This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: ZJ5wGySWidapbjFeaBlcbgD3UO1cRJN7Hi3SvKod1yY= Subject key identifier: 4B:E2:67:DA:FA:CB:D3:D1:11:CD:20:7A:EB:1A:31:3A:64:D2:94:F1 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 0182 Signing time: Fri 05 Dec 2025 01:50:30 +0000 Manifest this update: Fri 05 Dec 2025 01:50:29 +0000 Manifest next update: Fri 12 Dec 2025 01:50:29 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: k5rnPhuLLmdhkyVq99pk1C2o5eM5z6kc+xCS4vOScl0=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: V7HVXcdZqekDWFKQPL+tYLxRmvuZTdFk8E168KA3XsM=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Dec 5 01:50:29 2025 GMT Not After : Dec 12 01:50:29 2025 GMT Subject: CN=69323a65-09f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:bc:ec:16:0c:5a:e8:b7:75:4b:75:95:e5: cb:a6:06:3c:cc:b1:d8:3d:0f:eb:52:45:18:a3:a3: f5:28:96:ed:3e:ca:0f:6d:9d:ac:10:c3:89:27:91: ce:4c:fd:36:6d:fc:f5:e7:17:b1:b9:1e:7a:5b:d3: 01:b7:c0:bc:c4:82:87:d0:91:5b:09:cb:6b:a3:5f: f8:7f:d5:9a:3e:e2:a7:8c:50:52:f6:ba:cf:5b:0e: 7c:8d:17:83:84:b4:16:1b:67:11:49:4a:a0:7c:ff: cf:ca:fa:15:71:ad:f9:f9:bb:2d:d0:71:00:1b:f3: 71:be:0c:a5:7f:23:87:c7:c3:71:df:38:2f:36:36: 29:79:1b:d6:f3:aa:ba:a0:ea:a9:9d:9b:bd:e4:1b: 53:0a:ca:3b:53:32:8e:ad:c3:f0:47:71:e0:6a:70: b5:b9:ea:42:af:68:16:fb:ba:c8:f5:96:88:b0:ed: b3:6c:a5:a8:9a:3c:81:09:a5:67:1b:a4:ee:90:49: 8a:74:e4:69:a7:ea:4a:1a:31:89:e6:22:ba:72:4b: 67:3a:49:d4:45:80:21:3b:32:d8:09:06:c8:c9:3e: 17:35:0d:74:01:83:e9:83:52:d2:ae:8f:a3:93:95: b3:3a:89:49:22:80:04:1a:f2:ae:43:49:6e:59:48: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E2:67:DA:FA:CB:D3:D1:11:CD:20:7A:EB:1A:31:3A:64:D2:94:F1 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7f:e4:02:66:29:1e:70:ee:65:fc:27:d0:d3:5a:61:ee:de: ad:2c:37:76:d7:de:d6:e1:42:e8:b6:96:14:82:17:ec:17:40: cc:c7:28:e3:2b:cb:6c:2b:4c:1c:99:94:ee:5d:82:45:66:f8: 45:cc:68:da:32:96:d5:48:de:4a:a8:56:48:37:56:0e:d2:34: 88:fa:24:aa:a2:72:0e:31:08:67:a5:6a:e7:4d:83:88:b2:e9: a5:17:cb:0f:4b:d4:57:48:28:2c:95:64:d0:e9:12:72:31:1b: a4:ac:42:ab:36:b8:6a:57:b8:48:47:ed:0d:ff:93:a6:39:bd: 34:4f:34:91:6c:da:39:31:e6:ed:6f:af:3e:b6:e3:95:13:d0: ed:b9:ae:8a:56:31:ae:eb:da:cc:50:9d:5d:49:6f:3a:73:54: 50:2d:02:97:30:aa:37:1c:3d:2e:af:a3:24:23:52:55:fb:11: 41:9a:2c:67:23:bd:be:c5:ad:c9:79:99:48:4b:15:d5:24:f9: ce:61:6d:7b:82:c8:b7:13:c7:91:cb:e2:10:54:d5:30:8a:3b: f3:28:ff:5f:42:0b:30:ee:fc:9a:ef:3e:ff:32:9f:37:4d:ce: 19:12:0d:e2:0c:b4:4d:31:ff:87:55:c8:fc:6e:85:1b:9b:75: bf:2b:60:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUxMjA1MDE1MDI5WhcNMjUxMjEyMDE1MDI5WjAYMRYwFAYD VQQDEw02OTMyM2E2NS0wOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudG87BYMWui3dUt1leXLpgY8zLHYPQ/rUkUYo6P1KJbtPsoPbZ2sEMOJJ5HO TP02bfz15xexuR56W9MBt8C8xIKH0JFbCctro1/4f9WaPuKnjFBS9rrPWw58jReD hLQWG2cRSUqgfP/PyvoVca35+bst0HEAG/NxvgylfyOHx8Nx3zgvNjYpeRvW86q6 oOqpnZu95BtTCso7UzKOrcPwR3HganC1uepCr2gW+7rI9ZaIsO2zbKWomjyBCaVn G6TukEmKdORpp+pKGjGJ5iK6cktnOknURYAhOzLYCQbIyT4XNQ10AYPpg1LSro+j k5WzOolJIoAEGvKuQ0luWUg9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEviZ9r6 y9PREc0geusaMTpk0pTxMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaf+QCZikecO5l/CfQ01ph7t6tLDd2197W4ULotpYUghfsF0DMxyjj K8tsK0wcmZTuXYJFZvhFzGjaMpbVSN5KqFZIN1YO0jSI+iSqonIOMQhnpWrnTYOI sumlF8sPS9RXSCgslWTQ6RJyMRukrEKrNrhqV7hIR+0N/5OmOb00TzSRbNo5Mebt b68+tuOVE9Dtua6KVjGu69rMUJ1dSW86c1RQLQKXMKo3HD0ur6MkI1JV+xFBmixn I72+xa3JeZlISxXVJPnOYW17gsi3E8eRy+IQVNUwijvzKP9fQgsw7vya7z7/Mp83 Tc4ZEg3iDLRNMf+HVcj8boUbm3W/K2BG -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:38 2025 by rpki-client