This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: RSKE1a+TXMvIX6HLHCLQOeHwpPs/5lDR86rKK/ZWnEI= Subject key identifier: 86:0B:22:46:BD:2B:B9:5E:06:8A:10:A4:DF:FE:0E:E1:1C:58:15:3C Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D6D Signing time: Thu 04 Dec 2025 17:29:47 +0000 Manifest this update: Thu 04 Dec 2025 17:29:46 +0000 Manifest next update: Thu 11 Dec 2025 17:29:46 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: lEjK3i+uLgvI+4eGFQmXthGHZUWGcY2zFSU2HU/ppB4=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: BSAvl2a+qU3ElNPvDphfnCyZJ7WfZOIWkfyio3AfY2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Dec 4 17:29:46 2025 GMT Not After : Dec 11 17:29:46 2025 GMT Subject: CN=6931c50a-d9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:37:10:0e:f5:38:db:c3:54:25:89:6f:36:e9: b3:de:cf:b1:1b:bd:13:eb:d2:28:af:ff:6e:e0:3d: 81:04:59:c3:f8:b0:70:d0:d0:fe:23:8b:d9:78:2d: a6:80:74:e8:68:7c:28:8d:41:ac:cf:02:35:32:5f: b9:8c:ee:f3:c9:52:dc:c8:c9:e2:d0:d5:3a:8c:2c: 81:66:48:2c:42:5a:6d:5f:23:55:78:80:02:2f:ca: 52:bb:d3:b2:ab:e0:59:39:5f:a3:08:3d:dd:84:a0: 4b:23:59:d9:a6:c3:2a:39:b4:d6:ec:be:d7:ee:22: cd:72:2a:46:47:d6:b4:12:73:a2:5f:ee:38:01:b4: 73:ab:25:aa:e2:48:1e:18:62:f6:12:1c:31:d2:b1: 15:6b:0f:e4:18:31:6f:d7:fd:10:49:4a:33:6b:f5: 74:79:74:96:e6:ee:14:da:22:d7:a9:5e:51:65:bb: 57:0e:cf:52:7c:21:20:27:98:56:d3:8e:52:e4:71: 3f:e8:8b:af:0a:4f:02:ca:82:5b:ec:ec:d5:86:3c: c6:c1:9c:0d:12:df:38:78:2e:82:52:f1:be:e2:6d: 7e:27:e9:6a:96:1d:ed:ec:ae:15:9c:1d:c2:83:fd: 96:c4:40:c9:a9:a7:d4:35:ae:b6:9e:c9:a6:1d:c4: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0B:22:46:BD:2B:B9:5E:06:8A:10:A4:DF:FE:0E:E1:1C:58:15:3C X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:42:b3:cd:86:19:b8:44:19:9e:67:b4:39:37:fc:61:dc:e6: 39:a8:6d:25:c3:42:62:83:f7:2d:b8:28:60:f8:e2:d8:d6:b0: f7:d3:bb:a0:3c:07:4d:f4:a5:6a:76:03:74:8b:9a:38:1a:bc: e0:d4:8e:9c:c0:79:c1:8c:e6:6a:03:81:8f:7b:66:76:3f:9f: 67:85:5a:41:92:5a:47:e3:86:90:1b:c8:60:53:82:4e:cb:aa: 29:6b:e4:72:ab:21:ba:8b:73:2a:79:9e:43:5e:17:4c:36:92: bb:d2:12:fb:ba:ed:c8:ab:3f:f9:76:39:e1:47:3f:2e:0b:a9: 9a:48:59:1c:4f:0d:af:77:d7:99:99:fa:ee:b4:5b:5e:9c:a0: 48:81:a1:b8:66:33:e0:67:48:ff:d0:7c:9f:27:79:5c:20:43: 4e:b5:40:db:9c:f7:26:6e:75:79:aa:96:cd:c9:67:b8:67:e6: 90:f1:90:87:f9:a3:66:71:44:ce:08:74:01:29:90:08:01:14: 7a:d0:3c:bb:e6:f5:ed:6b:30:7f:ef:b0:a1:22:46:57:e9:76: a5:ee:3a:42:23:64:99:2e:ec:91:06:e8:3c:b0:fe:2c:3b:5e: fe:6c:e0:ad:61:f5:58:3f:63:bc:28:74:f8:4e:fa:bd:4a:49: f4:6a:63:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUxMjA0MTcyOTQ2WhcNMjUxMjExMTcyOTQ2WjAYMRYwFAYD VQQDEw02OTMxYzUwYS1kOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TcQDvU428NUJYlvNumz3s+xG70T69Ior/9u4D2BBFnD+LBw0ND+I4vZeC2m gHToaHwojUGszwI1Ml+5jO7zyVLcyMni0NU6jCyBZkgsQlptXyNVeIACL8pSu9Oy q+BZOV+jCD3dhKBLI1nZpsMqObTW7L7X7iLNcipGR9a0EnOiX+44AbRzqyWq4kge GGL2Ehwx0rEVaw/kGDFv1/0QSUoza/V0eXSW5u4U2iLXqV5RZbtXDs9SfCEgJ5hW 045S5HE/6IuvCk8CyoJb7OzVhjzGwZwNEt84eC6CUvG+4m1+J+lqlh3t7K4VnB3C g/2WxEDJqafUNa62nsmmHcQ4IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYLIka9 K7leBooQpN/+DuEcWBU8MB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNQrPNhhm4RBmeZ7Q5N/xh3OY5qG0lw0Jig/ctuChg+OLY1rD307ug PAdN9KVqdgN0i5o4Grzg1I6cwHnBjOZqA4GPe2Z2P59nhVpBklpH44aQG8hgU4JO y6opa+RyqyG6i3MqeZ5DXhdMNpK70hL7uu3Iqz/5djnhRz8uC6maSFkcTw2vd9eZ mfrutFtenKBIgaG4ZjPgZ0j/0HyfJ3lcIENOtUDbnPcmbnV5qpbNyWe4Z+aQ8ZCH +aNmcUTOCHQBKZAIARR60Dy75vXtazB/77ChIkZX6Xal7jpCI2SZLuyRBug8sP4s O17+bOCtYfVYP2O8KHT4Tvq9Skn0amNo -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:13 2025 by rpki-client