This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: qIVPh31Ur+M/KTQyvq6XvZsK0FvhSlxjdwUIC7Dh9W8= Subject key identifier: 86:E7:84:EB:16:9D:03:A8:09:4A:3F:4E:8C:5D:02:B4:14:C8:3A:F1 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 04B9 Signing time: Thu 04 Dec 2025 22:29:53 +0000 Manifest this update: Thu 04 Dec 2025 22:29:52 +0000 Manifest next update: Thu 11 Dec 2025 22:29:52 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: ePyfH/BYz7KJy4oJfnPcnHcbHNUWAzPgRcxAcYPk2to=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Dec 4 22:29:52 2025 GMT Not After : Dec 11 22:29:52 2025 GMT Subject: CN=69320b61-e398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:0b:7b:35:59:90:9c:51:33:aa:67:06:a4: 00:46:ad:05:8a:a0:04:a1:58:3d:52:c3:31:57:d2: 06:98:21:d8:f6:85:b1:f4:30:85:5e:35:41:44:48: 93:e7:e5:6e:1b:ab:d4:a7:f0:36:1c:45:21:85:f2: 8b:2e:d2:70:31:a9:d4:ea:22:b6:ad:2e:ec:e4:07: fa:4f:e1:ee:89:ed:1b:f4:4e:9f:16:2f:1f:ed:23: 6f:d0:b5:ef:69:96:63:f9:15:3e:43:cd:54:c1:3c: 6d:ff:86:a2:d5:dd:0f:cf:07:50:6d:b3:b2:95:a1: 90:5e:7c:39:37:41:6a:f8:eb:53:57:85:98:4c:eb: 18:87:b1:fc:20:7b:99:72:65:fb:e0:81:ec:51:a5: 8d:f8:b2:06:c3:7a:ed:63:90:80:02:55:a9:c2:cc: 47:12:fd:70:77:09:67:6f:42:91:b3:ee:bc:7a:74: 61:fb:38:36:d0:02:6e:84:c8:ac:a2:a4:3b:9e:88: 70:f4:b5:f4:44:2c:89:c0:a4:ab:28:33:bb:4e:5e: d2:0b:15:04:f1:44:ae:07:47:f2:da:73:71:5b:36: 3e:75:8c:32:5a:6c:20:d6:22:0b:53:77:e4:27:10: cc:8c:3c:51:03:a7:54:c4:16:a8:4d:fb:b0:e9:33: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E7:84:EB:16:9D:03:A8:09:4A:3F:4E:8C:5D:02:B4:14:C8:3A:F1 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e0:42:d2:90:52:ac:9c:52:82:cd:c9:64:ab:50:41:a0:c3: 9e:9b:e9:9d:c5:fb:93:5e:34:03:bc:d0:37:e8:64:30:dd:0a: 7c:40:6b:42:4c:06:f3:26:e8:36:21:d3:ee:d2:ac:2f:0f:f3: 5d:33:cb:a9:6a:42:8b:53:f3:c4:be:e4:09:88:58:e7:bb:c3: e4:a4:51:d3:69:52:43:c3:92:3f:c1:85:50:81:cf:ac:00:9a: 79:e5:47:4b:41:8a:9f:9c:8a:77:f7:c9:50:a9:88:11:02:22: 8b:79:1b:61:09:ae:3e:53:33:61:c0:41:dd:99:50:56:34:7b: 5b:c1:2f:ee:ae:93:ce:b4:1c:96:a9:c8:1d:ef:4e:b6:a8:bf: ce:3a:76:4f:26:37:08:90:58:c9:e2:7a:0b:bd:44:09:95:a7: d9:2b:b5:02:44:e9:56:83:af:c8:74:04:9e:63:7a:d5:06:c4: 82:92:e1:61:39:24:bb:a2:43:1c:86:65:b4:1d:b8:31:72:dc: f2:50:e1:03:5f:0d:68:ca:19:6d:b2:ae:06:54:72:2a:91:e4: 08:c2:6c:4c:07:15:5c:4f:65:51:61:f2:32:50:cb:d2:d2:4a: f0:f9:80:4b:80:5f:c7:b3:f1:be:f0:43:00:9b:3b:0e:f0:f1: 8f:e7:f2:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjUxMjA0MjIyOTUyWhcNMjUxMjExMjIyOTUyWjAYMRYwFAYD VQQDEw02OTMyMGI2MS1lMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sULezVZkJxRM6pnBqQARq0FiqAEoVg9UsMxV9IGmCHY9oWx9DCFXjVBREiT 5+VuG6vUp/A2HEUhhfKLLtJwManU6iK2rS7s5Af6T+Huie0b9E6fFi8f7SNv0LXv aZZj+RU+Q81UwTxt/4ai1d0PzwdQbbOylaGQXnw5N0Fq+OtTV4WYTOsYh7H8IHuZ cmX74IHsUaWN+LIGw3rtY5CAAlWpwsxHEv1wdwlnb0KRs+68enRh+zg20AJuhMis oqQ7nohw9LX0RCyJwKSrKDO7Tl7SCxUE8USuB0fy2nNxWzY+dYwyWmwg1iILU3fk JxDMjDxRA6dUxBaoTfuw6TMt4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbnhOsW nQOoCUo/ToxdArQUyDrxMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi4ELSkFKsnFKCzclkq1BBoMOem+mdxfuTXjQDvNA36GQw3Qp8QGtC TAbzJug2IdPu0qwvD/NdM8upakKLU/PEvuQJiFjnu8PkpFHTaVJDw5I/wYVQgc+s AJp55UdLQYqfnIp398lQqYgRAiKLeRthCa4+UzNhwEHdmVBWNHtbwS/urpPOtByW qcgd7062qL/OOnZPJjcIkFjJ4noLvUQJlafZK7UCROlWg6/IdASeY3rVBsSCkuFh OSS7okMchmW0HbgxctzyUOEDXw1oyhltsq4GVHIqkeQIwmxMBxVcT2VRYfIyUMvS 0krw+YBLgF/Hs/G+8EMAmzsO8PGP5/Le -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:15 2025 by rpki-client