This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json) Hash identifier: CyRa+ZnR+KH03ZDY4SIOteKsswqILWeXWl1IxQqAKZw= Subject key identifier: 36:46:9D:99:16:04:1A:CC:2E:D6:9B:AF:5C:BA:76:D0:11:6C:EB:73 Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft Manifest number: 9E Signing time: Fri 05 Dec 2025 04:19:10 +0000 Manifest this update: Fri 05 Dec 2025 04:19:09 +0000 Manifest next update: Fri 12 Dec 2025 04:19:09 +0000 Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: xmnO4HkScKb+Bb2hrU2s9ShBPga+PzN39jVpluB1ek8=) 2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: PikBYoAiLsYP3+Plkjib3H61VZb7HfjBFcsCC14z91s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Validity Not Before: Dec 5 04:19:09 2025 GMT Not After : Dec 12 04:19:09 2025 GMT Subject: CN=69325d3e-a2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:6e:4a:63:3a:65:f2:f6:82:15:cd:da:54: fb:20:e8:a7:42:26:82:62:c3:a2:b2:06:12:08:6b: 90:38:cc:05:cb:0e:d8:6d:a3:a5:3e:55:f5:bf:67: b4:19:26:c0:54:92:e1:2a:0e:65:4e:e5:2b:56:3d: ab:cf:00:52:73:44:b0:d8:f2:95:4b:72:db:a9:d9: eb:4a:70:6d:78:7e:22:f2:3a:5e:3d:96:8a:93:82: a5:9b:c0:d0:3f:ea:01:5d:7e:0c:7f:7d:11:b0:ea: dd:9e:a7:42:c1:3a:de:05:32:d1:48:9f:97:49:90: 6d:29:62:5f:a6:89:70:3d:5c:da:f1:36:2d:e7:b4: 6e:57:19:18:be:92:ff:b0:68:c9:25:0c:29:d7:05: c7:ab:cb:3f:4c:b7:0c:f3:f6:37:db:95:1e:1b:84: 9f:ea:b0:ee:7d:76:c7:9a:e8:09:62:51:77:35:3a: f6:72:c9:bb:d5:cc:35:43:05:1b:ae:da:a6:a4:16: fa:54:19:3b:bf:cc:ec:32:0d:3b:97:6c:ba:76:af: 0b:27:89:94:b6:cd:c0:3b:b8:a1:1b:51:c4:1c:de: b6:f5:5c:61:8e:83:59:6a:44:e8:36:f4:f5:9c:4a: 1d:bc:fc:b7:e5:42:23:cd:68:4e:2e:51:e7:e2:b8: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:9D:99:16:04:1A:CC:2E:D6:9B:AF:5C:BA:76:D0:11:6C:EB:73 X509v3 Authority Key Identifier: keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:85:9e:77:3c:76:a0:43:9f:d8:a1:28:d0:5a:0b:53:d4:f7: 8b:bb:eb:71:38:dd:7c:23:bb:42:a7:bd:78:e8:60:53:86:60: 9e:fb:d3:f9:23:b9:68:64:4a:16:7e:00:b9:ae:d7:07:a2:32: a3:34:10:18:48:20:4f:01:e6:04:15:e2:b8:4a:75:e1:88:fd: 5d:e7:7c:44:86:2f:94:ea:a4:4d:61:e7:15:af:40:54:ce:87: 6c:5c:fa:ea:7c:a5:8c:2f:40:30:2a:72:83:43:f7:df:32:fd: 8e:65:81:ab:16:23:bf:fa:2a:d1:4b:82:4e:73:9c:ad:f9:89: 7d:97:61:47:d1:33:96:60:48:00:67:7c:3a:04:61:60:e9:fa: 0e:90:66:72:c9:1a:cf:5c:f0:d0:f0:6a:fa:6c:a7:ca:38:df: c7:32:cd:58:b8:31:9b:ba:b1:8c:8f:29:1c:b5:bf:ce:f4:96: a6:27:a1:e5:2b:e7:ab:51:cf:cc:f4:a4:ae:55:21:df:82:b1: f2:b5:79:50:44:85:ae:82:a7:51:1f:38:50:8c:86:74:e7:82: a0:85:78:3a:4a:65:69:8d:8c:38:86:dd:e0:e6:4e:aa:e2:22: a4:e6:ee:34:4e:d6:07:ae:d1:8e:41:37:b6:20:9c:a8:47:b9: 39:3c:d2:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5RUExMTAvBgNVBAUTKDAwRkQzMUZEMDZCNDIwNEMzRERDQjYzNTA3MTg5NTMz Nzc4Q0NDRjgwHhcNMjUxMjA1MDQxOTA5WhcNMjUxMjEyMDQxOTA5WjAYMRYwFAYD VQQDEw02OTMyNWQzZS1hMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHNuSmM6ZfL2ghXN2lT7IOinQiaCYsOisgYSCGuQOMwFyw7YbaOlPlX1v2e0 GSbAVJLhKg5lTuUrVj2rzwBSc0Sw2PKVS3LbqdnrSnBteH4i8jpePZaKk4Klm8DQ P+oBXX4Mf30RsOrdnqdCwTreBTLRSJ+XSZBtKWJfpolwPVza8TYt57RuVxkYvpL/ sGjJJQwp1wXHq8s/TLcM8/Y325UeG4Sf6rDufXbHmugJYlF3NTr2csm71cw1QwUb rtqmpBb6VBk7v8zsMg07l2y6dq8LJ4mUts3AO7ihG1HEHN629VxhjoNZakToNvT1 nEodvPy35UIjzWhOLlHn4rhnMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZGnZkW BBrMLtabr1y6dtARbOtzMB8GA1UdIwQYMBaAFAD9Mf0GtCBMPdy2NQcYlTN3jMz4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlFQS84QzU5MTJGRUUx M0IxMUVGQkE3QkRGM0JDNEY5QUUwMi9BUDB4X1FhMElFdzkzTFkxQnhpVk0zZU16 UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlFQS84QzU5MTJGRUUxM0IxMUVGQkE3QkRGM0JDNEY5QUUwMi9BUDB4X1FhMElF dzkzTFkxQnhpVk0zZU16UGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnhZ53PHagQ5/YoSjQWgtT1PeLu+txON18I7tCp7146GBThmCe+9P5 I7loZEoWfgC5rtcHojKjNBAYSCBPAeYEFeK4SnXhiP1d53xEhi+U6qRNYecVr0BU zodsXPrqfKWML0AwKnKDQ/ffMv2OZYGrFiO/+irRS4JOc5yt+Yl9l2FH0TOWYEgA Z3w6BGFg6foOkGZyyRrPXPDQ8Gr6bKfKON/HMs1YuDGburGMjykctb/O9JamJ6Hl K+erUc/M9KSuVSHfgrHytXlQRIWugqdRHzhQjIZ054KghXg6SmVpjYw4ht3g5k6q 4iKk5u40TtYHrtGOQTe2IJyoR7k5PNIy -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:20 2025 by rpki-client