This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft File: rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json) Hash identifier: dfKX5MqpqMNa/UIUcb0ds2Mc95PB1LhT1taOpLbtICE= Subject key identifier: 7E:BB:D0:55:07:C0:12:22:3E:19:A9:A2:6A:DE:D0:FC:42:6A:7B:04 Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF Certificate issuer: /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft Manifest number: 32 Signing time: Fri 05 Dec 2025 05:23:47 +0000 Manifest this update: Fri 05 Dec 2025 05:23:47 +0000 Manifest next update: Fri 12 Dec 2025 05:23:47 +0000 Files and hashes: 1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: axax6Wi82P4ienSx++ZmZr46qAlxXX2tzO2MffgGgNA=) 2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: SWZOIIyqYqeKGjNImIfW9J7E02rh/5URfQeoSZwvbmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Validity Not Before: Dec 5 05:23:47 2025 GMT Not After : Dec 12 05:23:47 2025 GMT Subject: CN=69326c63-a5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:5c:a8:d2:ef:8a:8d:4e:f5:4c:63:9f:92: 7d:46:07:3c:bc:ac:59:97:ec:cb:72:6c:7e:59:99: 77:f3:54:4c:36:66:dd:3d:a3:5e:6a:d2:fe:a1:93: e8:62:9f:3b:87:45:dc:5b:b7:ae:17:a4:74:95:b6: e2:70:4b:aa:ec:8f:46:3e:1d:84:1e:b7:5e:c1:cc: 6a:d9:2f:25:ae:df:ac:14:39:51:a7:58:a5:9f:c3: fb:f7:f4:43:99:18:cb:19:a0:aa:9c:82:70:50:56: 96:7f:58:09:8f:f5:f8:b1:96:14:57:85:71:28:1d: bd:86:c7:d8:a4:fd:83:d5:1e:35:e2:36:5b:8f:24: 9a:2a:b3:69:88:ee:0e:bc:9f:a5:d3:bc:a5:ee:f1: ac:8a:e9:a4:a7:e4:1a:ad:e7:b4:71:a1:c2:61:eb: ed:e9:a1:2e:0f:46:c7:94:cf:f8:60:d1:07:67:fd: 35:a0:3c:b2:8d:92:75:40:fc:2f:41:1b:96:cd:7f: f0:f0:69:81:58:f5:31:b8:c1:b4:b6:91:00:10:38: 6b:0d:25:fd:5c:0b:30:c0:5d:b0:2e:29:2b:f1:05: d4:72:d9:80:3e:ab:8d:95:d0:eb:c9:e2:17:d7:7f: 57:b3:3d:a3:ba:d0:db:79:c4:db:40:a4:dd:d8:99: cc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:D0:55:07:C0:12:22:3E:19:A9:A2:6A:DE:D0:FC:42:6A:7B:04 X509v3 Authority Key Identifier: keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:93:37:da:b9:7b:1d:25:1c:e2:3b:23:2e:b0:d3:e2:fd:6f: 32:10:9a:7d:51:70:8e:a0:da:11:9c:a5:ab:e9:fa:39:5c:45: 67:d3:06:c9:f9:af:0f:95:a9:20:90:ad:3e:4c:2c:b0:dc:88: db:37:d9:25:8e:ca:8e:78:93:de:e3:87:62:27:9b:91:54:46: 29:33:1c:33:ed:fb:a9:d1:32:8b:e8:57:b9:6c:dd:e7:2b:e3: 8f:20:e7:10:f0:e9:83:a3:10:79:e2:51:53:dc:b5:78:bc:be: b3:cd:b4:5e:65:93:dc:c9:37:63:67:08:40:a2:76:5d:a4:12: 1b:bb:ac:60:7a:29:25:2d:66:32:b5:72:59:f1:fb:ca:03:a2: bd:69:2e:b4:55:a3:d8:26:fc:26:8c:31:01:ad:10:47:23:5a: 1e:b6:91:f5:3b:76:d9:b2:1e:2a:6a:15:b1:d8:6c:db:27:64: b4:7f:9a:9f:c4:33:ce:c9:2f:70:45:d7:a0:88:3a:b9:f0:a0: 18:d1:6b:2d:f4:ea:6a:05:d4:ab:a9:35:98:87:b8:e6:df:63: 4f:6d:17:d0:8b:ce:c9:4a:23:ad:2c:16:03:90:80:c9:ad:63: 38:91:8b:0d:13:c7:ee:70:0e:65:d9:37:b4:d2:6f:a5:7c:0f: 72:52:dc:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjkyQTExMC8GA1UEBRMoQUQxNTJBRjZFRjAyOTk2MjBCRjlGNzdGRDYwQ0Q4QjMx NDA0MTdBRjAeFw0yNTEyMDUwNTIzNDdaFw0yNTEyMTIwNTIzNDdaMBgxFjAUBgNV BAMTDTY5MzI2YzYzLWE1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEcFyo0u+KjU71TGOfkn1GBzy8rFmX7MtybH5ZmXfzVEw2Zt09o15q0v6hk+hi nzuHRdxbt64XpHSVtuJwS6rsj0Y+HYQet17BzGrZLyWu36wUOVGnWKWfw/v39EOZ GMsZoKqcgnBQVpZ/WAmP9fixlhRXhXEoHb2Gx9ik/YPVHjXiNluPJJoqs2mI7g68 n6XTvKXu8ayK6aSn5Bqt57RxocJh6+3poS4PRseUz/hg0Qdn/TWgPLKNknVA/C9B G5bNf/DwaYFY9TG4wbS2kQAQOGsNJf1cCzDAXbAuKSvxBdRy2YA+q42V0OvJ4hfX f1ezPaO60Nt5xNtApN3YmcxrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfrvQVQfA EiI+Gamiat7Q/EJqewQwHwYDVR0jBBgwFoAUrRUq9u8CmWIL+fd/1gzYsxQEF68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCOTJBL0ZDMTJFMzEwODRB RTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJTC1mZF8xZ3pZc3hRRUY2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclJVcTl1OENtV0lMLWZkXzFnellzeFFFRjY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC OTJBL0ZDMTJFMzEwODRBRTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJ TC1mZF8xZ3pZc3hRRUY2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2TN9q5ex0lHOI7Iy6w0+L9bzIQmn1RcI6g2hGcpavp+jlcRWfTBsn5 rw+VqSCQrT5MLLDciNs32SWOyo54k97jh2Inm5FURikzHDPt+6nRMovoV7ls3ecr 448g5xDw6YOjEHniUVPctXi8vrPNtF5lk9zJN2NnCECidl2kEhu7rGB6KSUtZjK1 clnx+8oDor1pLrRVo9gm/CaMMQGtEEcjWh62kfU7dtmyHipqFbHYbNsnZLR/mp/E M87JL3BF16CIOrnwoBjRay306moF1KupNZiHuObfY09tF9CLzslKI60sFgOQgMmt YziRiw0Tx+5wDmXZN7TSb6V8D3JS3As= -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:42 2025 by rpki-client