This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: 9eG/PwkgVtbQv0P8Qb0qiC4TgMTRmCcCt9ARgJCLZ2g= Subject key identifier: 41:32:B8:25:CC:1B:C7:87:A8:EA:19:E8:F0:0A:E6:E1:3B:BB:53:FB Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 0615 Signing time: Sat 06 Dec 2025 21:41:46 +0000 Manifest this update: Sat 06 Dec 2025 21:41:46 +0000 Manifest next update: Sat 13 Dec 2025 21:41:46 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: zlo92603tLEBtDvilTTFlYTOZgFsnuX1wV/xRW92fsM=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Dec 6 21:41:46 2025 GMT Not After : Dec 13 21:41:46 2025 GMT Subject: CN=6934a31a-47ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:d6:36:8a:96:a4:0c:f5:a2:dc:d5:a8:a3: 48:3b:9b:99:c0:0d:13:4e:dd:6e:5b:92:64:b2:b3: 80:69:74:b3:29:45:f1:bb:c3:f2:37:43:16:25:d9: a8:26:02:47:df:18:cc:6e:b2:bd:37:d8:a0:b4:18: 03:72:3e:f2:a8:cd:bb:c0:69:fc:84:6f:1c:78:54: 29:e7:bd:1a:58:01:3f:17:8f:58:c3:6c:66:d5:7b: e1:ab:d1:4c:98:ae:ff:82:f2:a6:70:7b:1e:45:11: 55:c2:64:97:44:9a:7e:a3:e8:a9:40:25:19:6d:61: 98:1e:0c:39:83:66:5f:70:2b:0a:be:a5:b9:d2:ce: f9:d6:97:09:0c:5a:d3:21:60:4c:e8:f2:28:b7:69: 8e:04:d1:8b:82:84:ef:44:8e:93:34:bf:53:1f:da: 58:be:00:46:f8:4f:2b:9b:64:30:6c:20:a5:09:a3: b5:f2:80:c0:c0:f9:5c:70:17:c1:f9:a9:b3:e3:5c: f0:85:1f:f0:a4:b0:89:4c:87:aa:40:f8:62:a2:95: 32:2e:5c:6e:b7:4d:4f:ec:31:63:a5:8b:3e:a7:0a: c9:e9:28:6d:f8:b1:1f:92:02:0c:14:5d:bb:ba:ba: d1:26:01:20:0f:f7:dc:6b:58:1d:19:ef:42:60:97: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:B8:25:CC:1B:C7:87:A8:EA:19:E8:F0:0A:E6:E1:3B:BB:53:FB X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7e:ef:e2:43:4b:9d:29:b1:b6:aa:97:72:9d:aa:a5:49:b7: cb:98:d5:f8:21:18:d7:2c:1b:1b:69:84:1f:1a:91:10:e4:37: 33:fb:a3:3f:cc:2d:55:51:0b:ec:c1:b9:3d:46:0b:8c:a2:32: 2d:ae:eb:c8:73:8b:62:2c:2a:a3:58:67:30:97:2a:5f:08:6f: f4:38:5b:5c:8b:a3:4c:5f:62:aa:3c:25:6d:ff:45:b3:99:fe: e8:13:ac:f5:e1:71:95:ac:de:67:bc:ff:39:39:9b:60:8f:3d: 81:08:9f:24:79:39:77:2f:ad:75:39:90:66:0a:15:60:e0:66: 9d:2a:f0:9c:57:41:15:bb:88:6b:a4:39:df:37:3f:7d:73:04: 5a:c2:99:b6:be:1a:28:d7:f4:78:3c:21:30:da:8c:d1:7d:38: 1d:6a:c5:c5:01:84:2f:3d:b6:18:af:b2:08:0b:5d:9b:5d:df: 98:48:42:a0:41:1a:3a:85:69:74:23:87:88:73:ed:39:6f:9b: ed:9d:aa:d4:97:88:b2:45:40:08:71:56:95:97:e9:75:2e:1e: 65:0a:9c:9f:b3:f6:cf:05:d3:ca:a9:4c:fa:a3:ad:08:ee:30: ed:96:cd:80:0e:4c:80:72:5c:84:33:4e:1a:2e:a1:d3:a2:0b: d8:14:d9:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUxMjA2MjE0MTQ2WhcNMjUxMjEzMjE0MTQ2WjAYMRYwFAYD VQQDEw02OTM0YTMxYS00N2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh/WNoqWpAz1otzVqKNIO5uZwA0TTt1uW5JksrOAaXSzKUXxu8PyN0MWJdmo JgJH3xjMbrK9N9igtBgDcj7yqM27wGn8hG8ceFQp570aWAE/F49Yw2xm1Xvhq9FM mK7/gvKmcHseRRFVwmSXRJp+o+ipQCUZbWGYHgw5g2ZfcCsKvqW50s751pcJDFrT IWBM6PIot2mOBNGLgoTvRI6TNL9TH9pYvgBG+E8rm2QwbCClCaO18oDAwPlccBfB +amz41zwhR/wpLCJTIeqQPhiopUyLlxut01P7DFjpYs+pwrJ6Sht+LEfkgIMFF27 urrRJgEgD/fca1gdGe9CYJeM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEyuCXM G8eHqOoZ6PAK5uE7u1P7MB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTfu/iQ0udKbG2qpdynaqlSbfLmNX4IRjXLBsbaYQfGpEQ5Dcz+6M/ zC1VUQvswbk9RguMojItruvIc4tiLCqjWGcwlypfCG/0OFtci6NMX2KqPCVt/0Wz mf7oE6z14XGVrN5nvP85OZtgjz2BCJ8keTl3L611OZBmChVg4GadKvCcV0EVu4hr pDnfNz99cwRawpm2vhoo1/R4PCEw2ozRfTgdasXFAYQvPbYYr7IIC12bXd+YSEKg QRo6hWl0I4eIc+05b5vtnarUl4iyRUAIcVaVl+l1Lh5lCpyfs/bPBdPKqUz6o60I 7jDtls2ADkyAclyEM04aLqHTogvYFNk3 -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:49 2025 by rpki-client