This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: IayW7Yy/1vf1E3zQIlP0Z663Sdhu0xk3gj9BzDk+3kY= Subject key identifier: A0:42:4B:F9:6E:74:0D:11:AF:CC:F4:84:14:86:AD:06:F3:50:D2:70 Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 01F3 Signing time: Tue 09 Dec 2025 00:47:43 +0000 Manifest this update: Tue 09 Dec 2025 00:47:42 +0000 Manifest next update: Tue 16 Dec 2025 00:47:42 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: Uo8ycENsMNz/wm2FZ3iQg9n2JtizfYi2BlIuvlyatL4=) 2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: 3MNDiBeknSHzY93vsrPzAAHGYu/SDVnN9ctSXpKt+Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Dec 9 00:47:42 2025 GMT Not After : Dec 16 00:47:42 2025 GMT Subject: CN=693771af-be30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:47:7d:54:26:7b:11:e9:42:62:61:8c:0d:47: 0c:db:97:1f:91:74:b9:9b:77:ab:00:d3:51:ec:42: aa:b7:0d:51:26:8d:ad:57:5a:cc:41:da:fd:17:7c: 67:c5:92:28:14:50:46:9d:df:3a:8e:c5:71:74:c3: 04:24:55:dc:9d:48:a3:6d:4d:b9:71:c6:5e:ef:04: ac:90:62:6a:08:d9:98:03:1c:81:5f:fd:87:7c:4c: b4:30:c1:cb:73:5c:22:b8:55:20:19:91:df:31:be: b0:bb:99:4c:c1:87:bd:e4:01:37:7e:54:27:04:8e: fa:b1:cd:db:85:7d:e1:b0:5e:a7:19:8b:db:63:5c: 71:cd:89:b6:01:d6:29:f4:96:89:73:cb:2b:44:1c: 3c:75:03:b0:85:92:74:a3:20:c4:08:c1:a1:ca:e2: eb:64:c2:9c:e5:b3:f9:94:35:73:d3:bc:9a:62:42: 47:0f:2f:2a:ed:23:f6:c0:82:d6:88:a3:7f:a6:f4: c7:a3:35:7c:23:7c:1e:4a:fd:77:ea:dd:77:f9:7d: bd:40:f5:0f:c3:e4:4a:54:4f:41:88:a1:1c:3a:15: a3:5b:68:cc:04:b6:42:ab:3a:4f:88:37:df:18:22: 0c:53:a9:35:fc:59:89:e8:6a:2e:2c:00:73:6a:4d: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:4B:F9:6E:74:0D:11:AF:CC:F4:84:14:86:AD:06:F3:50:D2:70 X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:71:e7:51:78:3f:2c:82:91:7c:28:96:4f:22:36:8a:67:8e: ab:13:62:6f:37:19:b2:55:fe:80:b3:8c:6e:e0:a3:18:c2:b5: 2f:f1:01:b6:1d:ed:bb:6f:bc:84:4e:78:1c:a4:88:51:a4:fc: dd:8f:9e:c6:5a:81:6a:e9:b2:9d:87:26:08:c2:b6:c8:61:e7: 4d:1d:03:99:8f:0f:ba:97:dd:30:a7:23:5b:61:8b:d9:87:b7: ca:dc:6f:92:71:40:67:81:7e:4a:bc:de:b6:11:45:5d:ba:19: f2:0f:9f:2f:b5:fc:d4:f9:8e:fd:19:de:73:25:0a:7c:d1:ab: cf:22:7a:e9:fc:32:0a:7d:04:f2:bb:e0:f0:7e:5b:8a:4c:2e: 6c:3b:95:ef:ab:5a:c2:48:a6:62:fa:3f:19:40:03:ed:2d:e8: 51:06:de:5a:3c:ce:74:de:60:51:07:7b:82:b7:08:5c:9e:35: 06:4c:5a:d9:a9:0b:c6:16:ca:d1:a6:cd:5e:4f:a7:67:db:ca: de:09:2a:14:d1:56:6f:51:7a:4c:c7:a7:19:6e:82:38:68:97: c5:5d:af:ad:df:c1:72:03:2c:ca:9d:da:18:16:ca:17:6b:b8: 04:bd:af:a5:8d:c3:32:04:1e:8c:6b:75:81:3c:ba:05:44:0e: 65:a3:fd:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjUxMjA5MDA0NzQyWhcNMjUxMjE2MDA0NzQyWjAYMRYwFAYD VQQDEw02OTM3NzFhZi1iZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kd9VCZ7EelCYmGMDUcM25cfkXS5m3erANNR7EKqtw1RJo2tV1rMQdr9F3xn xZIoFFBGnd86jsVxdMMEJFXcnUijbU25ccZe7wSskGJqCNmYAxyBX/2HfEy0MMHL c1wiuFUgGZHfMb6wu5lMwYe95AE3flQnBI76sc3bhX3hsF6nGYvbY1xxzYm2AdYp 9JaJc8srRBw8dQOwhZJ0oyDECMGhyuLrZMKc5bP5lDVz07yaYkJHDy8q7SP2wILW iKN/pvTHozV8I3weSv136t13+X29QPUPw+RKVE9BiKEcOhWjW2jMBLZCqzpPiDff GCIMU6k1/FmJ6GouLABzak1pcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBCS/lu dA0Rr8z0hBSGrQbzUNJwMB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwcedReD8sgpF8KJZPIjaKZ46rE2JvNxmyVf6As4xu4KMYwrUv8QG2 He27b7yETngcpIhRpPzdj57GWoFq6bKdhyYIwrbIYedNHQOZjw+6l90wpyNbYYvZ h7fK3G+ScUBngX5KvN62EUVduhnyD58vtfzU+Y79Gd5zJQp80avPInrp/DIKfQTy u+DwfluKTC5sO5Xvq1rCSKZi+j8ZQAPtLehRBt5aPM503mBRB3uCtwhcnjUGTFrZ qQvGFsrRps1eT6dn28reCSoU0VZvUXpMx6cZboI4aJfFXa+t38FyAyzKndoYFsoX a7gEva+ljcMyBB6Ma3WBPLoFRA5lo/0x -----END CERTIFICATE-----Generated at Wed Dec 10 17:22:26 2025 by rpki-client