This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: ptEPE7uqHl5CcJ4GeoBPFZprMIlYg3tpXntfX7Pk0+8= Subject key identifier: 7C:6D:E3:8B:1A:5D:DC:2C:97:5B:26:6B:20:E1:D7:4D:65:BA:48:46 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 0861 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 0857 Signing time: Sat 06 Dec 2025 19:49:03 +0000 Manifest this update: Sat 06 Dec 2025 19:49:02 +0000 Manifest next update: Sat 13 Dec 2025 19:49:02 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: gx1PPXNxzpBep5bq8KG36bDj+90hVTumyiptrTf4dY0=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2145 (0x861) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Dec 6 19:49:02 2025 GMT Not After : Dec 13 19:49:02 2025 GMT Subject: CN=693488ae-6401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:f2:e4:bc:11:39:a7:03:37:5e:bc:ee:e7: 53:95:a0:e6:79:58:5a:13:12:f7:ae:2a:67:54:d2: 84:6d:03:d0:12:61:c4:da:16:67:c8:ac:80:77:48: 0d:4f:80:89:f4:dd:ca:fc:c0:f8:19:50:8a:b4:8c: de:eb:b9:26:fe:7c:c5:cf:58:96:84:48:e7:98:f4: 06:16:b9:5a:4e:44:f5:43:be:31:20:68:81:32:e0: 8b:c7:34:d7:be:b5:4d:c8:00:da:73:8e:96:4f:a2: 2e:7b:82:ea:a2:4c:b6:98:59:36:50:d6:d0:41:1a: 16:fc:ef:50:51:c4:f6:7b:a1:84:cc:29:67:c7:91: c7:18:33:65:a5:5b:c2:f1:6d:d4:38:d9:08:9b:95: 6e:fe:d5:d0:2a:2a:cd:75:03:81:c5:fa:46:b2:51: 6a:2c:2d:b3:8b:9d:4f:41:6a:93:c0:9a:fd:cd:37: 01:bb:00:45:41:d6:7a:22:ca:3e:03:26:bd:32:60: 51:75:4d:4f:c6:89:8f:f2:31:64:9b:95:85:19:01: 8f:e5:ca:6c:64:11:8b:46:13:53:6b:c3:03:af:79: ff:f5:8b:fc:27:6a:8d:77:19:2e:dd:99:c3:fe:11: 15:f0:e2:05:17:d6:1b:58:bd:2f:44:3e:48:ed:bc: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6D:E3:8B:1A:5D:DC:2C:97:5B:26:6B:20:E1:D7:4D:65:BA:48:46 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ff:74:f1:44:de:25:a6:cc:c6:51:1e:41:26:cc:49:72:d6: 44:54:2b:52:b9:28:e5:16:1f:01:6b:41:20:c0:85:5d:1d:f6: 5d:87:65:5f:26:09:21:0b:cb:a0:8b:e3:a4:3c:ab:05:2b:e9: 26:44:4d:6b:f3:d3:db:37:68:08:81:d3:e5:e2:be:09:b2:9b: 30:73:d0:76:e8:ab:10:77:2f:de:e8:af:3b:6f:1e:0f:b3:20: 6d:64:94:7e:59:6b:85:14:0f:d7:68:5f:8c:c1:b4:be:04:ec: 70:bd:98:69:54:2f:4e:87:56:fc:42:82:0c:b9:8b:ae:32:1e: e3:81:a5:12:06:ba:5c:96:e3:c5:37:03:53:9d:08:be:1a:71: 62:c8:3c:36:e8:de:cc:e6:34:e7:ba:1a:2f:61:c9:78:01:ad: ba:92:69:e9:d3:7d:41:08:47:c2:41:fc:a4:d7:31:3c:38:4a: 68:e1:26:c7:1a:97:a0:c1:0d:7e:28:5f:c2:b6:9a:c8:7f:8b: eb:d6:2b:ee:8e:35:94:93:e3:62:57:81:f5:6a:d5:83:ef:b6: 12:b7:10:20:43:ca:d9:b3:19:99:93:aa:ec:80:cd:f0:37:63: a8:73:e2:16:e0:f1:91:a7:36:5d:5b:86:65:90:78:c8:cd:0b: 74:ff:a4:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUxMjA2MTk0OTAyWhcNMjUxMjEzMTk0OTAyWjAYMRYwFAYD VQQDEw02OTM0ODhhZS02NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruLy5LwROacDN1687udTlaDmeVhaExL3ripnVNKEbQPQEmHE2hZnyKyAd0gN T4CJ9N3K/MD4GVCKtIze67km/nzFz1iWhEjnmPQGFrlaTkT1Q74xIGiBMuCLxzTX vrVNyADac46WT6Iue4Lqoky2mFk2UNbQQRoW/O9QUcT2e6GEzClnx5HHGDNlpVvC 8W3UONkIm5Vu/tXQKirNdQOBxfpGslFqLC2zi51PQWqTwJr9zTcBuwBFQdZ6Iso+ Aya9MmBRdU1PxomP8jFkm5WFGQGP5cpsZBGLRhNTa8MDr3n/9Yv8J2qNdxku3ZnD /hEV8OIFF9YbWL0vRD5I7bxrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxt44sa Xdwsl1smayDh101lukhGMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy/3TxRN4lpszGUR5BJsxJctZEVCtSuSjlFh8Ba0EgwIVdHfZdh2Vf JgkhC8ugi+OkPKsFK+kmRE1r89PbN2gIgdPl4r4Jspswc9B26KsQdy/e6K87bx4P syBtZJR+WWuFFA/XaF+MwbS+BOxwvZhpVC9Oh1b8QoIMuYuuMh7jgaUSBrpcluPF NwNTnQi+GnFiyDw26N7M5jTnuhovYcl4Aa26kmnp031BCEfCQfyk1zE8OEpo4SbH GpegwQ1+KF/CtprIf4vr1ivujjWUk+NiV4H1atWD77YStxAgQ8rZsxmZk6rsgM3w N2Ooc+IW4PGRpzZdW4ZlkHjIzQt0/6TK -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:51 2025 by rpki-client