This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: CgE/PglkhpwQll6qCkNSynmVHHW9YiSbEsDsgybWPcg= Subject key identifier: 54:57:DA:C8:41:9D:D4:F3:57:E1:4A:B9:57:D9:CD:45:2A:25:CB:BE Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: F4 Signing time: Fri 05 Dec 2025 03:23:09 +0000 Manifest this update: Fri 05 Dec 2025 03:23:08 +0000 Manifest next update: Fri 12 Dec 2025 03:23:08 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: rFDsaMtp4ViPuMzQxe6luP8+GrqPhIyzxwiXd+bYZKg=) 2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: 2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=) 3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: 8BNbqhDSj5zwZRpetUourvgFN3LcAIxoiLxOQgq3beM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Dec 5 03:23:08 2025 GMT Not After : Dec 12 03:23:08 2025 GMT Subject: CN=6932501d-c54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:bc:11:b2:dc:9b:7f:7c:64:56:26:98:0d: 29:68:82:fe:0c:1b:b6:41:31:1b:1c:93:d7:19:b9: c0:2a:bf:c3:14:f4:65:02:c5:95:34:8a:15:1f:bc: 4f:fd:da:ae:c0:d3:ea:81:8c:6d:d3:a4:02:40:e7: ce:2b:d7:a9:54:57:ee:d3:b5:9b:1e:b9:af:f0:a4: 5b:0b:fa:eb:c9:17:18:d4:2d:96:02:c4:1e:83:0a: a7:42:55:cc:6c:48:0c:61:0a:77:70:cb:ed:69:da: 5b:f8:a4:23:c0:ab:5c:0e:c3:62:d9:e9:d2:3f:aa: e0:69:43:2d:3d:e6:4f:13:fa:46:5e:79:12:e5:93: c7:cd:f7:51:7c:72:5f:1c:62:56:56:0e:f6:37:54: 5a:73:21:28:f6:2c:aa:bc:0d:ce:b6:38:41:d4:56: 63:84:86:ca:0c:6e:44:18:b4:6d:b7:6d:01:03:ff: 77:39:92:3f:25:12:57:41:f7:27:fe:89:85:45:7f: 23:af:41:7e:05:b9:c4:db:16:cf:ba:93:a1:ec:26: 08:d5:60:8a:02:f5:b9:f4:87:fb:5e:61:95:39:1c: da:ce:2f:8b:74:71:4c:fa:97:24:67:dc:54:13:6d: ea:02:28:78:53:9d:36:57:c1:78:48:b0:1f:5b:69: 71:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:57:DA:C8:41:9D:D4:F3:57:E1:4A:B9:57:D9:CD:45:2A:25:CB:BE X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1f:02:44:d9:15:6d:92:b0:7d:ed:ca:39:bc:f0:c0:b4:59: eb:0d:50:e9:f3:79:31:a2:2e:7a:15:b7:47:d6:42:84:8a:c8: 47:bf:4a:73:1c:d8:19:b7:89:41:2c:5e:97:06:7a:5d:d0:45: ef:4d:6f:97:a4:80:59:db:78:6e:79:3e:e7:a1:d6:e2:c2:88: 80:e1:a6:fa:90:6d:1d:c5:b4:37:f0:20:d2:78:ca:fe:3c:28: cd:f8:71:00:4c:20:4b:61:c0:1e:b8:ca:c8:72:ac:71:fc:11: 34:df:03:c1:01:e1:80:0f:f1:e9:dd:0e:63:e0:f5:c3:57:ed: 6a:ea:d9:ee:d1:96:3c:b2:6d:21:20:0b:b0:5e:12:83:ae:d2: a8:59:a6:da:b2:19:89:f2:8c:22:d0:f9:72:29:44:53:9a:65: f3:2f:06:d3:c9:60:96:dc:c6:f2:56:56:ee:5e:2e:05:7d:5c: b8:10:6a:69:60:36:df:ba:0e:76:cd:35:bf:b3:51:a8:75:da: 98:af:18:7e:d9:1f:4f:ef:a5:80:e1:4a:d0:e1:3d:93:fb:89: e6:bb:76:cb:36:7f:6f:3b:6e:3d:f1:01:98:05:04:e8:67:53: 7f:e1:f9:5f:86:2b:b4:04:bd:c3:b6:b4:a8:96:c1:e0:c2:b4: e7:cf:cc:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUxMjA1MDMyMzA4WhcNMjUxMjEyMDMyMzA4WjAYMRYwFAYD VQQDEw02OTMyNTAxZC1jNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPW8EbLcm398ZFYmmA0paIL+DBu2QTEbHJPXGbnAKr/DFPRlAsWVNIoVH7xP /dquwNPqgYxt06QCQOfOK9epVFfu07WbHrmv8KRbC/rryRcY1C2WAsQegwqnQlXM bEgMYQp3cMvtadpb+KQjwKtcDsNi2enSP6rgaUMtPeZPE/pGXnkS5ZPHzfdRfHJf HGJWVg72N1RacyEo9iyqvA3OtjhB1FZjhIbKDG5EGLRtt20BA/93OZI/JRJXQfcn /omFRX8jr0F+BbnE2xbPupOh7CYI1WCKAvW59If7XmGVORzazi+LdHFM+pckZ9xU E23qAih4U502V8F4SLAfW2lxvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRX2shB ndTzV+FKuVfZzUUqJcu+MB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApHwJE2RVtkrB97co5vPDAtFnrDVDp83kxoi56FbdH1kKEishHv0pz HNgZt4lBLF6XBnpd0EXvTW+XpIBZ23hueT7nodbiwoiA4ab6kG0dxbQ38CDSeMr+ PCjN+HEATCBLYcAeuMrIcqxx/BE03wPBAeGAD/Hp3Q5j4PXDV+1q6tnu0ZY8sm0h IAuwXhKDrtKoWabashmJ8owi0PlyKURTmmXzLwbTyWCW3MbyVlbuXi4FfVy4EGpp YDbfug52zTW/s1GoddqYrxh+2R9P76WA4UrQ4T2T+4nmu3bLNn9vO2498QGYBQTo Z1N/4flfhiu0BL3DtrSolsHgwrTnz8xG -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:43 2025 by rpki-client