This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: 4BNPyz/A/HK4wrdknOf5rlnFYvX8br/Jq8x5bfsFVNE= Subject key identifier: A5:13:6E:E3:4E:7E:C0:4E:0B:6D:AC:AD:20:C3:C6:12:A1:C4:86:40 Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 08C9 Signing time: Sat 06 Dec 2025 19:35:52 +0000 Manifest this update: Sat 06 Dec 2025 19:35:52 +0000 Manifest next update: Sat 13 Dec 2025 19:35:52 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: QQ7u0w9V1oWNtJjrHWrZEdNJZHPr/MWzZZ7n13MWBxA=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Dec 6 19:35:52 2025 GMT Not After : Dec 13 19:35:52 2025 GMT Subject: CN=69348598-64f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:a3:30:85:96:e1:98:cb:b8:6c:34:a3:aa: 25:4f:e2:ad:a1:d1:23:1e:e2:c3:1c:9d:97:37:cb: 70:4d:9f:9f:9c:b6:07:7d:91:52:7f:8a:6f:e0:2c: c9:8b:bc:31:9c:17:35:d6:41:dd:a0:b6:7a:80:ce: e2:1d:a2:87:23:db:fa:4b:b9:2c:65:85:0d:97:f2: e0:a2:c4:f2:ee:df:c2:e8:74:e3:60:5a:dc:4e:af: bd:62:b8:a5:f2:3f:18:93:9d:21:4d:13:c9:3a:13: ae:6a:8c:4c:d3:ac:e4:f7:11:5e:9b:7c:c2:29:d1: 87:24:da:00:3b:d6:83:05:c9:33:64:36:79:bf:c6: ab:5c:e1:0e:8f:40:e7:43:1a:6d:7d:d7:dd:2d:4e: bd:79:17:8c:df:12:ee:0a:ff:db:e0:40:0a:97:98: 33:25:d0:a1:45:e2:d3:1e:8c:bd:2d:68:d2:e8:94: ed:0e:cd:61:68:17:7d:ff:f2:ec:92:ab:7c:50:6e: 1e:dc:fb:d9:6d:57:79:c9:bf:57:6e:f3:03:3b:49: bf:ca:8f:94:65:ff:5f:7e:d9:97:b0:42:94:a4:1a: 00:8a:d0:fd:0e:aa:61:19:bc:ee:0a:28:96:4a:d1: 76:f9:1e:9b:44:5d:a4:30:42:f4:b6:c6:c3:8f:ae: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:13:6E:E3:4E:7E:C0:4E:0B:6D:AC:AD:20:C3:C6:12:A1:C4:86:40 X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d2:53:04:6f:fb:4d:53:d0:5e:bc:da:09:44:6d:ae:ea:62: bd:f1:5b:ab:e5:b6:7c:65:ef:e6:bc:15:dd:1e:3d:ce:22:90: bd:2f:16:9f:fe:2d:bf:26:ff:7b:2a:d4:ca:92:8e:7f:34:bf: 7e:83:22:4a:44:6b:f5:87:30:9c:45:a2:46:32:eb:de:c9:d2: 2d:30:01:1b:84:e1:d7:2b:b9:f7:62:d7:0d:c7:55:e1:9e:d8: 76:6a:15:b2:2e:be:8b:25:03:23:21:16:f8:c8:9e:2f:bb:47: a0:6a:d4:87:be:81:93:73:2d:30:71:ba:f9:40:46:a5:90:38: 62:ec:34:a2:51:d9:27:32:1f:82:5b:2f:f9:d0:af:82:31:ee: a4:72:a5:b8:36:9b:fd:0a:44:e5:e2:c3:8c:00:42:6d:80:d2: aa:24:ba:d0:55:88:63:2c:5a:4e:1e:93:db:ae:52:1e:af:99: dc:b4:d8:23:ec:b8:6f:3c:1b:e0:3b:c4:a9:0b:3f:c2:14:8a: 60:ba:86:eb:e0:33:e4:f2:ef:fa:14:5d:b3:cc:ee:a3:a0:9f: 4d:15:33:64:ac:2c:f2:f0:95:29:80:33:31:b1:b4:97:4d:fe: 63:c6:d6:1f:40:30:79:7c:3d:db:7e:2f:82:85:c1:a8:02:ef: f4:dc:02:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUxMjA2MTkzNTUyWhcNMjUxMjEzMTkzNTUyWjAYMRYwFAYD VQQDEw02OTM0ODU5OC02NGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv66jMIWW4ZjLuGw0o6olT+KtodEjHuLDHJ2XN8twTZ+fnLYHfZFSf4pv4CzJ i7wxnBc11kHdoLZ6gM7iHaKHI9v6S7ksZYUNl/LgosTy7t/C6HTjYFrcTq+9Yril 8j8Yk50hTRPJOhOuaoxM06zk9xFem3zCKdGHJNoAO9aDBckzZDZ5v8arXOEOj0Dn QxptfdfdLU69eReM3xLuCv/b4EAKl5gzJdChReLTHoy9LWjS6JTtDs1haBd9//Ls kqt8UG4e3PvZbVd5yb9XbvMDO0m/yo+UZf9fftmXsEKUpBoAitD9DqphGbzuCiiW StF2+R6bRF2kMEL0tsbDj65q+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUTbuNO fsBOC22srSDDxhKhxIZAMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY0lMEb/tNU9BevNoJRG2u6mK98Vur5bZ8Ze/mvBXdHj3OIpC9Lxaf /i2/Jv97KtTKko5/NL9+gyJKRGv1hzCcRaJGMuveydItMAEbhOHXK7n3YtcNx1Xh nth2ahWyLr6LJQMjIRb4yJ4vu0egatSHvoGTcy0wcbr5QEalkDhi7DSiUdknMh+C Wy/50K+CMe6kcqW4Npv9CkTl4sOMAEJtgNKqJLrQVYhjLFpOHpPbrlIer5nctNgj 7LhvPBvgO8SpCz/CFIpguobr4DPk8u/6FF2zzO6joJ9NFTNkrCzy8JUpgDMxsbSX Tf5jxtYfQDB5fD3bfi+ChcGoAu/03AJC -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:25 2025 by rpki-client