This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: CesArzxMmpR3fSl6HkkZMKh2k/bE6XUy63D3ur0ltT4= Subject key identifier: 00:3D:3E:C1:44:2A:82:BF:BE:1E:A9:F0:73:00:8F:5E:F8:79:AF:ED Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 08F5 Signing time: Thu 04 Dec 2025 19:32:03 +0000 Manifest this update: Thu 04 Dec 2025 19:32:02 +0000 Manifest next update: Thu 11 Dec 2025 19:32:02 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: h4GlSFd8kDFJFs511rV3JjT4ZnNhi84MyWca03rgCUs=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: f4udCcisFsQWGXJxlj4yAW3MNSfW4g1HYUDDKGCbXqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Dec 4 19:32:02 2025 GMT Not After : Dec 11 19:32:02 2025 GMT Subject: CN=6931e1b3-a57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:2d:b3:3e:85:24:a8:0d:6f:84:5a:25:b9: 57:a0:99:f4:95:26:a0:42:d1:2e:78:81:36:9e:dd: 6c:b0:79:5d:b3:02:59:c8:eb:ec:c1:7b:92:c3:56: 4d:e0:48:3a:6d:d1:a3:57:16:16:e2:50:54:42:2c: 51:99:92:ed:46:ce:b0:60:c4:8e:40:e2:bc:5d:61: a8:30:d9:09:2c:c1:eb:4d:b4:31:e8:fb:bf:ca:e7: a3:ff:d4:37:77:cf:e1:76:07:19:4f:f7:ef:80:f5: 12:9a:af:27:0d:19:d8:f4:da:3c:42:8d:dd:0b:2f: 14:d5:a6:c6:f7:03:3f:fb:c7:4b:0f:50:85:14:f8: 85:7f:69:c9:ee:e3:db:1a:3f:62:1d:a2:f0:d1:a3: 7a:25:75:e8:98:50:9c:40:69:10:e8:08:58:84:bb: 84:ff:6c:6c:02:d8:e2:4f:34:30:b2:74:e2:a3:9c: 0f:97:85:45:bf:50:53:82:39:8f:69:0c:e8:18:82: cf:47:d9:0f:46:10:8a:13:a0:d3:59:ba:09:b7:d8: 8b:29:c5:a6:0d:56:82:a1:21:c4:c3:75:47:59:7b: c1:b4:73:cb:95:25:1a:b6:da:a4:be:a4:48:8f:3b: 27:4b:e0:58:bb:0b:fa:ee:44:60:d9:3e:50:79:13: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3D:3E:C1:44:2A:82:BF:BE:1E:A9:F0:73:00:8F:5E:F8:79:AF:ED X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d6:3c:d5:aa:8a:81:37:92:5c:00:fb:6b:4d:de:fa:e1:2c: fc:f4:13:8f:c2:9b:e3:9e:45:38:65:85:53:15:5c:2b:5c:a5: 54:e8:d7:c3:f6:c3:87:af:c9:ac:c6:fa:46:64:4d:37:b2:0f: 6a:46:7e:f8:f5:bc:06:94:4f:ea:53:fd:be:af:00:7c:f5:29: f8:1b:0d:29:d3:73:59:d5:df:56:6f:ed:44:e5:9e:c7:0c:e4: 66:6b:7b:80:ae:c3:60:35:a0:19:f4:b3:c8:27:02:70:3f:dd: e4:0f:dc:8a:7d:95:d1:8a:57:9c:6e:80:9d:fc:9e:b0:43:18: 8f:30:4c:ac:c6:48:c1:bf:f0:d5:e5:76:10:8c:9f:02:ad:59: 7e:1a:ae:62:a7:06:e6:84:e4:dd:59:9c:04:c9:5a:35:66:b3: 9b:05:90:d7:ec:00:79:7b:53:f3:66:7d:bc:13:27:15:e2:90: 58:8c:67:c6:4f:a3:35:59:c0:42:26:d1:25:b8:61:dd:83:28: 02:a7:70:3e:30:41:29:d2:ab:e9:1e:d1:6e:f7:0a:25:b5:3c: 3f:de:fa:76:a2:8a:da:af:23:25:b4:dc:6c:fe:95:cc:4b:33: e8:71:fe:7b:b6:6f:ae:27:4e:1b:0a:86:21:2f:b4:dd:b8:b6: 6c:bd:3b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjUxMjA0MTkzMjAyWhcNMjUxMjExMTkzMjAyWjAYMRYwFAYD VQQDEw02OTMxZTFiMy1hNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFEtsz6FJKgNb4RaJblXoJn0lSagQtEueIE2nt1ssHldswJZyOvswXuSw1ZN 4Eg6bdGjVxYW4lBUQixRmZLtRs6wYMSOQOK8XWGoMNkJLMHrTbQx6Pu/yuej/9Q3 d8/hdgcZT/fvgPUSmq8nDRnY9No8Qo3dCy8U1abG9wM/+8dLD1CFFPiFf2nJ7uPb Gj9iHaLw0aN6JXXomFCcQGkQ6AhYhLuE/2xsAtjiTzQwsnTio5wPl4VFv1BTgjmP aQzoGILPR9kPRhCKE6DTWboJt9iLKcWmDVaCoSHEw3VHWXvBtHPLlSUattqkvqRI jzsnS+BYuwv67kRg2T5QeRNcTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA9PsFE KoK/vh6p8HMAj174ea/tMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL1jzVqoqBN5JcAPtrTd764Sz89BOPwpvjnkU4ZYVTFVwrXKVU6NfD 9sOHr8msxvpGZE03sg9qRn749bwGlE/qU/2+rwB89Sn4Gw0p03NZ1d9Wb+1E5Z7H DORma3uArsNgNaAZ9LPIJwJwP93kD9yKfZXRilecboCd/J6wQxiPMEysxkjBv/DV 5XYQjJ8CrVl+Gq5ipwbmhOTdWZwEyVo1ZrObBZDX7AB5e1PzZn28EycV4pBYjGfG T6M1WcBCJtEluGHdgygCp3A+MEEp0qvpHtFu9woltTw/3vp2ooraryMltNxs/pXM SzPocf57tm+uJ04bCoYhL7TduLZsvTue -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:14 2025 by rpki-client