This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: lSdyK3qu33nUPhTCkftJul+VrctHVTsi5kPX37vAvXU= Subject key identifier: A3:54:B2:9A:52:8D:63:59:37:BC:BF:D6:8A:47:F4:09:02:2F:C1:59 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 01B1 Signing time: Fri 05 Dec 2025 01:28:18 +0000 Manifest this update: Fri 05 Dec 2025 01:28:17 +0000 Manifest next update: Fri 12 Dec 2025 01:28:17 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: q9PbTIg/3UhyoiiSZGrKKLPW2O+QrtF623bJQ26ALBM=) 2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: v3dChgnA84SfDYgqRC2E+QVbu8keAWHj6W+tTQnPlbw=) 3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: 8qXcxCRSjyOP/oKs9vNyiIBs05KSJRouDgmhdgT6x8M=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: HG1f/f+5SFm8izuIB1/hs3U0LoMscjbV7+BezDm08/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Dec 5 01:28:17 2025 GMT Not After : Dec 12 01:28:17 2025 GMT Subject: CN=69323532-5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:4c:b5:88:83:16:8f:ec:99:a5:6e:ce:87: 62:0c:21:31:5c:20:45:53:8a:c7:c4:7e:e5:29:4c: a4:c2:60:ab:4a:c9:b1:2f:3e:d5:cd:16:3e:b9:4f: ff:3d:31:d5:c4:af:64:41:c7:77:35:3a:cd:35:08: 36:04:fd:79:87:e9:4e:68:19:11:bf:72:9f:31:f4: 3b:47:a7:23:ec:fa:18:f6:d5:0f:ad:1c:ac:a0:d3: 8d:4e:96:83:77:18:d5:63:1b:8b:29:cc:17:df:9c: bb:4d:74:9e:b0:d4:59:8e:e3:16:64:1b:23:42:b2: e9:3f:c9:51:71:65:37:f8:02:79:1a:62:f7:4c:eb: ca:3d:ea:b3:ea:fd:11:f0:04:b6:3a:11:18:f6:db: 62:3a:03:d5:fb:f9:d6:48:6c:f1:d0:e1:a3:ec:4e: e8:89:61:99:5a:12:01:9a:7a:15:bd:e3:ea:72:a2: 18:90:00:2f:af:71:7c:a8:a2:ca:c0:19:03:22:80: a2:ac:b9:8d:89:f1:57:28:43:99:bf:2a:0c:02:f9: 45:03:f5:b1:f0:ba:9c:be:b1:9e:79:2a:0c:5d:34: b9:f9:3d:14:e1:b1:83:a5:20:80:52:c7:58:8f:2c: b7:1d:dd:09:32:3a:75:a4:dd:97:71:01:d8:02:23: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:B2:9A:52:8D:63:59:37:BC:BF:D6:8A:47:F4:09:02:2F:C1:59 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ca:f5:9b:cd:f3:59:41:2e:3b:89:9d:50:dc:e6:17:61:3e: ed:e4:77:51:e5:db:e3:55:65:05:78:fc:b2:2c:7c:3a:17:fe: 1f:21:a3:9e:e1:7c:39:37:da:e0:3f:4a:70:95:87:32:e7:4a: 6b:63:1d:ef:f0:1d:74:4f:aa:b4:10:d0:f0:7a:f3:cb:cf:49: 99:82:83:76:cb:e6:5b:ff:4d:96:fb:65:e2:4e:c4:b9:0e:99: d6:ae:a0:7b:d1:e7:97:e4:2d:e2:fd:84:d7:86:09:6c:cf:a8: 2f:94:a0:67:9f:00:81:ac:ab:69:29:f4:34:79:92:74:98:d6: 6f:7a:79:48:ff:1f:5f:b9:58:f2:8c:a1:31:a8:af:ca:f1:f9: 49:c1:d2:13:43:87:b7:db:7c:ad:1c:12:d8:06:bd:17:5b:54: 64:fe:33:5e:c3:7d:ec:f6:f6:52:28:9d:f0:8a:84:5f:1b:db: 92:02:c9:a9:93:b9:e5:c6:f3:55:23:16:a2:55:a7:7b:67:54: 69:30:c1:6d:6c:16:ad:ef:55:e1:3b:76:6c:eb:e8:28:d5:00: 4d:04:12:c3:19:03:fb:1d:fc:27:13:87:c3:9a:c6:8e:d2:b6: e4:57:8f:ec:61:6d:96:13:60:5f:57:7f:61:02:8a:48:47:3c: 01:2c:ab:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUxMjA1MDEyODE3WhcNMjUxMjEyMDEyODE3WjAYMRYwFAYD VQQDEw02OTMyMzUzMi01MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr39MtYiDFo/smaVuzodiDCExXCBFU4rHxH7lKUykwmCrSsmxLz7VzRY+uU// PTHVxK9kQcd3NTrNNQg2BP15h+lOaBkRv3KfMfQ7R6cj7PoY9tUPrRysoNONTpaD dxjVYxuLKcwX35y7TXSesNRZjuMWZBsjQrLpP8lRcWU3+AJ5GmL3TOvKPeqz6v0R 8AS2OhEY9ttiOgPV+/nWSGzx0OGj7E7oiWGZWhIBmnoVvePqcqIYkAAvr3F8qKLK wBkDIoCirLmNifFXKEOZvyoMAvlFA/Wx8LqcvrGeeSoMXTS5+T0U4bGDpSCAUsdY jyy3Hd0JMjp1pN2XcQHYAiMyVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNUsppS jWNZN7y/1opH9AkCL8FZMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeyvWbzfNZQS47iZ1Q3OYXYT7t5HdR5dvjVWUFePyyLHw6F/4fIaOe 4Xw5N9rgP0pwlYcy50prYx3v8B10T6q0ENDwevPLz0mZgoN2y+Zb/02W+2XiTsS5 DpnWrqB70eeX5C3i/YTXhglsz6gvlKBnnwCBrKtpKfQ0eZJ0mNZvenlI/x9fuVjy jKExqK/K8flJwdITQ4e323ytHBLYBr0XW1Rk/jNew33s9vZSKJ3wioRfG9uSAsmp k7nlxvNVIxaiVad7Z1RpMMFtbBat71XhO3Zs6+go1QBNBBLDGQP7HfwnE4fDmsaO 0rbkV4/sYW2WE2BfV39hAopIRzwBLKuD -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:09 2025 by rpki-client