This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: C7UXN50WLEzfTpBp+W+QCHvwL5E6LBFiTqWl9hoBoz4= Subject key identifier: B0:E0:61:4B:99:43:73:C8:3D:23:FD:41:A0:07:E6:92:24:60:F2:C9 Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 34E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 519B Signing time: Sat 06 Dec 2025 15:06:01 +0000 Manifest this update: Sat 06 Dec 2025 15:06:00 +0000 Manifest next update: Sat 13 Dec 2025 15:06:00 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: X08Qpz+nCneo4xbQIulkNuS/PrtBZyDWJ1FuYKC6EUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13539 (0x34e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Dec 6 15:06:00 2025 GMT Not After : Dec 13 15:06:00 2025 GMT Subject: CN=69344658-32c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:e0:79:a5:56:a9:b0:23:64:f9:11:3c:b6: 6a:26:1e:40:af:da:41:82:57:ce:2c:01:e4:77:a9: 36:af:37:01:48:f3:c2:c8:1d:2b:2b:9c:1e:6a:b8: d5:c7:b6:2e:72:47:33:e3:3e:57:a2:ca:8b:10:dc: 7c:94:73:59:f1:6e:b8:cf:7c:34:ec:20:1a:2b:16: a3:ec:17:cb:02:1a:b8:77:2b:23:66:56:2f:78:5a: 01:6d:f2:2c:4b:25:48:d7:e1:20:17:65:e6:cd:7b: 4e:6a:eb:28:61:38:7a:41:6f:a2:c1:db:b6:66:db: a2:59:cd:30:de:38:6b:0a:c7:73:78:c9:b5:9b:d7: fe:2b:45:be:53:18:33:52:67:e9:b3:66:51:cd:06: 82:88:81:ea:72:bd:7a:be:c1:a3:81:21:2b:82:78: e4:cb:72:b2:16:6e:8e:fe:e0:78:bb:f8:c6:1c:c1: b3:cd:e4:3a:a6:7f:db:9c:c3:4f:68:ce:eb:b6:f8: a8:7a:43:5c:77:67:b1:38:07:47:d6:51:40:df:9f: 03:44:fb:88:23:ce:3b:4d:e1:4b:83:32:22:ce:06: 20:be:a7:fe:31:f0:de:62:02:1b:94:fe:1f:e1:a5: 44:40:82:d9:37:82:d2:b3:68:2f:dd:87:95:8e:2d: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E0:61:4B:99:43:73:C8:3D:23:FD:41:A0:07:E6:92:24:60:F2:C9 X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:45:ad:0e:93:e9:29:fe:0c:f0:e6:06:44:47:45:31:b4:37: f7:35:a1:11:75:26:c2:49:e6:5c:0c:73:3e:2b:0e:92:60:a8: a0:44:87:d4:20:d0:c8:79:20:6e:ac:fd:56:d5:32:21:b0:d4: 6d:f4:f5:45:b6:57:be:46:a4:b5:8b:83:1e:bc:d2:4c:a2:e9: 43:35:2a:89:e8:72:92:54:6a:b1:e2:63:ae:2a:76:1a:0e:b8: c6:00:fe:c8:3c:99:ca:e5:00:74:75:4d:5d:b8:db:33:2b:44: df:97:bb:6d:f7:c3:d7:df:59:af:33:15:65:f1:5f:f8:8c:b2: 47:96:71:97:b2:96:cb:ed:c3:03:6b:70:d5:22:27:03:06:eb: 86:6e:66:c3:b7:96:a4:4f:34:c5:3c:fd:34:60:c4:ca:f7:d1: e3:51:cf:79:85:78:75:1b:db:3e:2a:30:b4:f4:cb:89:c8:ba: 38:25:fb:98:95:e6:50:80:fb:90:16:d1:3d:a0:74:1a:8d:5a: a4:25:5c:11:73:95:f3:57:0b:86:91:9f:99:f2:f9:de:08:a5: 1f:fd:43:c4:a9:cf:6e:16:51:a4:28:7f:68:f1:b0:60:71:6c: 21:2c:1e:8b:f7:4d:c2:94:f2:f3:d8:f7:19:5f:88:bd:1c:c0: d8:27:24:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUxMjA2MTUwNjAwWhcNMjUxMjEzMTUwNjAwWjAYMRYwFAYD VQQDEw02OTM0NDY1OC0zMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuengeaVWqbAjZPkRPLZqJh5Ar9pBglfOLAHkd6k2rzcBSPPCyB0rK5wearjV x7Yuckcz4z5XosqLENx8lHNZ8W64z3w07CAaKxaj7BfLAhq4dysjZlYveFoBbfIs SyVI1+EgF2XmzXtOausoYTh6QW+iwdu2ZtuiWc0w3jhrCsdzeMm1m9f+K0W+Uxgz Umfps2ZRzQaCiIHqcr16vsGjgSErgnjky3KyFm6O/uB4u/jGHMGzzeQ6pn/bnMNP aM7rtvioekNcd2exOAdH1lFA358DRPuII847TeFLgzIizgYgvqf+MfDeYgIblP4f 4aVEQILZN4LSs2gv3YeVji0gBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDgYUuZ Q3PIPSP9QaAH5pIkYPLJMB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGRa0Ok+kp/gzw5gZER0UxtDf3NaERdSbCSeZcDHM+Kw6SYKigRIfU INDIeSBurP1W1TIhsNRt9PVFtle+RqS1i4MevNJMoulDNSqJ6HKSVGqx4mOuKnYa DrjGAP7IPJnK5QB0dU1duNszK0Tfl7tt98PX31mvMxVl8V/4jLJHlnGXspbL7cMD a3DVIicDBuuGbmbDt5akTzTFPP00YMTK99HjUc95hXh1G9s+KjC09MuJyLo4JfuY leZQgPuQFtE9oHQajVqkJVwRc5XzVwuGkZ+Z8vneCKUf/UPEqc9uFlGkKH9o8bBg cWwhLB6L903ClPLz2PcZX4i9HMDYJySr -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:47 2025 by rpki-client