This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: emVoKnOYEu04OJsCeY8WRcoRzFwtPtcKUQbIpUPn54k= Subject key identifier: F8:70:72:09:83:EE:B9:6C:17:A7:D7:E0:85:52:4B:DA:D4:3B:88:F6 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 4B Signing time: Tue 09 Dec 2025 05:11:30 +0000 Manifest this update: Tue 09 Dec 2025 05:11:30 +0000 Manifest next update: Tue 16 Dec 2025 05:11:30 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: KLIinhD6M+XpywGGNM2nm4cRyDf/FTBSCkYnlHomylU=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 05:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Dec 9 05:11:30 2025 GMT Not After : Dec 16 05:11:30 2025 GMT Subject: CN=6937af82-58f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:24:cb:b6:3c:93:2a:2b:b2:d6:50:a9:05: 82:17:1a:d1:ae:86:4f:ee:96:30:a7:11:c4:85:2b: dd:d9:67:ae:33:6f:cd:7b:dc:82:9a:95:06:61:78: ad:8d:a2:81:7b:b9:d2:bf:73:bc:ab:c4:51:b5:e3: 63:f2:73:06:31:a3:38:cc:1d:00:2a:ca:96:e1:bf: 37:ff:09:54:82:61:ad:56:7e:77:59:5b:b6:8d:f9: 71:ed:17:42:65:69:7d:4b:18:e9:ba:b5:ce:3b:01: 13:1d:69:3f:cc:a4:b9:4e:05:36:13:03:08:c2:5f: d9:bc:a7:ed:be:e1:fe:f8:4d:1b:6f:11:9a:1d:1e: 82:89:82:7e:e1:f7:67:fb:c8:8a:9c:e3:7b:68:cd: d9:86:b7:72:27:eb:89:39:90:78:b4:03:1a:79:ad: 2e:48:82:a3:85:9d:be:4f:2a:be:12:a1:5c:d7:05: 57:7d:65:0b:5d:25:02:e8:4d:5c:9c:ba:a5:19:48: 88:0b:1e:ff:aa:5c:68:f4:bd:cf:32:ec:37:1e:1b: 7d:b8:51:f5:f0:86:76:11:17:e9:73:20:30:c7:50: f4:c6:b2:1e:9c:b5:29:a0:79:e4:4c:b5:e4:15:ec: 28:45:7d:1d:49:50:3f:a3:8f:e6:8a:b5:4f:4c:c2: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:72:09:83:EE:B9:6C:17:A7:D7:E0:85:52:4B:DA:D4:3B:88:F6 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9e:98:e2:4e:85:60:d0:bc:df:b5:2f:a4:cc:3b:30:1f:b8: c3:e3:3b:2b:28:09:ad:a3:e0:3d:aa:3b:85:3b:8c:16:c6:0f: 4b:e3:2e:2f:c4:e8:d9:d4:6f:d3:68:9d:f9:12:da:48:24:81: 3b:bf:c3:19:c4:83:01:3f:57:d6:4c:ad:1a:24:66:05:ba:e2: 73:02:67:e3:ce:46:f3:81:90:69:6c:f3:4f:4d:a2:23:42:bc: 91:07:b9:de:4d:27:88:66:bc:06:61:fa:d5:3b:47:e4:d5:f9: 0a:26:87:fe:93:eb:f9:0f:6c:27:e8:b5:ba:ac:79:8e:0c:fe: be:f8:39:a9:3a:32:e9:d1:dc:96:bb:e6:3c:d3:3b:b2:ea:cb: 5e:9f:7f:51:47:e5:96:4a:c1:96:3e:3b:ce:ef:9d:dc:42:ab: e8:aa:59:83:a8:3f:4d:b3:4e:03:bf:34:f3:bc:a6:59:3b:86: 26:25:08:bd:83:5c:91:84:e4:ed:24:4f:c5:e6:65:54:e9:4c: df:b0:f4:a2:a4:10:7e:86:7a:5e:66:40:7e:b8:0d:12:ce:e2: ad:21:72:64:01:2e:64:fe:d3:79:7c:05:c3:6d:dd:35:ab:3f: 13:96:02:76:27:30:ac:1c:ed:0d:57:1a:f2:82:4e:c8:39:99: d4:9f:e0:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTEyMDkwNTExMzBaFw0yNTEyMTYwNTExMzBaMBgxFjAUBgNV BAMTDTY5MzdhZjgyLTU4ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEniTLtjyTKiuy1lCpBYIXGtGuhk/uljCnEcSFK93ZZ64zb8173IKalQZheK2N ooF7udK/c7yrxFG142PycwYxozjMHQAqypbhvzf/CVSCYa1WfndZW7aN+XHtF0Jl aX1LGOm6tc47ARMdaT/MpLlOBTYTAwjCX9m8p+2+4f74TRtvEZodHoKJgn7h92f7 yIqc43tozdmGt3In64k5kHi0Axp5rS5IgqOFnb5PKr4SoVzXBVd9ZQtdJQLoTVyc uqUZSIgLHv+qXGj0vc8y7DceG324UfXwhnYRF+lzIDDHUPTGsh6ctSmgeeRMteQV 7ChFfR1JUD+jj+aKtU9MwugjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+HByCYPu uWwXp9fghVJL2tQ7iPYwHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSemOJOhWDQvN+1L6TMOzAfuMPjOysoCa2j4D2qO4U7jBbGD0vjLi/E 6NnUb9NonfkS2kgkgTu/wxnEgwE/V9ZMrRokZgW64nMCZ+PORvOBkGls809NoiNC vJEHud5NJ4hmvAZh+tU7R+TV+Qomh/6T6/kPbCfotbqseY4M/r74Oak6MunR3Ja7 5jzTO7Lqy16ff1FH5ZZKwZY+O87vndxCq+iqWYOoP02zTgO/NPO8plk7hiYlCL2D XJGE5O0kT8XmZVTpTN+w9KKkEH6Gel5mQH64DRLO4q0hcmQBLmT+03l8BcNt3TWr PxOWAnYnMKwc7Q1XGvKCTsg5mdSf4I0= -----END CERTIFICATE-----Generated at Wed Dec 10 18:45:58 2025 by rpki-client