This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: Z8utNbS6hwiQ9yJ8cJUpaaUaetsTkiNTobWDTpzViak= Subject key identifier: 6D:7E:FF:CF:9D:E7:FC:58:EA:43:BC:74:4F:31:B2:3C:00:86:4C:8C Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: 0E Signing time: Fri 05 Dec 2025 01:39:29 +0000 Manifest this update: Fri 05 Dec 2025 01:39:28 +0000 Manifest next update: Fri 12 Dec 2025 01:39:28 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: xO5gIypOKH2wiUFWZCjKOVpU+3bZNl9niezGHGHb66o=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: APCWlv9KWNhsYVPgkQls3QyyU6JAY4toh5J0PYVgq2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Dec 5 01:39:28 2025 GMT Not After : Dec 12 01:39:28 2025 GMT Subject: CN=693237d1-b769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:87:50:ef:81:63:6a:4b:31:3b:9d:0a:e9: d5:da:b8:bf:9b:f7:c4:a1:87:ce:c0:93:30:51:42: 3a:5b:ff:2c:82:a4:0b:94:68:ce:fb:bd:0c:9f:93: ac:ea:39:8b:c8:c5:85:59:dd:39:98:ae:7c:45:a9: 0b:00:80:4c:2d:a6:67:55:99:0c:27:00:e7:ab:91: 08:2d:12:1e:e4:ca:57:f0:8a:01:e0:c3:95:40:c1: fc:0b:ee:af:37:a3:14:5e:2a:d3:f3:26:c3:da:bc: 75:58:87:ad:3e:d4:25:70:30:af:d2:50:76:a2:c7: 30:f2:47:ae:67:ed:53:dc:33:57:d1:5a:24:da:a6: f3:c2:b4:6d:53:5b:d1:fe:d3:30:27:7f:36:bb:59: 64:c7:3b:4c:a6:8e:a0:2d:a7:d8:87:d6:82:c2:ce: 85:ad:9c:62:96:24:5b:d0:cf:3c:b7:1a:a7:26:90: 49:61:8f:3b:a4:e7:e2:87:7d:d2:d7:7e:01:38:28: 31:e6:13:f7:d4:c4:3f:82:12:7c:de:ed:a5:10:0b: 27:d5:1c:c4:9e:b8:13:b7:11:a5:73:b5:9f:a0:b0: 8d:1e:22:48:4a:93:d0:88:4c:32:f1:ed:d1:95:65: de:e8:bb:db:6d:67:89:8c:7d:c5:47:62:4e:fa:dc: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7E:FF:CF:9D:E7:FC:58:EA:43:BC:74:4F:31:B2:3C:00:86:4C:8C X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bd:b3:00:ff:d3:45:8e:e6:2d:82:a9:03:cb:31:80:68:96: 70:32:b0:a7:77:ee:0d:c1:1a:18:43:e9:54:c0:84:a9:7a:96: 3b:07:5d:54:65:60:5a:2f:72:47:90:89:ef:7e:17:ca:2a:1a: 5f:f3:e2:79:1c:bf:0a:ce:f2:a4:38:5a:f3:7f:e4:49:cc:2a: 23:66:25:72:7b:1b:4d:d8:78:52:e5:f0:08:56:69:0b:46:de: 24:e8:13:66:f2:ad:8d:09:ca:aa:2d:04:f9:b2:35:0c:a4:c9: f1:18:7b:8c:de:6b:f7:9b:4e:ae:d3:cc:c2:4b:b7:23:92:42: ac:0b:96:42:a8:12:7a:7f:08:a6:75:2a:6a:57:76:38:17:a5: a6:2c:76:4d:e6:4f:99:00:68:4f:ef:88:cf:40:15:cd:34:12: 97:f7:8e:c1:98:74:ea:83:05:a9:b6:13:6e:df:f1:55:b3:ad: 37:52:51:fb:53:60:52:db:83:99:8d:3d:67:bb:63:39:2b:28: 63:89:dc:1a:1e:e7:60:7a:aa:72:7e:25:5e:6c:32:8d:21:fe: 7b:5a:8b:66:10:57:f1:fb:8a:e5:2a:5e:10:dd:05:46:d1:a9: ed:ba:19:c9:61:22:94:ce:06:e2:09:8d:a1:10:8f:d7:7f:90: 35:9b:d8:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3NENDRkJCNTE4 NzgzRDk2MDAeFw0yNTEyMDUwMTM5MjhaFw0yNTEyMTIwMTM5MjhaMBgxFjAUBgNV BAMTDTY5MzIzN2QxLWI3NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs34dQ74FjaksxO50K6dXauL+b98Shh87AkzBRQjpb/yyCpAuUaM77vQyfk6zq OYvIxYVZ3TmYrnxFqQsAgEwtpmdVmQwnAOerkQgtEh7kylfwigHgw5VAwfwL7q83 oxReKtPzJsPavHVYh60+1CVwMK/SUHaixzDyR65n7VPcM1fRWiTapvPCtG1TW9H+ 0zAnfza7WWTHO0ymjqAtp9iH1oLCzoWtnGKWJFvQzzy3GqcmkElhjzuk5+KHfdLX fgE4KDHmE/fUxD+CEnze7aUQCyfVHMSeuBO3EaVztZ+gsI0eIkhKk9CITDLx7dGV Zd7ou9ttZ4mMfcVHYk763Pf5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbX7/z53n /FjqQ7x0TzGyPACGTIwwHwYDVR0jBBgwFoAU0WaBZz8RihAOwgFHTM+7UYeD2WAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTgyL0IzN0I3ODRBQkU5 RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJX QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMFdhQlp6OFJpaEFPd2dGSFRNLTdVWWVEMldBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTgyL0IzN0I3ODRBQkU5RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhB T3dnRkhUTS03VVllRDJXQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIi9swD/00WO5i2CqQPLMYBolnAysKd37g3BGhhD6VTAhKl6ljsHXVRl YFovckeQie9+F8oqGl/z4nkcvwrO8qQ4WvN/5EnMKiNmJXJ7G03YeFLl8AhWaQtG 3iToE2byrY0JyqotBPmyNQykyfEYe4zea/ebTq7TzMJLtyOSQqwLlkKoEnp/CKZ1 KmpXdjgXpaYsdk3mT5kAaE/viM9AFc00Epf3jsGYdOqDBam2E27f8VWzrTdSUftT YFLbg5mNPWe7YzkrKGOJ3Boe52B6qnJ+JV5sMo0h/ntai2YQV/H7iuUqXhDdBUbR qe26GclhIpTOBuIJjaEQj9d/kDWb2Cs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:16 2025 by rpki-client