This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: pw/7JKdYuzYN8ibiPQHBoOF85iKfHh989KRRYTYi/7g= Subject key identifier: 4C:B8:67:5F:23:A6:25:12:3C:F4:5C:C1:C8:02:D8:09:E6:5A:78:24 Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 34E7 Signing time: Sat 06 Dec 2025 15:07:15 +0000 Manifest this update: Sat 06 Dec 2025 15:07:14 +0000 Manifest next update: Sat 13 Dec 2025 15:07:14 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: d6mRTrVrF1kixn3dfS8wq9/c9I8atHLRYZH1SsiITe4=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Dec 6 15:07:14 2025 GMT Not After : Dec 13 15:07:14 2025 GMT Subject: CN=693446a2-ee34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:68:6f:bc:86:d5:43:7a:01:9b:79:0e:d1: 1e:86:fe:62:a3:77:19:07:c1:27:bf:de:9a:64:ae: fa:10:bd:34:e1:4b:71:2d:86:6a:60:80:79:82:98: 56:12:06:0d:6a:76:79:47:df:da:df:16:b4:b1:e2: af:b4:8a:51:ee:f4:c1:a5:53:45:3e:ad:62:78:e2: 22:3d:08:ef:67:d6:0c:66:97:e8:0e:cb:56:b6:34: 7b:85:13:e7:a0:62:30:75:6b:b7:3c:9e:49:2a:28: 8a:4d:15:81:d0:a3:56:d8:d5:b6:d1:0f:26:d1:9f: 4a:ba:55:ee:7f:42:f8:b1:e5:36:51:4b:ae:85:0c: db:37:97:15:44:ea:3b:90:48:2a:d7:f6:4e:43:a7: e0:cb:27:34:84:bc:ec:b1:15:64:b9:b0:80:b0:82: 5a:6e:f1:f3:f3:40:8f:72:32:ba:4c:30:04:69:97: 59:dd:36:81:0e:c6:a7:5a:db:12:d5:b8:99:40:72: 07:70:fb:25:4c:8e:2f:3e:3d:2f:04:0b:1f:71:f5: 1d:ed:2d:e7:b5:3e:60:3f:6e:1f:5a:42:75:75:45: 02:b4:4e:05:fa:c9:a8:91:ce:36:9a:b6:61:8e:0f: 56:65:80:58:cf:5b:a7:80:6c:9b:22:c9:2a:94:5e: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:67:5F:23:A6:25:12:3C:F4:5C:C1:C8:02:D8:09:E6:5A:78:24 X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d4:37:d0:07:a9:8d:c7:3b:0f:a4:13:59:00:ce:19:76:e9: e7:c1:7c:63:e3:59:cf:5a:cb:df:43:3f:ba:aa:3a:2e:a1:ba: 0a:6e:f7:fe:f5:7b:38:56:b2:36:e0:b5:e8:c0:3c:72:c0:76: f4:ea:07:88:96:32:ea:bb:c7:24:47:b9:61:92:78:fa:21:68: 73:fa:76:26:c8:22:2d:91:63:45:54:f6:c2:91:7f:42:19:7d: 1b:d1:8b:ea:96:84:11:9b:17:5a:79:d8:d5:96:9d:ee:c0:6d: ed:d3:bf:e6:5a:c5:20:89:e6:b0:70:a2:67:bc:59:cb:68:b5: 79:8e:8f:84:ec:50:18:27:b9:f8:bd:01:90:a0:0a:7e:86:ef: a0:a2:64:9c:61:a4:68:04:04:50:65:c8:53:25:64:33:dc:f5: f8:9f:f9:94:5f:92:f8:0c:fb:34:64:06:5b:25:49:8d:1d:a6: 16:1c:11:77:0c:73:7b:00:41:a6:c4:28:56:27:06:01:5e:4a: f6:f8:19:ae:10:97:b3:22:9c:f6:16:27:d7:0f:23:0e:48:73: c5:2c:36:e1:11:80:32:53:1e:e2:5f:85:ac:a2:29:fa:9a:57: 7b:b7:b4:91:5c:ea:6d:7b:a2:74:6d:7c:62:de:d7:26:37:43: b1:3a:0d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUxMjA2MTUwNzE0WhcNMjUxMjEzMTUwNzE0WjAYMRYwFAYD VQQDEw02OTM0NDZhMi1lZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzBob7yG1UN6AZt5DtEehv5io3cZB8Env96aZK76EL004UtxLYZqYIB5gphW EgYNanZ5R9/a3xa0seKvtIpR7vTBpVNFPq1ieOIiPQjvZ9YMZpfoDstWtjR7hRPn oGIwdWu3PJ5JKiiKTRWB0KNW2NW20Q8m0Z9KulXuf0L4seU2UUuuhQzbN5cVROo7 kEgq1/ZOQ6fgyyc0hLzssRVkubCAsIJabvHz80CPcjK6TDAEaZdZ3TaBDsanWtsS 1biZQHIHcPslTI4vPj0vBAsfcfUd7S3ntT5gP24fWkJ1dUUCtE4F+smokc42mrZh jg9WZYBYz1ungGybIskqlF4cOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy4Z18j piUSPPRcwcgC2AnmWngkMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL1DfQB6mNxzsPpBNZAM4ZdunnwXxj41nPWsvfQz+6qjouoboKbvf+ 9Xs4VrI24LXowDxywHb06geIljLqu8ckR7lhknj6IWhz+nYmyCItkWNFVPbCkX9C GX0b0YvqloQRmxdaedjVlp3uwG3t07/mWsUgieawcKJnvFnLaLV5jo+E7FAYJ7n4 vQGQoAp+hu+gomScYaRoBARQZchTJWQz3PX4n/mUX5L4DPs0ZAZbJUmNHaYWHBF3 DHN7AEGmxChWJwYBXkr2+BmuEJezIpz2FifXDyMOSHPFLDbhEYAyUx7iX4Wsoin6 mld7t7SRXOpte6J0bXxi3tcmN0OxOg0k -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:08 2025 by rpki-client