This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: MlmFiJnvBukDC8Tud4RDBQmIlSv119ZM9Vnbv7JBiRY= Subject key identifier: 14:3E:A9:B4:58:71:BA:B7:D6:73:D4:59:A0:95:F1:02:8F:54:72:D9 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0407 Signing time: Thu 04 Dec 2025 22:55:29 +0000 Manifest this update: Thu 04 Dec 2025 22:55:28 +0000 Manifest next update: Thu 11 Dec 2025 22:55:28 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: pdQcqAa6JI4GOZOltZx+BssgKwUaooddbenSSO2BEzU=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Dec 4 22:55:28 2025 GMT Not After : Dec 11 22:55:28 2025 GMT Subject: CN=69321160-5ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:c5:61:86:52:c1:f8:0f:08:0d:62:5d:0c: 2b:0e:97:7f:fa:6a:be:fa:13:4e:90:57:02:3a:44: eb:28:48:6d:fa:36:cd:c1:ab:04:c8:7a:12:19:b0: d5:07:8b:02:5b:14:3a:62:7c:65:da:bf:20:92:a7: 7e:9d:8a:86:ed:ef:24:6d:26:d0:b1:b7:36:d2:1c: a6:e0:67:92:9e:4f:4c:16:6a:d1:8a:86:03:8a:6d: 0a:ff:f7:0b:f3:34:01:62:ea:be:d9:f0:23:c0:a3: d3:58:18:07:75:e6:78:fd:0f:85:d8:79:e4:ad:d8: b8:66:6d:fb:ed:30:cf:b8:94:88:76:4c:d8:ac:06: 65:ec:3b:50:d2:41:e1:64:27:66:7b:11:f2:b5:16: f7:57:82:74:94:9a:d9:73:b5:8d:a8:57:97:3d:13: b1:88:b0:4e:42:a4:17:32:32:80:f4:fb:87:73:75: 3b:fd:72:6d:1c:52:bb:e2:95:c6:19:c3:f5:ba:37: 7c:1d:9f:75:62:84:4e:1a:26:22:2a:1c:f9:de:90: c1:65:6b:0d:ce:c2:3c:61:ca:3a:ac:08:05:a4:3b: f7:5c:cd:5f:98:b1:6a:cd:7f:64:ba:08:77:c6:b4: 8b:27:57:54:60:e5:3b:f7:80:83:52:f9:20:82:55: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3E:A9:B4:58:71:BA:B7:D6:73:D4:59:A0:95:F1:02:8F:54:72:D9 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:16:57:c8:96:6f:08:1d:45:45:3b:c0:02:2c:1c:d5:8e: e9:a5:8c:d8:60:50:33:c5:50:95:f7:98:4f:fe:ba:28:19:c0: 97:60:82:6d:01:50:63:c4:07:6b:9c:f3:d4:ad:c3:a4:94:c5: 53:df:73:72:75:12:8e:55:d8:d0:0b:90:79:5a:98:ab:fe:e4: 1a:8d:8b:7b:11:be:ab:60:59:ee:8e:bd:8b:05:72:dd:b9:1e: 65:1f:d9:26:1a:2a:ce:b9:fe:e3:d5:fa:0f:7b:4b:79:c1:9e: 02:6e:39:78:32:6f:c2:13:45:c3:45:e6:23:15:bd:e7:72:93: 9e:85:03:59:f8:96:84:3e:40:be:a6:fa:36:b3:47:c9:1b:ec: 54:f9:93:1b:96:cf:a6:89:53:48:5a:e0:b7:68:d2:aa:55:0e: f3:f6:95:ef:e4:f8:d6:36:35:1e:25:5d:0c:f4:c9:24:c0:21: d6:18:31:e7:21:2f:41:99:29:be:6e:c5:b9:21:96:87:fb:0a: ec:e4:a6:84:77:df:28:a5:23:2b:6b:3b:3a:1b:62:0e:e8:f7: f9:05:0d:f3:2b:eb:30:67:4d:8a:11:b4:cc:80:d5:0b:58:fa: 93:f9:34:7a:0e:26:51:84:b5:35:4a:a5:1f:5d:91:78:f8:77: 08:df:00:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUxMjA0MjI1NTI4WhcNMjUxMjExMjI1NTI4WjAYMRYwFAYD VQQDEw02OTMyMTE2MC01ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JXFYYZSwfgPCA1iXQwrDpd/+mq++hNOkFcCOkTrKEht+jbNwasEyHoSGbDV B4sCWxQ6Ynxl2r8gkqd+nYqG7e8kbSbQsbc20hym4GeSnk9MFmrRioYDim0K//cL 8zQBYuq+2fAjwKPTWBgHdeZ4/Q+F2Hnkrdi4Zm377TDPuJSIdkzYrAZl7DtQ0kHh ZCdmexHytRb3V4J0lJrZc7WNqFeXPROxiLBOQqQXMjKA9PuHc3U7/XJtHFK74pXG GcP1ujd8HZ91YoROGiYiKhz53pDBZWsNzsI8Yco6rAgFpDv3XM1fmLFqzX9kugh3 xrSLJ1dUYOU794CDUvkgglXsjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ+qbRY cbq31nPUWaCV8QKPVHLZMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChmhZXyJZvCB1FRTvAAiwc1Y7ppYzYYFAzxVCV95hP/rooGcCXYIJt AVBjxAdrnPPUrcOklMVT33NydRKOVdjQC5B5Wpir/uQajYt7Eb6rYFnujr2LBXLd uR5lH9kmGirOuf7j1foPe0t5wZ4Cbjl4Mm/CE0XDReYjFb3ncpOehQNZ+JaEPkC+ pvo2s0fJG+xU+ZMbls+miVNIWuC3aNKqVQ7z9pXv5PjWNjUeJV0M9MkkwCHWGDHn IS9BmSm+bsW5IZaH+wrs5KaEd98opSMrazs6G2IO6Pf5BQ3zK+swZ02KEbTMgNUL WPqT+TR6DiZRhLU1SqUfXZF4+HcI3wDw -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:05 2025 by rpki-client