This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: 2SIr7fe3v1gnB7vw8vf1dQC5SUrTMLoEgLU/zTFMI7w= Subject key identifier: 30:EE:23:92:42:69:AC:12:07:59:9B:72:5A:EC:C8:EF:E7:00:68:69 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 12ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 12C8 Signing time: Thu 04 Dec 2025 16:42:22 +0000 Manifest this update: Thu 04 Dec 2025 16:42:21 +0000 Manifest next update: Thu 11 Dec 2025 16:42:21 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: U1FL+SZL4ITezOYnZYVWfl5GYG2aPRZElB0awI4UXUw=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4845 (0x12ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Dec 4 16:42:21 2025 GMT Not After : Dec 11 16:42:21 2025 GMT Subject: CN=6931b9ee-bb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:1f:51:d6:a7:7c:d5:ad:9f:29:04:ba:0b: 70:b3:71:7d:cc:02:aa:cd:43:8e:b7:0c:e6:94:43: a3:19:34:e2:87:89:62:12:88:88:56:f2:f0:23:27: 39:03:b9:cd:61:46:6e:5f:91:df:79:f7:f9:b4:91: a3:9a:82:a7:ca:ce:40:be:31:04:75:1d:d1:57:02: 2f:4a:83:61:97:bf:f0:7f:91:1b:e3:1c:0c:d4:2b: 60:68:62:7d:4f:27:58:d6:eb:61:82:2d:8c:5d:e3: 06:3d:52:b6:af:63:5e:65:cb:d5:29:bb:88:5d:1c: 6c:50:6c:dc:82:08:94:6d:ce:58:d9:5f:90:a3:0c: 42:3d:03:4d:03:ac:3b:0a:c3:55:e7:a5:4f:0c:32: 3d:7d:32:fb:30:57:0d:00:63:ce:a3:2e:84:da:c4: 5f:89:aa:ff:3b:4e:16:60:6d:6d:23:26:e0:3b:32: 49:4f:12:5b:54:11:4d:3c:10:fe:bd:62:7b:35:8d: 6d:80:05:22:7c:3f:be:25:f8:df:12:e6:37:d6:57: 63:f7:29:27:79:f9:3d:d8:e2:3b:c6:a6:77:96:66: 44:91:d8:47:c6:f5:64:27:e3:05:08:bf:83:60:5a: 30:38:09:08:79:f4:60:5e:87:38:9a:c1:d0:65:67: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EE:23:92:42:69:AC:12:07:59:9B:72:5A:EC:C8:EF:E7:00:68:69 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:d3:10:e8:52:cd:77:8e:ec:da:78:5e:48:3d:b8:cb:3e: f2:3e:3d:e6:5a:80:86:db:96:15:bd:20:6a:30:74:20:42:82: b7:93:fc:06:33:20:60:a8:5c:95:1b:f5:bc:4e:85:6b:50:43: 76:ac:3c:83:b8:00:e8:7a:e9:35:d8:1c:d0:1d:4b:f8:85:36: 3d:77:72:05:fb:6b:c3:5f:9f:38:7b:9d:5d:31:61:43:7e:1e: d5:af:a8:82:96:25:47:f1:8b:06:42:2f:17:bd:51:5a:68:31: f2:71:43:94:f8:f2:ab:21:bf:75:0d:ae:82:7f:0c:5b:f7:cf: 1f:21:66:ee:b9:92:6c:8f:7f:98:43:e3:10:c1:4c:cd:c1:ab: cd:e5:8e:16:32:e4:4e:fb:5d:7e:56:75:00:bd:ec:f6:58:b5: 8a:12:80:27:ee:8a:76:14:d6:58:03:fe:49:8c:a0:5e:90:f1: 37:36:d0:e8:40:10:c5:ea:70:61:a1:5b:6c:34:30:61:a5:5e: da:25:53:86:65:b0:92:22:0c:7d:ea:6f:20:25:d5:33:e1:c3: 72:78:81:6d:81:4a:56:a1:91:16:24:4f:5e:cb:6a:3e:eb:c5: 74:78:ef:16:06:66:50:6d:fa:4d:ea:5a:2a:ea:63:cf:c4:d3: ee:3a:d8:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUxMjA0MTY0MjIxWhcNMjUxMjExMTY0MjIxWjAYMRYwFAYD VQQDEw02OTMxYjllZS1iYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbMfUdanfNWtnykEugtws3F9zAKqzUOOtwzmlEOjGTTih4liEoiIVvLwIyc5 A7nNYUZuX5Hfeff5tJGjmoKnys5AvjEEdR3RVwIvSoNhl7/wf5Eb4xwM1CtgaGJ9 TydY1uthgi2MXeMGPVK2r2NeZcvVKbuIXRxsUGzcggiUbc5Y2V+QowxCPQNNA6w7 CsNV56VPDDI9fTL7MFcNAGPOoy6E2sRfiar/O04WYG1tIybgOzJJTxJbVBFNPBD+ vWJ7NY1tgAUifD++JfjfEuY31ldj9yknefk92OI7xqZ3lmZEkdhHxvVkJ+MFCL+D YFowOAkIefRgXoc4msHQZWdHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDuI5JC aawSB1mbclrsyO/nAGhpMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOidMQ6FLNd47s2nheSD24yz7yPj3mWoCG25YVvSBqMHQgQoK3k/wG MyBgqFyVG/W8ToVrUEN2rDyDuADoeuk12BzQHUv4hTY9d3IF+2vDX584e51dMWFD fh7Vr6iCliVH8YsGQi8XvVFaaDHycUOU+PKrIb91Da6Cfwxb988fIWbuuZJsj3+Y Q+MQwUzNwavN5Y4WMuRO+11+VnUAvez2WLWKEoAn7op2FNZYA/5JjKBekPE3NtDo QBDF6nBhoVtsNDBhpV7aJVOGZbCSIgx96m8gJdUz4cNyeIFtgUpWoZEWJE9ey2o+ 68V0eO8WBmZQbfpN6loq6mPPxNPuOthL -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:39 2025 by rpki-client