrSoDxBF6QAnEtdtr9OYYx8RfP2ATwXoZ LaajBokbQxp/PbSCvtLQGe0KYv+fXY6IT64722TLfl/4hMjK2GW8Psq2TioGOfzB qktktshZFhwq9Z6XT2TSOEkdZxy7XyIj -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:36 2025 by rpki-client