This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: EUr4HHYUGzH3OVkhc4sH8RUnd74mo6si2An+7QAMo+0= Subject key identifier: 4D:F6:17:A9:DA:B0:1D:E4:60:ED:FB:1D:19:A0:2C:75:46:DB:11:39 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 02FB Signing time: Thu 04 Dec 2025 23:39:39 +0000 Manifest this update: Thu 04 Dec 2025 23:39:38 +0000 Manifest next update: Thu 11 Dec 2025 23:39:38 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: CfFCaO7Pbgkc0FNembADzjEhiNcSLS7O96lbBS22taw=) 2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=) 3: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: 3CgCTp3bzKYZXfeq4ZljTed0rolq+eWipeXPCnowOi0=) 4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Dec 4 23:39:38 2025 GMT Not After : Dec 11 23:39:38 2025 GMT Subject: CN=69321bbb-2d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:27:bf:90:f1:84:1b:34:d4:95:63:6a:43: b5:b4:bd:47:3c:6d:88:be:ba:65:62:40:16:f2:32: 1c:69:c8:73:5e:45:d7:b0:fa:79:37:1d:53:02:9f: 31:62:e4:ad:48:ea:fe:c1:a0:e3:b5:bf:12:a8:e0: 6c:10:b6:19:a6:2c:31:b2:74:fa:86:a4:0a:3b:36: 38:8c:f5:33:2e:62:73:ad:5f:10:13:16:9d:77:96: 50:4a:a4:b4:67:cc:a6:2d:aa:ab:82:3f:fc:86:cf: bc:f0:2c:a2:f1:40:35:70:ff:00:8f:10:a2:93:9f: 62:23:d4:3f:fa:7f:5a:bc:26:08:5e:65:86:3d:7d: d6:38:d8:c5:4f:87:1a:96:11:cb:c7:41:5c:74:fc: 4a:9b:c4:f3:3a:3c:b5:ad:c8:d3:38:70:8a:fd:d2: e9:8f:a4:c5:22:cc:88:15:45:a3:8c:d9:eb:20:d3: ed:74:28:2d:c2:27:ce:ee:7c:f3:92:13:3c:90:e5: 85:97:4e:06:e3:45:98:90:57:10:9f:31:a9:3a:01: b5:18:e6:0c:94:bc:7f:5b:d5:54:49:65:8c:b6:65: d5:09:f8:23:71:08:4c:01:c1:11:30:03:9f:fc:d2: ee:e0:63:68:12:83:fa:16:00:15:6c:c1:f7:0e:d5: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:17:A9:DA:B0:1D:E4:60:ED:FB:1D:19:A0:2C:75:46:DB:11:39 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:4b:5b:6a:08:10:f8:35:24:d0:9e:b1:cb:f8:91:aa:ee:ef: fe:5a:30:20:8c:c1:a5:45:d6:3c:17:1f:b1:26:5b:bd:ee:b8: f8:29:48:ba:28:1e:db:8c:7b:b3:9a:87:fa:aa:c2:d1:ee:66: 95:06:9d:08:e6:00:b7:2a:52:51:b3:eb:84:7f:f5:81:5d:7d: 2e:62:55:7c:9d:39:13:14:c3:33:fa:57:87:03:e4:30:79:e7: 02:5e:45:73:17:00:ed:58:fb:8f:0e:eb:fe:bf:a6:08:87:a5: c7:53:9b:64:a9:31:f9:68:cd:aa:28:9d:b0:54:9e:86:f9:29: 6c:cd:23:1a:e4:a8:5a:f6:14:6f:64:6e:0d:77:40:79:43:a2: f4:72:51:3b:5d:e8:a9:1d:0c:94:8a:fc:08:f5:af:41:2e:96: 2a:02:1f:2e:26:10:24:ce:07:6c:d5:81:c8:98:d8:8d:ef:1f: 27:1d:d3:47:05:43:66:11:68:72:c6:30:d1:87:26:a9:aa:6b: ae:59:ef:75:f7:84:d5:d4:67:84:4a:0b:b7:fa:ac:65:44:68: b4:16:94:11:e4:f9:aa:5a:98:f3:3c:ef:e2:91:ba:95:2c:1a: e5:5e:6d:fd:a9:86:63:ca:a1:3c:e4:f8:d6:90:32:a0:f2:de: 5e:16:87:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUxMjA0MjMzOTM4WhcNMjUxMjExMjMzOTM4WjAYMRYwFAYD VQQDEw02OTMyMWJiYi0yZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAwnv5DxhBs01JVjakO1tL1HPG2IvrplYkAW8jIcachzXkXXsPp5Nx1TAp8x YuStSOr+waDjtb8SqOBsELYZpiwxsnT6hqQKOzY4jPUzLmJzrV8QExadd5ZQSqS0 Z8ymLaqrgj/8hs+88Cyi8UA1cP8AjxCik59iI9Q/+n9avCYIXmWGPX3WONjFT4ca lhHLx0FcdPxKm8TzOjy1rcjTOHCK/dLpj6TFIsyIFUWjjNnrINPtdCgtwifO7nzz khM8kOWFl04G40WYkFcQnzGpOgG1GOYMlLx/W9VUSWWMtmXVCfgjcQhMAcERMAOf /NLu4GNoEoP6FgAVbMH3DtWxvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE32F6na sB3kYO37HRmgLHVG2xE5MB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8S1tqCBD4NSTQnrHL+JGq7u/+WjAgjMGlRdY8Fx+xJlu97rj4KUi6 KB7bjHuzmof6qsLR7maVBp0I5gC3KlJRs+uEf/WBXX0uYlV8nTkTFMMz+leHA+Qw eecCXkVzFwDtWPuPDuv+v6YIh6XHU5tkqTH5aM2qKJ2wVJ6G+SlszSMa5Kha9hRv ZG4Nd0B5Q6L0clE7XeipHQyUivwI9a9BLpYqAh8uJhAkzgds1YHImNiN7x8nHdNH BUNmEWhyxjDRhyapqmuuWe9194TV1GeESgu3+qxlRGi0FpQR5PmqWpjzPO/ikbqV LBrlXm39qYZjyqE85PjWkDKg8t5eFocU -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:12 2025 by rpki-client