This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: nvskLc+Y+2Hj2ZM+siFm6qLdvmMGqgxy5dhpejCG8kw= Subject key identifier: D2:28:6F:59:28:FB:76:7B:4E:48:9B:27:5F:B7:C5:44:9A:3E:55:DF Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 139C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1385 Signing time: Thu 04 Dec 2025 16:37:33 +0000 Manifest this update: Thu 04 Dec 2025 16:37:33 +0000 Manifest next update: Thu 11 Dec 2025 16:37:32 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: iy7vtYxU5fqW0z6zNWXXCNkyjlm/j+LlCe0Ak5a5CUc=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5020 (0x139c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Dec 4 16:37:33 2025 GMT Not After : Dec 11 16:37:32 2025 GMT Subject: CN=6931b8cd-2379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:2a:44:70:3a:04:c4:49:ef:34:6f:fc:ef: 66:cf:74:38:88:fd:58:d4:29:01:dc:e5:32:43:ae: f5:9d:c3:16:43:b3:e0:24:36:ed:4f:df:05:d1:2a: 9f:ec:1d:fe:90:f2:ad:e8:c8:37:2c:d4:74:23:a7: 68:4f:47:e7:be:f9:a0:5a:3d:39:80:a5:ce:8e:f3: db:87:45:89:19:fa:a9:74:01:5e:6c:48:48:4f:5d: 52:c3:f5:07:0a:b2:21:2b:d1:4a:77:f4:6b:ba:73: 0e:d5:a8:ac:93:1b:32:26:cd:52:55:50:19:19:a8: d2:21:c8:cf:6e:f8:6a:db:9c:5f:6a:9d:01:f7:75: c4:3b:2d:28:7c:b7:ed:ae:9b:0d:a7:b2:6e:36:3f: 36:08:dc:c9:63:d9:d7:20:61:3a:84:a2:05:a3:cc: f9:c2:19:8b:33:0a:1b:91:bd:73:9e:ab:c3:fd:b9: b4:7f:a3:78:4c:6b:9c:6b:3e:4f:81:d9:a0:26:76: be:9c:02:c7:20:c7:24:7a:bc:c4:4b:0d:17:59:0d: 46:3e:20:9a:61:df:fa:c4:25:da:12:54:6c:07:a6: 13:a2:c0:26:cd:91:e2:07:7f:0a:35:0b:e0:d1:bc: 5a:bd:11:4c:54:86:fe:73:49:ec:29:e2:7a:ca:2a: 2a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:28:6F:59:28:FB:76:7B:4E:48:9B:27:5F:B7:C5:44:9A:3E:55:DF X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e0:58:8b:a1:d9:90:d9:dd:cd:6b:c5:32:3e:30:3a:e7:40: 85:ec:84:53:87:fa:ae:6f:48:76:a7:a2:07:17:4b:0b:58:aa: d6:08:67:51:5f:cb:c7:c8:b5:41:ab:2e:d8:43:96:f6:cd:27: d4:1e:1f:07:9f:a4:f5:03:3b:c9:be:d4:66:8d:d6:96:1b:f1: e9:15:50:e9:1b:e7:db:43:f5:fe:b8:06:f0:9e:4c:6f:42:3a: 17:9b:f0:37:a9:17:3c:00:83:7d:44:f8:93:96:43:f3:0d:17: d5:6b:ea:75:1c:a5:2f:b1:46:56:49:8d:5e:cd:bf:4f:1c:f5: 06:3f:7d:85:99:38:65:be:08:c9:14:fc:4c:8e:24:d2:12:6f: f8:52:54:07:bc:b6:1c:31:ba:6d:d1:7b:52:6e:d3:65:89:ca: 98:d7:53:11:8e:d1:65:05:bb:b5:4c:16:d8:fc:5e:3b:f8:7c: a9:d8:1d:33:fd:12:6f:15:2e:c3:bb:b6:d5:07:82:b7:ae:92: c1:16:c5:a3:c4:00:b5:29:be:0f:6f:a1:c6:0a:db:e3:2d:fe: ee:7c:71:85:0f:13:04:c4:31:1a:fb:23:c6:c7:3c:2b:7f:71: ec:48:4b:78:0c:74:66:f7:68:71:4e:be:ca:a2:d9:35:8c:36: de:66:f1:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUxMjA0MTYzNzMzWhcNMjUxMjExMTYzNzMyWjAYMRYwFAYD VQQDEw02OTMxYjhjZC0yMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMMqRHA6BMRJ7zRv/O9mz3Q4iP1Y1CkB3OUyQ671ncMWQ7PgJDbtT98F0Sqf 7B3+kPKt6Mg3LNR0I6doT0fnvvmgWj05gKXOjvPbh0WJGfqpdAFebEhIT11Sw/UH CrIhK9FKd/RrunMO1aiskxsyJs1SVVAZGajSIcjPbvhq25xfap0B93XEOy0ofLft rpsNp7JuNj82CNzJY9nXIGE6hKIFo8z5whmLMwobkb1znqvD/bm0f6N4TGucaz5P gdmgJna+nALHIMckerzESw0XWQ1GPiCaYd/6xCXaElRsB6YTosAmzZHiB38KNQvg 0bxavRFMVIb+c0nsKeJ6yioq1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIob1ko +3Z7TkibJ1+3xUSaPlXfMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw4FiLodmQ2d3Na8UyPjA650CF7IRTh/qub0h2p6IHF0sLWKrWCGdR X8vHyLVBqy7YQ5b2zSfUHh8Hn6T1AzvJvtRmjdaWG/HpFVDpG+fbQ/X+uAbwnkxv QjoXm/A3qRc8AIN9RPiTlkPzDRfVa+p1HKUvsUZWSY1ezb9PHPUGP32FmThlvgjJ FPxMjiTSEm/4UlQHvLYcMbpt0XtSbtNlicqY11MRjtFlBbu1TBbY/F47+Hyp2B0z /RJvFS7Du7bVB4K3rpLBFsWjxAC1Kb4Pb6HGCtvjLf7ufHGFDxMExDEa+yPGxzwr f3HsSEt4DHRm92hxTr7Kotk1jDbeZvGy -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:53 2025 by rpki-client