This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: SFDrKyX4umT7K03jbBLfUIG6L4WU0T/RrAcRyefoB88= Subject key identifier: 67:AE:DD:92:1C:D8:BD:84:8D:1C:6C:5A:EB:9B:F3:4A:9D:1E:6D:5D Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13F8 Signing time: Thu 04 Dec 2025 16:34:30 +0000 Manifest this update: Thu 04 Dec 2025 16:34:29 +0000 Manifest next update: Thu 11 Dec 2025 16:34:29 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: IZ1EXd9ht6Ek9VGmM2O22APAbiSW6oLvdaBs5a4tQN8=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: nHJYnVN764I+a01wg+TzZ5hfwKIk6KrVw4NGUGzTSaE=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: HUiyLswpuxKdbNSVPaGfLSYEn6DWoC29PelmwIAjJ5Y=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: OqEEQNcYyBCDgQL1llF0AYlCqLNvN3uXPMeNJtc0cyI=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: PEQx20rXW3wWd56B/SVjtbMpJcwzQ8D6MiDi0J0Jbek=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: lBRDtES/HZOfboWNM5sziaPImTLADmv7HDwM0/uuCvk=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: Flu+OB6NSXTr2/DICAFpHEHutk0iqrBQ5kD9GJPbb90=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: V1iSNQB8ve6x07QbL++7FcG93VsgUWiOli7wIFWtTZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5205 (0x1455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Dec 4 16:34:29 2025 GMT Not After : Dec 11 16:34:29 2025 GMT Subject: CN=6931b815-97f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:49:15:ae:bb:41:3d:a1:55:8b:c3:f6:c5: 9f:93:c0:6a:4e:37:78:39:dc:62:62:f3:80:1a:09: 1e:d3:d1:2c:08:be:76:9b:64:af:91:78:9e:02:b6: 28:b6:dd:25:54:58:11:06:22:3b:d9:d6:f4:4c:66: d8:9d:8b:ae:19:a8:b4:05:0f:fa:61:d9:b7:3a:e3: 18:38:d0:e8:55:4c:3a:bc:f2:07:0b:76:8b:06:2a: 6c:68:19:ce:da:86:27:8f:19:13:f2:ed:2d:ca:d9: c8:2f:ad:cb:04:08:fe:1e:47:64:4b:04:1b:0b:13: ec:c7:09:2f:cf:cd:64:5a:5f:ae:45:d8:fc:68:9b: 0d:bd:51:03:9e:e3:fa:eb:0e:23:57:1b:66:7b:cb: ff:b7:32:d6:c4:ba:57:ce:c1:20:50:85:17:b7:c9: 84:57:34:0a:0c:5a:85:2d:c8:df:ba:1d:45:47:d4: 1d:b9:a0:e0:76:13:e2:d5:40:83:60:7a:70:cc:1f: 0d:92:fc:37:c8:fe:79:f0:83:fe:9d:d2:6f:a1:ca: a5:fa:45:f2:b0:00:39:41:2f:ba:77:f7:6a:bf:04: f6:f1:86:15:aa:dd:ef:ba:bf:a1:3b:70:cc:d1:38: 6b:4c:f9:0b:fc:18:28:53:e8:bc:90:c9:4d:15:2d: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AE:DD:92:1C:D8:BD:84:8D:1C:6C:5A:EB:9B:F3:4A:9D:1E:6D:5D X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4f:68:d2:55:c6:c6:7c:1d:04:ff:fa:23:99:ce:cb:07:e5: 24:3e:df:34:27:44:94:3d:70:24:d2:7a:57:ae:5b:31:79:b0: a9:e4:3f:89:f7:b2:04:b2:7d:6a:c1:2f:22:17:67:95:81:d5: 1b:4c:79:9e:bd:25:db:25:75:99:d1:54:17:ac:74:00:9c:c2: 48:66:ad:9a:27:a3:60:ee:b0:4f:7c:5b:f1:63:fa:20:10:be: 2e:60:c0:1e:08:7f:2c:94:33:1b:49:a1:9a:02:34:10:66:32: 2a:7f:6d:20:cd:f6:ec:d9:4c:67:ae:3c:54:e3:42:97:ba:87: 5e:22:90:fd:20:c2:4b:1e:4e:cf:4c:5c:d0:6c:3c:78:09:09: a2:f2:f8:ab:44:7d:bf:39:32:ea:91:c0:67:5e:a4:c8:22:57: fe:63:05:07:95:7e:14:d7:46:a8:77:b1:4a:30:72:52:c9:7c: d7:2c:61:cf:c7:a9:10:40:4d:ac:42:05:5c:13:2c:87:de:11: dd:a7:09:24:9d:e6:59:c1:77:79:4a:9a:dd:4e:6d:96:aa:ca: 9c:3a:2f:0e:d3:b1:f9:34:98:bf:15:fd:58:db:0b:dd:95:a9: ea:49:3c:bb:46:84:eb:0c:4e:70:33:48:20:08:f3:86:0a:25: 15:37:c5:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUxMjA0MTYzNDI5WhcNMjUxMjExMTYzNDI5WjAYMRYwFAYD VQQDEw02OTMxYjgxNS05N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1O9JFa67QT2hVYvD9sWfk8BqTjd4OdxiYvOAGgke09EsCL52m2SvkXieArYo tt0lVFgRBiI72db0TGbYnYuuGai0BQ/6Ydm3OuMYONDoVUw6vPIHC3aLBipsaBnO 2oYnjxkT8u0tytnIL63LBAj+HkdkSwQbCxPsxwkvz81kWl+uRdj8aJsNvVEDnuP6 6w4jVxtme8v/tzLWxLpXzsEgUIUXt8mEVzQKDFqFLcjfuh1FR9QduaDgdhPi1UCD YHpwzB8Nkvw3yP558IP+ndJvocql+kXysAA5QS+6d/dqvwT28YYVqt3vur+hO3DM 0ThrTPkL/BgoU+i8kMlNFS04ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeu3ZIc 2L2EjRxsWuub80qdHm1dMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgT2jSVcbGfB0E//ojmc7LB+UkPt80J0SUPXAk0npXrlsxebCp5D+J 97IEsn1qwS8iF2eVgdUbTHmevSXbJXWZ0VQXrHQAnMJIZq2aJ6Ng7rBPfFvxY/og EL4uYMAeCH8slDMbSaGaAjQQZjIqf20gzfbs2UxnrjxU40KXuodeIpD9IMJLHk7P TFzQbDx4CQmi8virRH2/OTLqkcBnXqTIIlf+YwUHlX4U10aod7FKMHJSyXzXLGHP x6kQQE2sQgVcEyyH3hHdpwkkneZZwXd5SprdTm2WqsqcOi8O07H5NJi/Ff1Y2wvd lanqSTy7RoTrDE5wM0ggCPOGCiUVN8Xs -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:23 2025 by rpki-client