This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: 5VeleJLOfYvn6X1knOhuyBntHLXOhi9a+RlDM/AfNJI= Subject key identifier: 59:B7:73:ED:71:A2:48:04:9F:2F:30:20:A3:10:43:13:BE:3F:1C:95 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0A29 Signing time: Sat 06 Dec 2025 19:35:21 +0000 Manifest this update: Sat 06 Dec 2025 19:35:20 +0000 Manifest next update: Sat 13 Dec 2025 19:35:20 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: zII9RRWEuG1VhYfjedQoxDA1Sa792iVzkdwWTIRcJV8=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: qD7Tfzoc4wjH2bt1dbbg4OGAjJJrb45scH4IFujWWW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Dec 6 19:35:20 2025 GMT Not After : Dec 13 19:35:20 2025 GMT Subject: CN=69348579-a13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:1b:4b:f7:e1:50:6b:38:4c:23:d8:65:de: c8:b1:4e:dd:57:6d:61:25:25:ee:90:10:ff:9d:2b: 4b:ce:89:7e:7c:ba:df:33:55:4b:c0:9a:68:c5:49: a4:b2:4f:e4:b7:40:bc:03:d3:9d:79:5b:df:96:3b: c4:e8:80:17:27:d7:62:cf:65:95:88:79:5e:d0:60: 0e:21:02:da:75:9e:8c:ba:3c:70:df:d5:10:fd:0b: 45:88:68:e2:5d:e7:61:5c:df:25:80:e4:03:f3:da: 07:68:50:6b:c8:f6:1a:ac:ec:d8:8b:71:64:c1:02: 25:78:20:87:89:ad:8c:92:89:77:f8:44:bc:1a:d0: 15:09:d4:f3:07:9e:30:fd:6e:11:e9:a3:82:91:1d: 2b:3d:b3:f0:16:cf:b6:a4:a4:87:87:2f:1c:a6:03: e9:bc:e9:00:48:ad:72:5c:b1:2f:ee:30:c5:36:a8: 2d:45:34:63:d2:79:ef:54:79:d6:da:57:33:ff:a8: 0b:5f:b9:4b:dc:3c:c8:4d:9e:b9:44:f5:d2:c3:ed: 52:d3:96:81:73:77:40:71:1e:93:95:21:29:6e:4e: 51:c8:15:a8:d1:60:17:25:5b:e2:fc:17:db:25:a5: e1:ac:73:4f:a4:a3:46:ff:f5:e8:ff:d0:45:42:d6: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B7:73:ED:71:A2:48:04:9F:2F:30:20:A3:10:43:13:BE:3F:1C:95 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:60:99:ca:25:77:ec:78:9c:92:2d:ef:a1:2c:dc:10:97:52: a8:bd:a1:c2:3c:f8:55:91:b6:c8:2c:5c:76:1f:b2:b0:bd:bb: d8:74:b5:9a:36:57:8c:34:3e:fb:ec:6c:42:35:62:b4:95:fe: 60:34:e8:e5:a2:a8:64:e4:8f:85:f7:f1:49:4f:86:72:3e:50: 6a:2c:02:ca:3a:00:b3:8b:a1:e0:43:e1:ec:4a:86:53:1c:e3: 4d:bd:8b:17:f6:54:c7:4f:ef:7c:bd:87:fd:f4:29:c1:96:85: 92:ab:3c:d0:df:1d:41:08:b1:c9:97:d5:ac:bf:78:20:5d:09: c7:08:a7:a9:0e:4e:2a:73:88:35:d0:7f:6b:aa:60:96:ba:ff: cd:53:b1:ff:aa:73:c2:44:f5:09:46:57:d9:3a:f0:4d:55:46: 69:fd:e3:e4:96:af:52:d8:fe:46:b5:76:b8:bc:4b:f1:f1:b4: 19:92:21:c2:35:1f:9a:b7:f6:03:60:f8:0b:c9:55:8b:b5:1b: 2c:65:85:29:3b:29:b3:e8:c0:da:4d:1f:58:43:ea:c6:27:46: 6f:48:5e:0d:51:33:c7:30:a9:32:85:a3:91:26:6c:13:e3:68: fd:57:29:e0:f8:a6:68:b9:97:72:e6:fe:7d:1d:1e:f8:a8:b6: 4b:46:d7:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUxMjA2MTkzNTIwWhcNMjUxMjEzMTkzNTIwWjAYMRYwFAYD VQQDEw02OTM0ODU3OS1hMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhkbS/fhUGs4TCPYZd7IsU7dV21hJSXukBD/nStLzol+fLrfM1VLwJpoxUmk sk/kt0C8A9OdeVvfljvE6IAXJ9diz2WViHle0GAOIQLadZ6Mujxw39UQ/QtFiGji XedhXN8lgOQD89oHaFBryPYarOzYi3FkwQIleCCHia2Mkol3+ES8GtAVCdTzB54w /W4R6aOCkR0rPbPwFs+2pKSHhy8cpgPpvOkASK1yXLEv7jDFNqgtRTRj0nnvVHnW 2lcz/6gLX7lL3DzITZ65RPXSw+1S05aBc3dAcR6TlSEpbk5RyBWo0WAXJVvi/Bfb JaXhrHNPpKNG//Xo/9BFQtbAFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm3c+1x okgEny8wIKMQQxO+PxyVMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCYJnKJXfseJySLe+hLNwQl1KovaHCPPhVkbbILFx2H7KwvbvYdLWa NleMND777GxCNWK0lf5gNOjloqhk5I+F9/FJT4ZyPlBqLALKOgCzi6HgQ+HsSoZT HONNvYsX9lTHT+98vYf99CnBloWSqzzQ3x1BCLHJl9Wsv3ggXQnHCKepDk4qc4g1 0H9rqmCWuv/NU7H/qnPCRPUJRlfZOvBNVUZp/ePklq9S2P5GtXa4vEvx8bQZkiHC NR+at/YDYPgLyVWLtRssZYUpOymz6MDaTR9YQ+rGJ0ZvSF4NUTPHMKkyhaORJmwT 42j9Vyng+KZouZdy5v59HR74qLZLRtdY -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:11 2025 by rpki-client