This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft File: R0p7MwbAohZ8ys_PgzaUALWjduE.mft (raw, json) Hash identifier: k3YxN66NaXeodyBXiGY1SeFFib6YIVzioYhyBbd8CWw= Subject key identifier: C6:5D:B0:0C:BA:A9:E8:D0:08:10:BE:1A:A7:C8:7E:18:D5:CB:5D:E0 Authority key identifier: 47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 Certificate issuer: /CN=A91BBA31/serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft Manifest number: 2F Signing time: Fri 05 Dec 2025 05:26:26 +0000 Manifest this update: Fri 05 Dec 2025 05:26:25 +0000 Manifest next update: Fri 12 Dec 2025 05:26:25 +0000 Files and hashes: 1: R0p7MwbAohZ8ys_PgzaUALWjduE.crl (hash: SbHKPM9f3PylT2gan7BWP0fvSwRe/cjCJZK5kOQrs2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA31, serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Validity Not Before: Dec 5 05:26:25 2025 GMT Not After : Dec 12 05:26:25 2025 GMT Subject: CN=69326d02-4dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:a4:31:75:10:14:15:55:15:68:cb:86:b5: a5:8b:da:6f:2a:50:39:cf:35:0e:f7:ef:38:1d:f2: 25:4b:85:1c:8f:b5:8f:96:6b:71:9d:61:d9:60:7c: b0:73:82:ba:aa:91:2b:15:5e:77:f0:42:f0:0e:83: c7:14:e4:6c:f4:48:14:6e:bd:be:d5:35:fe:23:64: 7c:e4:37:9e:ae:f6:bd:a7:98:34:e7:f0:3c:52:a1: 2e:97:6b:18:f4:a1:5b:06:75:93:36:62:9c:07:3b: 7c:49:62:94:cd:1f:22:2a:4f:87:1f:bd:3e:e7:a6: 97:3b:ce:9a:09:88:98:18:08:6c:1f:6f:5b:a5:9d: de:3e:22:31:85:93:08:fc:fc:2e:c2:a7:f8:c5:5e: 14:79:b0:ef:00:27:64:76:01:4a:cb:1e:a8:36:4b: aa:8d:6c:a6:21:66:b8:7b:ee:ed:e1:80:9e:1b:b7: 53:2f:2b:8b:0b:b1:22:50:24:02:69:9b:cd:48:ff: 9a:76:2b:7e:4a:70:4d:62:7b:c1:10:9f:a8:5d:98: 1f:8c:6c:59:ec:72:0a:3d:d8:f7:9b:b7:da:28:d4: 95:e8:56:c1:45:62:73:bd:58:3b:d6:2b:03:7f:e4: c5:90:f5:1c:30:fd:c8:27:b6:2c:5c:34:7c:c2:51: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5D:B0:0C:BA:A9:E8:D0:08:10:BE:1A:A7:C8:7E:18:D5:CB:5D:E0 X509v3 Authority Key Identifier: keyid:47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:84:0b:52:8f:f8:29:b1:19:72:b8:da:df:31:d0:81:05:f7: f7:1c:56:06:c1:b9:f9:a9:d6:5b:84:83:e1:61:26:27:29:fb: a3:c8:70:68:3e:f5:d3:4b:df:ce:c3:dd:e9:72:4a:8c:0d:68: 95:40:dc:1f:30:65:b7:7c:75:d8:d1:eb:2a:7e:ef:64:66:63: a1:3e:49:68:2b:75:67:ea:d5:2d:f0:46:dd:62:f3:a0:66:ea: ef:2d:b0:66:3b:78:99:68:7b:6f:15:60:59:18:46:6f:3b:23: d3:17:90:2a:53:e8:78:e4:fe:5d:ab:0b:f8:7e:cc:75:f1:f1: 71:68:f9:cd:3c:20:96:09:7f:ac:57:15:a9:9e:dd:cd:94:fe: b4:78:08:b5:4a:26:b7:cf:63:7c:26:fa:e3:6b:0c:c0:c5:d8: d7:ca:86:ca:e2:15:46:fd:e1:c3:7e:79:ba:ff:12:f0:35:b2: 2c:48:ca:1d:20:35:c7:db:57:33:c6:c8:13:3a:29:e5:56:a6: 6d:e0:da:85:6d:0b:e3:bf:97:ea:92:f5:c6:7d:0b:d1:37:3d: 59:bb:3d:8c:1e:5f:ee:94:aa:16:17:a2:02:7e:d8:14:35:2e: 18:db:29:92:f8:89:4e:b3:a0:1b:f0:f3:79:9c:a4:9f:41:02: b2:2e:34:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkEzMTExMC8GA1UEBRMoNDc0QTdCMzMwNkMwQTIxNjdDQ0FDRkNGODMzNjk0MDBC NUEzNzZFMTAeFw0yNTEyMDUwNTI2MjVaFw0yNTEyMTIwNTI2MjVaMBgxFjAUBgNV BAMTDTY5MzI2ZDAyLTRkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlIaQxdRAUFVUVaMuGtaWL2m8qUDnPNQ737zgd8iVLhRyPtY+Wa3GdYdlgfLBz grqqkSsVXnfwQvAOg8cU5Gz0SBRuvb7VNf4jZHzkN56u9r2nmDTn8DxSoS6Xaxj0 oVsGdZM2YpwHO3xJYpTNHyIqT4cfvT7nppc7zpoJiJgYCGwfb1ulnd4+IjGFkwj8 /C7Cp/jFXhR5sO8AJ2R2AUrLHqg2S6qNbKYhZrh77u3hgJ4bt1MvK4sLsSJQJAJp m81I/5p2K35KcE1ie8EQn6hdmB+MbFnscgo92Pebt9oo1JXoVsFFYnO9WDvWKwN/ 5MWQ9Rww/cgntixcNHzCUdujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxl2wDLqp 6NAIEL4ap8h+GNXLXeAwHwYDVR0jBBgwFoAUR0p7MwbAohZ8ys/PgzaUALWjduEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTMxLzgyMkZERjdFODkz RDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2haOHlzX1BnemFVQUxXamR1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjBwN013YkFvaFo4eXNfUGd6YVVBTFdqZHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTMxLzgyMkZERjdFODkzRDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2ha OHlzX1BnemFVQUxXamR1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABiEC1KP+CmxGXK42t8x0IEF9/ccVgbBufmp1luEg+FhJicp+6PIcGg+ 9dNL387D3elySowNaJVA3B8wZbd8ddjR6yp+72RmY6E+SWgrdWfq1S3wRt1i86Bm 6u8tsGY7eJloe28VYFkYRm87I9MXkCpT6Hjk/l2rC/h+zHXx8XFo+c08IJYJf6xX Fame3c2U/rR4CLVKJrfPY3wm+uNrDMDF2NfKhsriFUb94cN+ebr/EvA1sixIyh0g NcfbVzPGyBM6KeVWpm3g2oVtC+O/l+qS9cZ9C9E3PVm7PYweX+6UqhYXogJ+2BQ1 LhjbKZL4iU6zoBvw83mcpJ9BArIuNJ4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:55 2025 by rpki-client