This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: 9No1U6o69y5dbLRu11WFb2/JYKq6Enr8P1c7aDFmeoU= Subject key identifier: BC:F2:03:6A:C5:01:20:EA:B1:6F:65:ED:6A:2F:6C:D6:90:AE:A5:7C Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 060C Signing time: Thu 04 Dec 2025 21:38:25 +0000 Manifest this update: Thu 04 Dec 2025 21:38:24 +0000 Manifest next update: Thu 11 Dec 2025 21:38:24 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: +1TJO9iG+w2gVVBEpSkcv4rZcWZzUrpzigbSRcHhEXI=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Dec 4 21:38:24 2025 GMT Not After : Dec 11 21:38:24 2025 GMT Subject: CN=6931ff50-d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:62:55:48:88:91:52:21:9f:b8:f7:b1:ad: 95:7b:4e:d8:39:90:59:f6:be:ab:4f:67:ca:66:f9: 15:6c:73:f3:88:dd:ad:97:2c:32:ce:a4:85:35:1e: 74:ef:37:ff:93:3b:d4:7d:59:1d:58:4b:b2:7a:ad: 65:d0:5e:29:ca:c5:b0:6f:74:06:d7:98:19:e9:1e: 5e:a2:a9:7b:7f:7b:0b:9e:42:98:d5:98:29:1e:87: db:80:25:22:67:43:a1:54:6d:a6:88:49:21:0d:dd: 66:bd:ca:32:3c:cf:93:ec:ee:bd:70:da:d2:24:1a: 50:04:b4:f1:86:25:68:53:65:bc:6c:98:a0:ed:85: db:fc:90:62:a3:57:2f:e1:97:f6:1d:70:1e:bf:09: 89:e2:03:c7:40:43:0d:5c:d4:13:01:98:41:3f:59: c6:b5:28:68:c6:cf:d6:1f:79:01:d6:2c:40:2a:1a: 5b:2f:41:31:89:d2:c5:b3:ba:c3:15:30:7f:61:ec: 8f:ca:4f:e6:d1:70:9e:cb:ae:8a:a4:60:44:0d:1d: 77:37:a0:5d:38:d9:00:b6:cb:94:ec:c8:81:d4:94: 81:0e:d1:21:a6:c3:1f:da:5b:93:10:34:fe:56:b9: a2:64:b6:6e:96:32:18:07:70:f3:0c:36:1d:bd:14: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:03:6A:C5:01:20:EA:B1:6F:65:ED:6A:2F:6C:D6:90:AE:A5:7C X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:41:48:e4:bc:eb:93:c8:35:4b:78:cd:c2:45:03:62:0a:b1: 8d:a4:7f:81:85:36:56:20:ac:27:c8:d6:a6:22:dd:68:80:6d: 4b:0a:c3:95:a6:f3:0b:0f:df:b4:87:43:80:2f:b4:f4:65:fd: 1e:74:5e:44:23:f9:fc:3b:e0:07:f1:2a:aa:6f:42:12:08:5b: 57:e2:df:81:d6:ca:bc:98:59:91:d9:60:8d:6a:6a:b2:1a:cf: 63:9b:b4:7e:50:13:ee:3b:17:76:9f:79:9e:76:ce:b5:dd:1a: c0:46:e6:87:12:26:e5:1b:d8:cf:dd:aa:2c:3b:dc:f5:0c:1d: 36:c3:92:46:c4:1b:0e:3b:ae:5d:26:fe:d1:58:18:2a:a9:af: f9:06:52:8c:b2:73:f3:3c:0b:40:26:70:c7:7b:d2:fa:16:73: e7:2a:81:a2:51:6f:b4:b2:97:ac:aa:a7:c7:5a:47:77:a3:9c: fe:23:4b:93:86:b0:03:9b:e3:60:45:f8:33:be:89:19:53:a8: 22:9b:2c:60:00:66:15:36:38:56:07:1e:14:99:e0:5c:c3:6c: 87:99:41:0e:12:62:a4:5e:a5:f0:72:51:cb:fc:14:60:ee:55: 19:92:84:6a:52:07:4a:6a:04:91:35:3f:80:7d:32:76:f6:b4: 4a:c9:df:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUxMjA0MjEzODI0WhcNMjUxMjExMjEzODI0WjAYMRYwFAYD VQQDEw02OTMxZmY1MC1kMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySBiVUiIkVIhn7j3sa2Ve07YOZBZ9r6rT2fKZvkVbHPziN2tlywyzqSFNR50 7zf/kzvUfVkdWEuyeq1l0F4pysWwb3QG15gZ6R5eoql7f3sLnkKY1ZgpHofbgCUi Z0OhVG2miEkhDd1mvcoyPM+T7O69cNrSJBpQBLTxhiVoU2W8bJig7YXb/JBio1cv 4Zf2HXAevwmJ4gPHQEMNXNQTAZhBP1nGtShoxs/WH3kB1ixAKhpbL0ExidLFs7rD FTB/YeyPyk/m0XCey66KpGBEDR13N6BdONkAtsuU7MiB1JSBDtEhpsMf2luTEDT+ VrmiZLZuljIYB3DzDDYdvRTBrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzyA2rF ASDqsW9l7WovbNaQrqV8MB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvQUjkvOuTyDVLeM3CRQNiCrGNpH+BhTZWIKwnyNamIt1ogG1LCsOV pvMLD9+0h0OAL7T0Zf0edF5EI/n8O+AH8Sqqb0ISCFtX4t+B1sq8mFmR2WCNamqy Gs9jm7R+UBPuOxd2n3meds613RrARuaHEiblG9jP3aosO9z1DB02w5JGxBsOO65d Jv7RWBgqqa/5BlKMsnPzPAtAJnDHe9L6FnPnKoGiUW+0spesqqfHWkd3o5z+I0uT hrADm+NgRfgzvokZU6gimyxgAGYVNjhWBx4UmeBcw2yHmUEOEmKkXqXwclHL/BRg 7lUZkoRqUgdKagSRNT+AfTJ29rRKyd+q -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:36 2025 by rpki-client