This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: mppGwV+QQxZIXynPuU0g5PuK5NP2QQjet404xRHdI/4= Subject key identifier: 73:DE:7A:F9:F2:BB:C9:BC:7E:EC:C3:6C:E0:7F:7C:DE:B3:AD:4E:26 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D04 Signing time: Sat 06 Dec 2025 17:30:01 +0000 Manifest this update: Sat 06 Dec 2025 17:30:00 +0000 Manifest next update: Sat 13 Dec 2025 17:30:00 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: sRmxYHBYVeEjUlBqVvAs2x2q8ePWVUVh1s0IKm8YAuI=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: WwXl48vJNivZYV02F4DhTAdSziCXHjo0WT9hGEi74tE=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: odtdAeT3uybzWOWQg7rEN3DZC1Lg8w9hAFA2d8d7ZGI=) 4: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Dec 6 17:30:00 2025 GMT Not After : Dec 13 17:30:00 2025 GMT Subject: CN=69346818-7d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:64:7b:af:f5:07:d7:2c:c8:93:ed:2d:8a: 2d:d9:07:9a:55:22:c1:e9:ba:9e:c6:96:46:99:db: 5d:fe:7b:e2:58:cd:cf:da:16:24:52:d0:44:84:c1: 59:c1:e6:c0:68:7b:6a:d9:14:12:ea:f7:8c:87:b5: ae:5f:40:0e:ac:ea:34:b8:1a:63:fc:82:8a:e0:89: bc:dd:e2:e7:7a:04:35:05:77:b4:98:f2:b1:1e:99: 48:ea:28:b9:59:7a:7d:6f:38:e5:e5:63:ab:28:18: e7:7c:da:13:01:17:01:fb:bb:0b:19:f9:16:02:19: 57:73:3e:86:b5:2e:69:b5:60:ca:40:44:7d:78:14: 43:44:8f:2a:79:74:89:b8:76:5e:11:2b:7f:5e:01: f1:07:51:fb:79:b4:b9:28:f5:6b:6d:9a:89:f7:0a: b4:bd:89:16:c0:6d:23:9e:af:d3:eb:1a:1d:e9:45: 46:88:4b:39:3f:04:ab:3f:c8:91:41:8c:3a:e3:1a: 35:5f:55:d7:fa:c6:c1:1d:92:28:a6:e5:80:e2:f3: d0:9b:01:e5:ab:17:75:ef:7c:5c:a7:74:73:ab:96: b3:a2:bb:c0:8f:3c:07:d8:da:a2:99:cc:11:fc:8e: 9b:d9:94:fe:a1:38:15:5d:7f:02:1f:63:a2:ff:47: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DE:7A:F9:F2:BB:C9:BC:7E:EC:C3:6C:E0:7F:7C:DE:B3:AD:4E:26 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0c:eb:b4:2b:5b:e6:d2:7c:2c:da:4d:7f:e7:22:38:77:8a: 5f:e9:52:da:c2:c2:9e:44:e3:43:e2:78:d8:1a:76:18:45:f9: 4f:8a:c3:e0:e4:19:9b:4a:54:0e:09:6f:9a:b1:80:11:25:e9: 15:73:09:35:c3:f0:be:2e:a5:03:63:c6:81:7f:01:c0:3a:2b: c1:ea:89:7d:f3:c4:9c:5a:e0:b2:00:18:8a:1d:d8:6e:31:7d: c6:ed:2c:7b:6a:7c:23:78:62:8c:be:0e:e4:72:e4:cd:67:ae: a0:3b:29:67:53:00:1e:e0:50:de:f6:9f:15:59:c5:67:ff:ba: 2f:de:ef:1f:f6:c2:b8:d0:06:b3:7a:b4:64:65:18:c4:7b:8e: cf:2f:e6:2a:8f:f2:40:d2:0a:56:54:c5:53:e3:66:eb:29:80: d7:dc:d5:8d:3e:7a:85:81:39:49:32:e2:72:79:3c:ef:fa:01: d4:e3:76:6f:44:12:4a:36:fa:d6:c1:cd:34:aa:d9:84:5a:b0: 6d:4f:a5:36:b0:ac:95:d0:c7:0b:55:bd:f0:fb:f4:6d:81:cd: 88:af:b0:8a:8f:c1:db:7c:4f:93:6e:f2:9f:00:d5:e5:1c:fc: 3f:f3:78:bf:4e:15:be:c3:9a:d3:e3:5b:8d:60:05:a6:80:25: 4f:36:d3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUxMjA2MTczMDAwWhcNMjUxMjEzMTczMDAwWjAYMRYwFAYD VQQDEw02OTM0NjgxOC03ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmVke6/1B9csyJPtLYot2QeaVSLB6bqexpZGmdtd/nviWM3P2hYkUtBEhMFZ webAaHtq2RQS6veMh7WuX0AOrOo0uBpj/IKK4Im83eLnegQ1BXe0mPKxHplI6ii5 WXp9bzjl5WOrKBjnfNoTARcB+7sLGfkWAhlXcz6GtS5ptWDKQER9eBRDRI8qeXSJ uHZeESt/XgHxB1H7ebS5KPVrbZqJ9wq0vYkWwG0jnq/T6xod6UVGiEs5PwSrP8iR QYw64xo1X1XX+sbBHZIopuWA4vPQmwHlqxd173xcp3Rzq5azorvAjzwH2NqimcwR /I6b2ZT+oTgVXX8CH2Oi/0eRbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPeevny u8m8fuzDbOB/fN6zrU4mMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvDOu0K1vm0nws2k1/5yI4d4pf6VLawsKeROND4njYGnYYRflPisPg 5BmbSlQOCW+asYARJekVcwk1w/C+LqUDY8aBfwHAOivB6ol988ScWuCyABiKHdhu MX3G7Sx7anwjeGKMvg7kcuTNZ66gOylnUwAe4FDe9p8VWcVn/7ov3u8f9sK40Aaz erRkZRjEe47PL+Yqj/JA0gpWVMVT42brKYDX3NWNPnqFgTlJMuJyeTzv+gHU43Zv RBJKNvrWwc00qtmEWrBtT6U2sKyV0McLVb3w+/Rtgc2Ir7CKj8HbfE+TbvKfANXl HPw/83i/ThW+w5rT41uNYAWmgCVPNtPn -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:50 2025 by rpki-client