This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: lA5jNMv/6hYivQK8yFFNV+f55J57bqNFyBwqpVwpnIA= Subject key identifier: C7:74:C2:8A:B9:77:DE:3A:BE:F4:A9:D5:A8:86:42:0A:15:E6:55:A1 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 5A Signing time: Fri 05 Dec 2025 05:04:11 +0000 Manifest this update: Fri 05 Dec 2025 05:04:10 +0000 Manifest next update: Fri 12 Dec 2025 05:04:10 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: vn8pUv4oB7B02FOXNvJSIz0Bh1I7ka7wWhvrYH0KIC8=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Dec 5 05:04:10 2025 GMT Not After : Dec 12 05:04:10 2025 GMT Subject: CN=693267cb-3f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:bd:58:9b:7d:7c:b7:ee:17:d4:9f:ee:07: 61:92:69:62:ea:2b:28:58:5b:ee:86:0c:45:4f:85: ec:b2:7d:3b:91:e0:d9:74:47:0d:0a:da:3b:82:9c: 68:d7:90:19:0b:33:72:1f:56:41:e4:68:22:58:15: 49:c6:fa:2b:39:11:50:e8:a5:ed:6a:8a:e2:05:1c: 1f:bb:e6:79:95:36:19:2e:2a:0d:5f:6f:c1:bc:ae: bd:33:51:b4:e6:aa:b6:6a:9f:35:ef:d4:82:08:07: a9:3b:2d:70:a8:7d:ae:27:0c:fc:c5:12:66:f4:19: b6:fb:03:bd:00:83:b3:4d:ae:68:12:0c:0d:d1:cd: 3b:e7:6e:4c:86:bf:c9:e4:95:42:c5:51:1b:0b:99: ff:ee:64:11:ab:22:f2:ac:39:37:f4:09:64:cf:fb: 07:0d:3b:5d:46:07:bf:59:76:83:5f:61:a8:79:d1: c6:15:2f:88:2f:21:4f:07:6b:81:59:7f:19:36:c7: 9a:3b:65:4a:23:9e:f7:9f:b1:d2:08:ee:69:d3:79: 6e:d6:e5:fb:45:2d:5e:57:b5:0e:ed:0d:e7:c9:1d: 4f:1b:76:27:91:b5:82:62:da:bd:b0:2f:a1:0f:21: 04:09:fb:59:dd:fa:d1:a3:0a:fe:b2:aa:c8:f6:00: 8f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:74:C2:8A:B9:77:DE:3A:BE:F4:A9:D5:A8:86:42:0A:15:E6:55:A1 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:df:e5:4f:bd:cc:d5:9f:9d:6f:a3:10:81:b8:27:af:2e:b1: 4b:60:fc:25:14:bb:14:68:a6:53:8b:9e:71:2a:90:00:2d:72: 5d:8f:61:d3:8e:03:2a:97:b2:98:0c:85:23:fa:34:e1:ab:87: 3c:54:dd:4b:bd:ad:25:9f:72:1d:8b:1e:6f:16:c8:40:6f:93: 1a:65:9c:60:1a:2b:02:42:04:2b:ca:79:e6:cb:4c:21:3c:7e: e0:2b:21:5c:13:de:74:20:5e:9b:7d:f6:91:8b:01:09:fc:f6: 85:bc:eb:b4:aa:17:52:da:8b:ad:af:3d:15:18:a2:7e:1f:a9: dc:90:24:7f:62:2d:4e:8a:26:7a:91:59:fd:f4:ba:b4:9b:6f: c4:fa:08:e7:28:82:c7:70:ac:cb:f9:c1:88:2a:8e:3a:ca:4f: 47:ba:20:d0:da:f2:50:25:e9:c9:67:dd:4a:29:7a:9e:14:1c: 18:28:30:eb:9d:e0:26:ce:da:c0:d3:bc:58:60:03:0b:70:fe: b7:d4:d9:20:57:6c:31:fe:df:77:94:d8:69:49:a5:c3:9e:d0: e3:06:50:e1:4f:d7:4d:af:84:80:6b:4e:f7:77:a7:1b:4d:de: a8:6e:78:ea:d9:64:03:04:65:c4:57:72:ba:01:7f:77:0c:ed: 91:af:5b:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTEyMDUwNTA0MTBaFw0yNTEyMTIwNTA0MTBaMBgxFjAUBgNV BAMTDTY5MzI2N2NiLTNmM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT5b1Ym318t+4X1J/uB2GSaWLqKyhYW+6GDEVPheyyfTuR4Nl0Rw0K2juCnGjX kBkLM3IfVkHkaCJYFUnG+is5EVDope1qiuIFHB+75nmVNhkuKg1fb8G8rr0zUbTm qrZqnzXv1IIIB6k7LXCofa4nDPzFEmb0Gbb7A70Ag7NNrmgSDA3RzTvnbkyGv8nk lULFURsLmf/uZBGrIvKsOTf0CWTP+wcNO11GB79ZdoNfYah50cYVL4gvIU8Ha4FZ fxk2x5o7ZUojnvefsdII7mnTeW7W5ftFLV5XtQ7tDefJHU8bdieRtYJi2r2wL6EP IQQJ+1nd+tGjCv6yqsj2AI+TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx3TCirl3 3jq+9KnVqIZCChXmVaEwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTf5U+9zNWfnW+jEIG4J68usUtg/CUUuxRoplOLnnEqkAAtcl2PYdOO AyqXspgMhSP6NOGrhzxU3Uu9rSWfch2LHm8WyEBvkxplnGAaKwJCBCvKeebLTCE8 fuArIVwT3nQgXpt99pGLAQn89oW867SqF1Lai62vPRUYon4fqdyQJH9iLU6KJnqR Wf30urSbb8T6COcogsdwrMv5wYgqjjrKT0e6INDa8lAl6cln3Uopep4UHBgoMOud 4CbO2sDTvFhgAwtw/rfU2SBXbDH+33eU2GlJpcOe0OMGUOFP102vhIBrTvd3pxtN 3qhueOrZZAMEZcRXcroBf3cM7ZGvW74= -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:44 2025 by rpki-client