This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: IITvAcwvL5nwBfps2Eo+EYa2D9bqJQ3rfbqwEmrTmug= Subject key identifier: BD:FE:47:40:D4:6A:A3:B6:6D:9D:96:FA:E2:AC:C1:7D:53:C5:48:73 Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 0201 Signing time: Fri 05 Dec 2025 00:48:02 +0000 Manifest this update: Fri 05 Dec 2025 00:48:02 +0000 Manifest next update: Fri 12 Dec 2025 00:48:02 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: ccu4xlnnyf4JbuTmpttF0XcBqEWhsy8d0FVh8zzBoCc=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Dec 5 00:48:02 2025 GMT Not After : Dec 12 00:48:02 2025 GMT Subject: CN=69322bc2-220a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:4d:5b:ba:41:d9:84:2a:a2:3b:be:96:0f: c5:f4:4b:b5:f6:b1:d3:99:6d:20:91:cc:0c:e5:9a: 4d:a0:a2:29:9f:f9:d8:d7:9d:6f:7e:3c:da:f1:9e: 2b:2b:00:c3:86:dc:fb:b2:b8:47:93:54:47:45:e2: 58:69:b7:e6:33:bf:83:84:47:3b:3b:da:9f:87:39: a2:ea:9a:ed:33:9e:96:b7:f3:b8:1d:d7:c7:97:d0: ec:df:09:8a:3b:b9:98:0d:a7:8a:01:c8:c0:5b:f5: bf:be:8c:c3:a6:c0:c0:4e:d9:2a:6b:51:f6:1c:6b: a4:4a:08:f9:97:6c:f2:f3:c5:1d:23:79:be:1d:85: 73:f9:b4:9d:5a:21:d8:cd:11:8e:15:ae:46:d9:98: 7a:3f:13:2f:fe:91:4d:85:5e:da:dc:24:c8:1a:19: 7a:fd:be:1f:07:c1:98:5f:6c:94:fb:f4:12:75:a0: 25:2d:4c:5d:01:e8:65:9f:89:d0:d8:d7:ec:a6:4d: 4f:9c:18:cc:53:0f:ee:60:92:fa:16:04:5f:35:64: 8f:03:2d:a4:94:b6:bc:8d:12:45:34:69:d9:e9:0d: 9c:ac:be:c9:d4:36:f9:94:09:ff:0b:85:d3:9c:7c: a3:4b:9f:03:8f:8e:7d:ea:77:72:2a:b6:44:49:83: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FE:47:40:D4:6A:A3:B6:6D:9D:96:FA:E2:AC:C1:7D:53:C5:48:73 X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c5:b7:78:b8:77:21:5b:d1:a6:b5:ba:f6:1f:6c:44:ab:7e: 9c:46:42:39:5e:83:00:49:f0:fd:0b:4d:e8:02:ae:9b:38:e6: ba:bc:82:dd:f3:67:1b:2f:cd:a9:93:5d:5b:82:f0:82:68:2b: 5c:74:0d:27:2b:b8:0b:5d:80:db:a7:9e:de:df:e3:e9:92:9b: c7:36:d7:14:af:d7:13:a3:4f:ce:7b:12:93:ed:35:41:fb:4b: a5:9e:94:e7:4a:70:b8:83:45:cb:96:73:e3:bb:12:9e:ec:91: 7b:33:1f:08:36:ba:dc:58:8f:08:2e:8b:b4:b2:30:c5:c5:dc: 81:d4:90:3b:c5:4c:c5:35:8d:44:d2:d2:8d:eb:56:17:01:77: 6d:5a:39:94:5c:59:55:0f:00:eb:9d:7b:3b:a3:45:92:d4:f1: e2:d7:c6:99:65:6a:1c:2e:9e:3b:59:55:53:5e:4f:e6:16:f3: 42:44:f9:16:00:63:73:b2:f1:9a:4b:7f:33:03:4d:40:91:df: fe:15:22:0f:f0:fa:dd:7e:6b:5a:fb:51:f5:df:4b:41:a3:25: 7e:1d:a4:0a:6b:99:da:ee:e5:c4:ff:cd:84:8c:98:e4:00:41: 4d:c3:ec:95:64:2c:28:fc:69:78:c3:5e:45:88:bf:5b:08:24: b9:f0:60:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjUxMjA1MDA0ODAyWhcNMjUxMjEyMDA0ODAyWjAYMRYwFAYD VQQDEw02OTMyMmJjMi0yMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvxNW7pB2YQqoju+lg/F9Eu19rHTmW0gkcwM5ZpNoKIpn/nY151vfjza8Z4r KwDDhtz7srhHk1RHReJYabfmM7+DhEc7O9qfhzmi6prtM56Wt/O4HdfHl9Ds3wmK O7mYDaeKAcjAW/W/vozDpsDATtkqa1H2HGukSgj5l2zy88UdI3m+HYVz+bSdWiHY zRGOFa5G2Zh6PxMv/pFNhV7a3CTIGhl6/b4fB8GYX2yU+/QSdaAlLUxdAehln4nQ 2Nfspk1PnBjMUw/uYJL6FgRfNWSPAy2klLa8jRJFNGnZ6Q2crL7J1Db5lAn/C4XT nHyjS58Dj4596ndyKrZESYNf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3+R0DU aqO2bZ2W+uKswX1TxUhzMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDxbd4uHchW9Gmtbr2H2xEq36cRkI5XoMASfD9C03oAq6bOOa6vILd 82cbL82pk11bgvCCaCtcdA0nK7gLXYDbp57e3+PpkpvHNtcUr9cTo0/OexKT7TVB +0ulnpTnSnC4g0XLlnPjuxKe7JF7Mx8INrrcWI8ILou0sjDFxdyB1JA7xUzFNY1E 0tKN61YXAXdtWjmUXFlVDwDrnXs7o0WS1PHi18aZZWocLp47WVVTXk/mFvNCRPkW AGNzsvGaS38zA01Akd/+FSIP8Prdfmta+1H130tBoyV+HaQKa5na7uXE/82EjJjk AEFNw+yVZCwo/Gl4w15FiL9bCCS58GDr -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:14 2025 by rpki-client