This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: 5zmD0pjISwXgDq9e/iW2fb5lYZPW44FlOpuDxz6MddQ= Subject key identifier: C7:02:E2:2C:68:80:2D:FA:EB:D4:97:C8:5A:B9:60:40:71:E8:26:52 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1044 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FBF Signing time: Sat 06 Dec 2025 17:02:33 +0000 Manifest this update: Sat 06 Dec 2025 17:02:33 +0000 Manifest next update: Sat 13 Dec 2025 17:02:33 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: B9oI4oljUmcHvUSTHQug0hGmd1XWrBbqPJfTHE8GKXg=) 2: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: zq3r2bqYk5JoyYAxGmuwDEsSoCRJP0AIOXoJJj3slFs=) 3: B35E5B46334111EF9770A542C4F9AE02.roa (hash: eo1b+Yq2Qt1v8H4Ltid7fTu6HkQPul0DLMpDr+LxnZs=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: ZKO21v7I5AsbeHedpQVwlDjC0YYOzEud39SdbR3CgmA=) 5: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 6: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 7: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 05k3Et6L9d2nE0FPEy+35+jv6KXbsZR/t8jrPFetuWc=) 8: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) 9: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 10: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4164 (0x1044) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Dec 6 17:02:33 2025 GMT Not After : Dec 13 17:02:33 2025 GMT Subject: CN=693461a9-f9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7a:02:f5:42:ee:f8:34:a2:42:2b:8d:cb:08: a8:14:4d:ac:7b:05:92:33:d0:f2:95:ea:76:c4:0b: 10:b5:c5:e1:b2:7b:48:c0:b0:16:b5:e1:14:67:32: 4a:ab:23:e8:5e:9d:f0:47:ef:3b:5e:a5:0c:7d:1d: 55:1a:a9:90:d8:7c:15:e0:fa:ac:8d:bd:be:76:f4: 9d:a8:b9:eb:fc:b3:ed:00:dc:22:e8:bf:16:4f:a6: 0b:1a:60:40:70:92:23:26:b5:d6:bb:8c:7c:07:05: 4c:7b:b6:ef:d8:1b:88:0c:3c:97:df:1c:91:ac:9d: ac:20:a2:23:7b:20:a0:44:a8:32:1e:ac:47:fd:06: bb:04:c7:0f:d2:d1:38:a0:46:32:58:59:ba:de:e8: 74:68:16:88:b5:f9:03:c5:37:7f:67:1b:06:0b:7d: 8a:92:8d:05:12:76:ff:8d:4d:b7:05:d2:54:27:55: 9b:f3:ab:11:e6:c1:f7:11:42:f1:c1:16:2b:96:ef: e9:40:df:1e:02:88:ab:10:08:1c:b5:73:5e:b6:88: 42:a7:61:8d:72:41:f8:6b:e8:45:3e:ac:5b:10:8d: b6:6f:5e:01:0b:dc:27:db:00:14:95:30:60:03:73: 05:d5:36:80:1d:ac:fd:53:2e:b7:17:78:ac:3d:42: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:E2:2C:68:80:2D:FA:EB:D4:97:C8:5A:B9:60:40:71:E8:26:52 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5c:67:de:97:c6:36:a1:c5:3b:c4:1d:46:51:7d:4b:bb:e3: ca:12:89:61:37:8b:1c:9d:e8:f8:41:1c:67:44:b8:18:3d:48: 39:2b:c9:8b:27:70:df:6b:96:66:e0:2d:17:05:fd:ad:23:ae: d4:9d:32:20:9c:10:46:13:69:bc:96:b1:17:56:19:56:9a:38: 41:1a:d4:7c:23:43:07:af:a2:4e:d4:80:01:47:cf:e8:a7:88: 35:78:4d:9a:06:70:6f:ee:c7:e7:15:7c:f2:e7:bb:fa:aa:09: 08:c3:17:59:73:a6:91:a4:c7:46:4e:a0:40:46:7b:37:78:46: 1a:f4:d5:0f:d4:a7:3a:14:f5:f1:01:ce:8f:fc:8c:e1:3e:b1: 4c:89:ff:ee:a4:d6:68:96:5e:23:ab:a8:de:ed:53:fb:bd:2c: 1d:f5:d4:87:8c:13:05:b3:43:f7:96:d7:42:07:7a:5b:d5:5f: 79:95:c5:09:c9:7a:cb:b7:a3:ee:c9:c6:33:ac:91:03:5b:57: 75:83:46:f4:e5:28:bc:f3:22:8e:8d:95:97:1e:cd:18:9f:ca: bd:1e:b8:69:3c:35:8d:4c:5f:5c:b7:8e:76:50:49:e6:f6:46: 7a:d5:62:45:60:ea:bd:60:29:5f:58:94:3e:fa:4f:69:63:02: e6:72:cd:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUxMjA2MTcwMjMzWhcNMjUxMjEzMTcwMjMzWjAYMRYwFAYD VQQDEw02OTM0NjFhOS1mOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XoC9ULu+DSiQiuNywioFE2sewWSM9Dylep2xAsQtcXhsntIwLAWteEUZzJK qyPoXp3wR+87XqUMfR1VGqmQ2HwV4Pqsjb2+dvSdqLnr/LPtANwi6L8WT6YLGmBA cJIjJrXWu4x8BwVMe7bv2BuIDDyX3xyRrJ2sIKIjeyCgRKgyHqxH/Qa7BMcP0tE4 oEYyWFm63uh0aBaItfkDxTd/ZxsGC32Kko0FEnb/jU23BdJUJ1Wb86sR5sH3EULx wRYrlu/pQN8eAoirEAgctXNetohCp2GNckH4a+hFPqxbEI22b14BC9wn2wAUlTBg A3MF1TaAHaz9Uy63F3isPUJHvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcC4ixo gC3669SXyFq5YEBx6CZSMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMXGfel8Y2ocU7xB1GUX1Lu+PKEolhN4scnej4QRxnRLgYPUg5K8mL J3Dfa5Zm4C0XBf2tI67UnTIgnBBGE2m8lrEXVhlWmjhBGtR8I0MHr6JO1IABR8/o p4g1eE2aBnBv7sfnFXzy57v6qgkIwxdZc6aRpMdGTqBARns3eEYa9NUP1Kc6FPXx Ac6P/IzhPrFMif/upNZoll4jq6je7VP7vSwd9dSHjBMFs0P3ltdCB3pb1V95lcUJ yXrLt6PuycYzrJEDW1d1g0b05Si88yKOjZWXHs0Yn8q9HrhpPDWNTF9ct452UEnm 9kZ61WJFYOq9YClfWJQ++k9pYwLmcs3b -----END CERTIFICATE-----Generated at Sun Dec 7 02:57:35 2025 by rpki-client