This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: dQYaGTZYenR8gyArhsdYvSyVc7r42ootyFgAnaC4HBs= Subject key identifier: 14:5B:2E:F0:A6:1C:A8:39:D3:19:6C:FE:00:95:29:64:8E:E5:0A:6F Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 34FA Signing time: Sat 06 Dec 2025 14:39:32 +0000 Manifest this update: Sat 06 Dec 2025 14:39:31 +0000 Manifest next update: Sat 13 Dec 2025 14:39:31 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: 7GRS6zYluG/mr8S4xhrMnJ/i2JI4Z/VUxbMhSxM317Y=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: gFJk3bH7mXlCaj14z9kV9xuGKxMKaTna9ngpZWUJXOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Dec 6 14:39:31 2025 GMT Not After : Dec 13 14:39:31 2025 GMT Subject: CN=69344024-51fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:be:79:bc:1a:90:9c:50:5c:cd:4e:f0:fa: 8e:90:6d:9f:af:c7:3c:e7:d9:d2:b3:51:49:8c:90: 4c:a3:62:d9:74:3d:8e:ae:b6:d6:e7:32:bc:0a:d2: 9c:0b:b1:9c:6d:2c:93:90:36:b7:10:56:27:17:0f: 1b:57:de:5b:08:db:c7:19:a4:ca:a8:bd:b2:04:36: 40:1d:2e:c8:79:25:a3:97:27:0b:f0:5b:d9:f4:8d: 30:8f:2d:1a:bc:1a:1d:ee:13:87:b3:8d:f5:df:c2: 44:4b:06:c8:2a:a1:8c:b5:4f:d8:ef:a2:ee:10:5d: 53:91:50:5c:08:b9:a8:08:2c:01:77:3e:14:37:a1: ea:93:b9:32:85:48:e5:d3:ac:d2:70:b4:55:5c:31: ff:d3:3e:51:77:92:75:9f:3d:d8:b0:15:b1:3e:af: 52:cd:fc:ea:6e:42:93:db:53:0a:08:d2:6c:fd:1f: 4e:23:09:95:ae:aa:7f:8d:11:21:63:43:94:d4:fb: ae:96:d8:68:2a:02:55:ca:2a:9b:84:fe:c8:04:1e: 12:79:63:6f:5c:e4:34:2c:00:0e:77:c5:6b:3b:08: 8b:06:9e:aa:b0:42:54:0e:55:8b:cb:30:18:53:93: 4a:a0:a3:7b:c7:98:76:7f:6c:50:73:cf:8b:00:71: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5B:2E:F0:A6:1C:A8:39:D3:19:6C:FE:00:95:29:64:8E:E5:0A:6F X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b3:30:5e:7a:46:4c:8f:ec:5f:22:69:91:c1:cb:7c:a7:83: 6f:1d:25:5c:7a:e8:e5:8e:ce:94:7c:a2:02:ee:1f:c3:da:a1: 54:fd:8a:26:21:ba:0e:6b:5a:1d:5e:da:cc:8a:db:74:f3:b7: ab:3e:52:2e:b9:16:35:de:fa:9d:45:e5:0a:40:96:d1:0a:84: dc:15:6a:eb:6b:ae:17:da:d4:09:ee:e2:90:19:1e:67:41:27: cb:d9:3b:3b:f8:bf:43:e8:cd:1f:30:98:1f:d2:cd:ec:1d:91: 6b:8d:c3:45:03:ef:32:45:2f:b3:a7:a8:78:20:b3:c2:e4:2c: 1c:b7:1f:25:2d:b6:ef:e8:d4:95:7a:99:71:4f:3d:c3:65:87: 50:87:f7:09:c9:21:f3:6b:b5:65:2e:9d:05:9b:55:6b:94:c3: 50:db:6b:c0:3a:92:6a:a8:23:2c:96:82:2d:ca:cc:09:c6:e9: 73:d3:32:96:8f:86:da:79:d5:b0:a0:13:b7:80:b7:c4:d4:48: 98:db:30:db:db:06:0a:3b:f7:66:b5:8e:7d:ee:b2:90:a5:5b: 12:db:b5:ea:5f:ae:7d:b9:6f:9b:32:4f:d6:8d:1c:a1:ef:42: 45:34:2d:3b:f4:3f:f3:e7:71:57:10:49:42:1e:d6:55:07:fd: cc:63:83:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUxMjA2MTQzOTMxWhcNMjUxMjEzMTQzOTMxWjAYMRYwFAYD VQQDEw02OTM0NDAyNC01MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsza+ebwakJxQXM1O8PqOkG2fr8c859nSs1FJjJBMo2LZdD2OrrbW5zK8CtKc C7GcbSyTkDa3EFYnFw8bV95bCNvHGaTKqL2yBDZAHS7IeSWjlycL8FvZ9I0wjy0a vBod7hOHs43138JESwbIKqGMtU/Y76LuEF1TkVBcCLmoCCwBdz4UN6Hqk7kyhUjl 06zScLRVXDH/0z5Rd5J1nz3YsBWxPq9SzfzqbkKT21MKCNJs/R9OIwmVrqp/jREh Y0OU1PuulthoKgJVyiqbhP7IBB4SeWNvXOQ0LAAOd8VrOwiLBp6qsEJUDlWLyzAY U5NKoKN7x5h2f2xQc8+LAHFLewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRbLvCm HKg50xls/gCVKWSO5QpvMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRszBeekZMj+xfImmRwct8p4NvHSVceujljs6UfKIC7h/D2qFU/Yom IboOa1odXtrMitt087erPlIuuRY13vqdReUKQJbRCoTcFWrra64X2tQJ7uKQGR5n QSfL2Ts7+L9D6M0fMJgf0s3sHZFrjcNFA+8yRS+zp6h4ILPC5Cwctx8lLbbv6NSV eplxTz3DZYdQh/cJySHza7VlLp0Fm1VrlMNQ22vAOpJqqCMsloItyswJxulz0zKW j4baedWwoBO3gLfE1EiY2zDb2wYKO/dmtY597rKQpVsS27XqX659uW+bMk/WjRyh 70JFNC079D/z53FXEElCHtZVB/3MY4P9 -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:08 2025 by rpki-client