This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: XN2A7yaVgxAnP1BcXO4x9W9qoNEDrSyewHEFGgGUfnw= Subject key identifier: 85:7C:2D:C6:9C:BA:7A:14:9F:7D:D5:CB:94:8F:1E:2C:E8:36:FB:17 Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: CD Signing time: Fri 05 Dec 2025 03:47:38 +0000 Manifest this update: Fri 05 Dec 2025 03:47:37 +0000 Manifest next update: Fri 12 Dec 2025 03:47:37 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: NKkjGaiyx7xpOzaVZTlfx+v/SH7iVP02cVWEyxU5EbE=) 2: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: UJvZLXPSCNqpnXZ276Fx1goF+GJjK4vVWZ5GmP11adM=) 3: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: b0gDJVf3M0zI90KeDasxgMyUSDFcKBbXk+l2t4A0mWE=) 4: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: X5kzDfqJWwzJqVe1tvfjzhYAWwGVLO7LnjiYU6TrgbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Dec 5 03:47:37 2025 GMT Not After : Dec 12 03:47:37 2025 GMT Subject: CN=693255da-536b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:47:68:d9:95:af:f2:bd:30:d4:4e:d5:f8: 86:ca:5d:8a:aa:8f:e5:f0:b8:d5:81:b6:af:98:2f: e0:d8:2d:ce:52:b3:3f:73:69:b1:3f:d2:c8:eb:70: 91:b3:09:98:de:45:f3:fc:df:dd:25:02:ac:1c:2e: 91:83:a2:61:74:0d:57:15:c4:d5:d2:64:3c:53:72: f0:cd:1e:e7:c8:6d:7d:39:64:2a:70:b5:11:07:8c: 5f:5c:7b:da:22:fe:5c:60:84:16:e4:17:80:cb:04: 39:16:61:04:34:31:46:3c:7d:d5:4f:8f:64:bd:4a: 2f:42:b1:89:c0:e2:db:46:1f:f4:c9:c2:dd:9d:cd: 6a:f4:c3:09:12:3e:01:75:2a:73:d5:0b:f1:e0:79: 5e:0e:e9:52:87:53:5e:96:6b:f9:f3:f2:61:2d:c8: 85:4e:88:c1:5d:e4:de:a3:67:36:04:22:34:20:5a: ff:2a:2d:cb:32:0a:eb:c2:83:dc:b4:42:46:59:c6: a1:c9:ee:d9:13:21:3a:80:b9:98:72:80:a5:3e:2a: 8c:66:a4:6e:eb:01:8f:57:5a:26:9e:15:97:e5:1d: e0:c4:76:2a:1d:a5:7e:43:db:25:7f:16:a3:c9:2c: b8:c3:f9:49:40:2f:35:85:d7:5b:ba:a8:73:db:85: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7C:2D:C6:9C:BA:7A:14:9F:7D:D5:CB:94:8F:1E:2C:E8:36:FB:17 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:41:56:a4:43:0b:44:86:aa:f5:6e:03:03:e9:ee:41:d7:fa: 4f:47:e3:63:a6:eb:26:c8:f5:54:52:32:c8:43:af:e0:40:57: 84:79:85:ec:03:66:6c:f5:8c:08:12:27:3e:b1:06:eb:8d:ef: 30:83:85:35:39:b8:dc:41:2a:7d:cb:50:14:71:d2:7d:7c:6e: 12:59:35:7f:98:e4:94:bc:27:0d:1c:5a:ec:65:cf:d2:6c:c1: 49:99:52:70:83:c4:54:bb:4c:ea:61:53:f9:30:bb:bd:81:95: da:3c:98:f9:37:42:f7:bb:91:95:7a:ff:d5:44:22:2f:bc:7e: 7b:b3:52:14:1c:aa:22:e6:15:03:56:d4:3d:f4:9c:a7:23:76: 1d:27:e3:a6:34:e0:7a:13:c1:52:dc:f4:8b:e0:33:e0:94:32: cf:56:96:c2:00:9c:df:4a:bd:bd:90:e6:d5:3f:43:a3:8e:6b: 6d:4c:a5:a5:06:bb:88:93:8d:41:64:02:38:b2:16:88:bd:af: 56:5a:e8:bc:05:ac:67:64:7c:27:a1:40:f2:d9:b0:2f:b9:9d: e2:33:65:13:e3:94:e1:4a:be:87:4d:2e:34:ba:30:8c:f0:fa: 11:8c:a2:f7:91:b7:38:47:94:71:1f:22:7d:3f:b9:b6:98:f2: a6:23:96:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjUxMjA1MDM0NzM3WhcNMjUxMjEyMDM0NzM3WjAYMRYwFAYD VQQDEw02OTMyNTVkYS01MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6VHaNmVr/K9MNRO1fiGyl2Kqo/l8LjVgbavmC/g2C3OUrM/c2mxP9LI63CR swmY3kXz/N/dJQKsHC6Rg6JhdA1XFcTV0mQ8U3LwzR7nyG19OWQqcLURB4xfXHva Iv5cYIQW5BeAywQ5FmEENDFGPH3VT49kvUovQrGJwOLbRh/0ycLdnc1q9MMJEj4B dSpz1Qvx4HleDulSh1Nelmv58/JhLciFTojBXeTeo2c2BCI0IFr/Ki3LMgrrwoPc tEJGWcahye7ZEyE6gLmYcoClPiqMZqRu6wGPV1omnhWX5R3gxHYqHaV+Q9slfxaj ySy4w/lJQC81hddbuqhz24X6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIV8Lcac unoUn33Vy5SPHizoNvsXMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0 dlYtZG1uTW9yMWcyTHJJc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAQVakQwtEhqr1bgMD6e5B1/pPR+NjpusmyPVUUjLIQ6/gQFeEeYXs A2Zs9YwIEic+sQbrje8wg4U1ObjcQSp9y1AUcdJ9fG4SWTV/mOSUvCcNHFrsZc/S bMFJmVJwg8RUu0zqYVP5MLu9gZXaPJj5N0L3u5GVev/VRCIvvH57s1IUHKoi5hUD VtQ99JynI3YdJ+OmNOB6E8FS3PSL4DPglDLPVpbCAJzfSr29kObVP0OjjmttTKWl BruIk41BZAI4shaIva9WWui8BaxnZHwnoUDy2bAvuZ3iM2UT45ThSr6HTS40ujCM 8PoRjKL3kbc4R5RxHyJ9P7m2mPKmI5a6 -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:03 2025 by rpki-client