This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: vBRmW+LvmESFOYtTJxI8DPdW153QKdruCga3emqH9t0= Subject key identifier: 07:6F:41:A7:A6:5A:C3:96:9C:E5:A8:B9:02:33:92:DE:DC:3E:7F:AD Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 88 Signing time: Fri 05 Dec 2025 04:34:42 +0000 Manifest this update: Fri 05 Dec 2025 04:34:42 +0000 Manifest next update: Fri 12 Dec 2025 04:34:41 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: Tci0izimxUgnRb70ZAl88rjIgdRgiOy09nBCGAcE76M=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Dec 5 04:34:42 2025 GMT Not After : Dec 12 04:34:41 2025 GMT Subject: CN=693260e2-96a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:f8:05:5c:40:5f:99:2f:e2:ea:16:6d:a3: 60:97:0a:c1:45:64:b9:97:48:3d:c6:4c:f5:99:af: 3d:fb:6c:c2:11:45:1b:0d:c8:6e:63:68:fe:10:4a: 86:e3:95:39:6d:57:e4:7e:5a:c8:b1:70:cf:13:b3: bc:e3:13:94:4f:2d:cf:3b:57:ef:85:5e:48:01:40: 99:87:fd:6e:d6:5e:2d:3e:f3:70:16:85:c0:af:3f: e1:18:6d:24:85:1c:fc:06:4c:56:b2:38:26:b9:0a: 68:59:aa:06:f3:3f:5e:d1:fd:8f:97:25:86:6f:33: 0d:6d:ad:f9:fe:34:58:35:58:4f:45:3c:ca:9c:d7: 5b:0b:58:e0:e0:2b:e3:9f:cf:e6:8a:f1:49:cf:4a: d2:a3:26:07:b4:ed:7f:b8:35:2e:6d:c2:46:4e:18: 87:e5:6a:61:30:cc:54:32:fa:5c:6b:2a:fd:39:36: 63:a9:61:85:ca:b3:8e:4e:33:a4:e9:3d:5c:05:ff: db:1e:80:87:bd:96:6b:3f:5d:02:f8:a0:37:c9:7f: 72:ad:ec:18:97:c5:fb:3a:be:1a:8f:ae:80:68:d2: 27:91:5b:3b:24:89:a0:cb:55:10:5f:ff:e7:91:c6: fa:2d:76:ec:a3:98:0a:e2:aa:28:17:ed:3e:7e:e4: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6F:41:A7:A6:5A:C3:96:9C:E5:A8:B9:02:33:92:DE:DC:3E:7F:AD X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2e:6e:81:f3:22:c9:fb:cc:96:99:85:de:e4:2f:fe:1a:07: d0:53:5d:6b:89:19:8e:7a:c8:27:4c:aa:31:11:a5:42:e6:f6: ec:01:98:8e:c3:66:b0:d7:eb:ed:ab:de:b4:9e:f5:9c:db:d9: 74:7c:1f:51:58:52:0a:6f:cc:dc:bc:f6:7c:d1:e3:4c:ee:d1: 55:65:e0:e1:ce:be:53:76:69:56:1d:ec:19:3b:9a:e2:4f:71: 83:7c:bc:11:a2:39:ce:ab:67:b9:67:eb:dd:3a:b7:13:f3:04: 55:3f:d5:1c:2c:6b:17:17:83:12:9b:98:5e:fe:0d:20:5b:18: 39:0a:b4:f9:83:4d:75:c8:33:51:75:0d:30:f7:1b:4b:b8:b6: 00:b6:87:b2:91:e3:80:17:5d:ee:31:67:ea:df:5a:d2:1e:be: ec:4a:e7:10:3a:a4:e0:01:93:64:d9:be:5b:33:03:f5:32:52: cc:8e:97:58:25:f7:06:f4:1c:70:2b:44:49:0e:18:78:11:7f: b9:d0:af:f8:ab:8a:ad:d8:ea:92:99:15:2b:37:fb:4e:fe:c4: 35:91:ce:2d:6a:73:e1:17:31:08:5b:1c:f9:93:0e:02:19:2a: d2:df:3b:37:e7:91:cf:1b:f7:7a:83:38:c2:79:d0:23:f4:36: a9:29:7c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1RjkxMTAvBgNVBAUTKEY1QkJBRTg1QzZGRkIzNjBDRUQ0MDgwRDExMzZBMkJG RDNBOTdGRDEwHhcNMjUxMjA1MDQzNDQyWhcNMjUxMjEyMDQzNDQxWjAYMRYwFAYD VQQDEw02OTMyNjBlMi05NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA34BVxAX5kv4uoWbaNglwrBRWS5l0g9xkz1ma89+2zCEUUbDchuY2j+EEqG 45U5bVfkflrIsXDPE7O84xOUTy3PO1fvhV5IAUCZh/1u1l4tPvNwFoXArz/hGG0k hRz8BkxWsjgmuQpoWaoG8z9e0f2PlyWGbzMNba35/jRYNVhPRTzKnNdbC1jg4Cvj n8/mivFJz0rSoyYHtO1/uDUubcJGThiH5WphMMxUMvpcayr9OTZjqWGFyrOOTjOk 6T1cBf/bHoCHvZZrP10C+KA3yX9yrewYl8X7Or4aj66AaNInkVs7JImgy1UQX//n kcb6LXbso5gK4qooF+0+fuTc1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdvQaem WsOWnOWouQIzkt7cPn+tMB8GA1UdIwQYMBaAFPW7roXG/7NgztQIDRE2or/TqX/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVGOS82OTIwQzc0QTA0 ODIxMUYwOEY1QTUyODBDNEY5QUUwMi85YnV1aGNiX3MyRE8xQWdORVRhaXY5T3Bm OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVGOS82OTIwQzc0QTA0ODIxMUYwOEY1QTUyODBDNEY5QUUwMi85YnV1aGNiX3My RE8xQWdORVRhaXY5T3BmOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwLm6B8yLJ+8yWmYXe5C/+GgfQU11riRmOesgnTKoxEaVC5vbsAZiO w2aw1+vtq960nvWc29l0fB9RWFIKb8zcvPZ80eNM7tFVZeDhzr5TdmlWHewZO5ri T3GDfLwRojnOq2e5Z+vdOrcT8wRVP9UcLGsXF4MSm5he/g0gWxg5CrT5g011yDNR dQ0w9xtLuLYAtoeykeOAF13uMWfq31rSHr7sSucQOqTgAZNk2b5bMwP1MlLMjpdY JfcG9BxwK0RJDhh4EX+50K/4q4qt2OqSmRUrN/tO/sQ1kc4tanPhFzEIWxz5kw4C GSrS3zs355HPG/d6gzjCedAj9DapKXzN -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:26 2025 by rpki-client