This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: 07N3ijnawBvYsZiwCLMY8J1wToIbhyDVHnkwgnL51eI= Subject key identifier: D6:8A:A1:F7:79:B6:E9:BC:23:90:BB:10:08:FF:72:C9:B0:27:81:77 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 133E Signing time: Thu 04 Dec 2025 19:07:30 +0000 Manifest this update: Thu 04 Dec 2025 19:07:30 +0000 Manifest next update: Thu 11 Dec 2025 19:07:30 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: ku3uCTyDJFExMlTTABswrrBvj0eaTnKnE5W801DbuiY=) 2: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) 4: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: fPmtLcUFfqmnk0wi645J2lDvp8Mqyw6eXt3q3C30cuA=) 5: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Dec 4 19:07:30 2025 GMT Not After : Dec 11 19:07:30 2025 GMT Subject: CN=6931dbf2-45b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:9a:7a:44:d6:cb:63:ae:fd:f8:da:51:86: 0c:4c:e8:19:18:3e:24:61:ab:48:c4:a1:2a:f9:02: c4:27:e5:bf:7c:4a:d1:65:3d:8b:59:d4:c2:cd:c2: 61:a7:3e:97:21:08:43:48:92:eb:a7:4c:c3:d9:6d: b4:b2:1c:8e:8e:2b:45:d0:b2:65:6d:f2:d9:09:f3: 50:92:38:2f:49:ab:ba:07:4e:e4:02:96:db:02:d3: b9:98:d3:44:dd:13:fe:7c:06:a1:4e:03:85:8b:18: 42:06:c6:fa:71:da:01:8e:5a:0e:2e:35:b0:ca:a5: 64:6d:13:fc:16:b4:52:da:f8:e4:58:79:ec:b7:70: 5e:a4:97:c4:64:f5:ba:75:bc:24:c8:5f:f1:77:2a: 93:99:4f:6b:01:02:96:14:ab:b4:f7:37:83:0d:e4: 54:83:9c:fb:a2:fe:d7:22:5d:24:c0:d1:6c:6d:3d: 02:72:31:b2:12:56:41:65:0d:b5:2e:b0:40:b4:f7: 23:ac:7f:a2:fe:30:bd:3a:90:4a:cc:a4:41:4b:9c: f9:08:e7:14:dd:0d:41:9f:d3:25:8b:65:69:9f:c8: 7f:86:51:56:e8:0e:14:d5:b5:14:a9:f3:59:dc:9c: 4f:9f:bd:5a:73:e5:d7:43:b6:57:12:14:b5:f2:78: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8A:A1:F7:79:B6:E9:BC:23:90:BB:10:08:FF:72:C9:B0:27:81:77 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0b:fe:64:02:33:9c:94:cf:b6:40:93:7a:8a:78:09:2f:d5: da:c9:44:29:be:4f:98:62:dd:79:0a:91:0f:bc:59:50:04:24: 3f:a5:7b:6e:9d:ac:ef:23:c4:80:68:f0:4b:c0:a9:b8:2c:55: f1:58:96:ab:55:6c:5a:58:66:c3:b0:54:30:08:22:75:2b:be: fb:5e:7c:56:eb:8d:d0:3f:5e:96:11:5a:98:bf:e9:62:bd:16: 9e:13:58:0b:bf:0c:5c:d2:ce:85:84:f8:2f:13:1c:43:fb:02: 56:8e:10:1e:b8:f1:96:70:3a:c1:2f:53:71:0a:36:28:bb:3a: 31:76:01:73:68:78:65:59:2d:e3:72:5b:10:d8:47:fe:6b:c3: 06:5f:dc:84:33:e1:b3:44:d4:69:28:49:cb:fe:9f:f6:74:3a: bf:de:4c:78:af:53:3a:d7:58:8f:49:21:8c:1e:9a:2d:5c:f7: 32:28:b5:b7:c3:4c:48:ee:56:ae:8c:9c:6e:7f:bc:c4:08:49: 5b:3d:23:ff:47:9a:c1:1a:cc:fa:03:e8:65:fe:9b:a3:1e:bd: 88:4f:d6:98:c8:24:d8:6c:c5:f1:d0:28:c7:33:ab:47:75:ac: 1b:2e:c3:a1:fc:26:b0:17:02:e0:0a:24:e2:e1:fc:c9:34:e7: d0:1c:72:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUxMjA0MTkwNzMwWhcNMjUxMjExMTkwNzMwWjAYMRYwFAYD VQQDEw02OTMxZGJmMi00NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf+aekTWy2Ou/fjaUYYMTOgZGD4kYatIxKEq+QLEJ+W/fErRZT2LWdTCzcJh pz6XIQhDSJLrp0zD2W20shyOjitF0LJlbfLZCfNQkjgvSau6B07kApbbAtO5mNNE 3RP+fAahTgOFixhCBsb6cdoBjloOLjWwyqVkbRP8FrRS2vjkWHnst3BepJfEZPW6 dbwkyF/xdyqTmU9rAQKWFKu09zeDDeRUg5z7ov7XIl0kwNFsbT0CcjGyElZBZQ21 LrBAtPcjrH+i/jC9OpBKzKRBS5z5COcU3Q1Bn9Mli2Vpn8h/hlFW6A4U1bUUqfNZ 3JxPn71ac+XXQ7ZXEhS18nhzXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaKofd5 tum8I5C7EAj/csmwJ4F3MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFC/5kAjOclM+2QJN6ingJL9XayUQpvk+YYt15CpEPvFlQBCQ/pXtu nazvI8SAaPBLwKm4LFXxWJarVWxaWGbDsFQwCCJ1K777XnxW643QP16WEVqYv+li vRaeE1gLvwxc0s6FhPgvExxD+wJWjhAeuPGWcDrBL1NxCjYouzoxdgFzaHhlWS3j clsQ2Ef+a8MGX9yEM+GzRNRpKEnL/p/2dDq/3kx4r1M611iPSSGMHpotXPcyKLW3 w0xI7laujJxuf7zECElbPSP/R5rBGsz6A+hl/pujHr2IT9aYyCTYbMXx0CjHM6tH dawbLsOh/CawFwLgCiTi4fzJNOfQHHJa -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:58 2025 by rpki-client