This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: ruFrsAZOnZXEZrL/HxXitx0QNcHw4KC6+nT0RdfHTx8= Subject key identifier: 21:6B:76:67:CD:C1:96:FA:CF:0E:D0:81:4F:85:48:AC:89:7A:E9:69 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 044C Signing time: Thu 04 Dec 2025 22:42:08 +0000 Manifest this update: Thu 04 Dec 2025 22:42:08 +0000 Manifest next update: Thu 11 Dec 2025 22:42:08 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: A4KMkwfa+MYGw44wMyrL71dkCVj0ZSZyQPi0sop03Aw=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: WLAogmk7UdDCu2qfIRAjMHBGGGVKtmrGTFfNV0VSRp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Dec 4 22:42:08 2025 GMT Not After : Dec 11 22:42:08 2025 GMT Subject: CN=69320e40-d965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:0c:e8:04:2e:61:82:cf:a7:b7:d6:17:b9: 42:32:2a:8e:e2:61:7c:af:0b:93:a0:4d:89:84:d5: bd:1c:b2:9f:d3:34:9f:aa:b6:ca:1d:eb:01:86:70: e4:1a:9e:95:02:bc:28:aa:c2:73:41:ac:36:ce:72: cc:df:ad:44:1a:cd:38:13:9c:10:52:f3:3b:a2:d2: 83:b3:3b:23:5a:cb:de:9e:d4:94:5c:b9:43:ab:2e: 45:e7:67:1d:e5:b3:b1:81:3d:1f:13:24:fd:0e:d7: 9a:f5:32:0a:81:7a:8d:65:9e:00:8c:95:d7:7a:de: 66:e3:22:cb:e5:5b:36:9b:99:03:c2:78:31:75:5f: 2c:cb:75:54:00:be:67:b6:9c:0e:41:f2:f1:8f:d2: 6c:3d:b6:3b:34:45:b0:79:c7:fd:f9:be:01:74:e9: 64:d6:dd:71:80:0a:3a:20:57:a4:e4:78:3c:59:d7: 58:63:60:0d:f2:e5:dd:30:b2:2d:af:21:b5:6a:a2: a2:6d:91:fb:98:b6:79:30:b2:3f:40:0c:42:5d:a7: cf:fd:ad:d4:c0:13:4e:fc:7d:12:69:d7:20:06:12: 00:f0:26:3b:ab:68:ea:7e:c7:10:da:ac:71:16:52: 80:7f:57:fa:0d:35:9a:f8:71:e3:72:8d:75:93:c7: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6B:76:67:CD:C1:96:FA:CF:0E:D0:81:4F:85:48:AC:89:7A:E9:69 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:50:14:3f:5e:c0:2b:1d:51:5a:fb:78:98:49:3f:4f:d3:f3: 89:ec:41:c2:b4:5c:b1:11:53:c0:dd:54:f4:df:ff:2b:c7:d9: 0e:07:e7:3f:66:c8:11:44:85:e8:8e:3a:7a:7a:21:8b:ad:d5: 53:62:fc:72:fc:d1:15:53:d7:89:3c:95:07:1b:c1:a9:da:bd: 80:ed:b4:6d:a8:4f:d2:1b:ab:c4:b2:7a:b5:e0:9f:51:36:81: 44:52:1b:5d:bf:7b:b5:78:f6:11:2a:83:1b:01:df:91:9e:f4: 53:c3:7a:8f:32:2a:7b:ea:78:3f:d7:2b:27:57:b3:ea:b4:6e: 5c:d1:13:7a:d4:25:3e:71:4c:96:b7:06:36:d3:f8:11:42:df: 37:5e:e1:8f:72:ac:1a:18:d5:2f:d1:60:87:c4:6f:35:51:30: d5:5d:75:88:4c:b5:ed:f2:b0:be:f0:fb:e0:75:1b:30:65:e8: f9:5f:25:89:7d:1a:d7:41:59:e8:1f:14:04:6e:bb:a9:d0:64: f1:3a:88:e2:90:9f:06:8d:20:9d:31:fd:37:d6:12:e8:bb:01: b5:bc:56:09:b6:6a:2f:30:7e:13:e2:da:4d:f6:2c:b9:e0:b4: 2c:58:99:1b:93:ec:e9:f5:a1:ea:30:7f:30:65:56:8c:56:ae: e3:79:11:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUxMjA0MjI0MjA4WhcNMjUxMjExMjI0MjA4WjAYMRYwFAYD VQQDEw02OTMyMGU0MC1kOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYgM6AQuYYLPp7fWF7lCMiqO4mF8rwuToE2JhNW9HLKf0zSfqrbKHesBhnDk Gp6VArwoqsJzQaw2znLM361EGs04E5wQUvM7otKDszsjWsventSUXLlDqy5F52cd 5bOxgT0fEyT9Dtea9TIKgXqNZZ4AjJXXet5m4yLL5Vs2m5kDwngxdV8sy3VUAL5n tpwOQfLxj9JsPbY7NEWwecf9+b4BdOlk1t1xgAo6IFek5Hg8WddYY2AN8uXdMLIt ryG1aqKibZH7mLZ5MLI/QAxCXafP/a3UwBNO/H0SadcgBhIA8CY7q2jqfscQ2qxx FlKAf1f6DTWa+HHjco11k8eAHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFrdmfN wZb6zw7QgU+FSKyJeulpMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbUBQ/XsArHVFa+3iYST9P0/OJ7EHCtFyxEVPA3VT03/8rx9kOB+c/ ZsgRRIXojjp6eiGLrdVTYvxy/NEVU9eJPJUHG8Gp2r2A7bRtqE/SG6vEsnq14J9R NoFEUhtdv3u1ePYRKoMbAd+RnvRTw3qPMip76ng/1ysnV7PqtG5c0RN61CU+cUyW twY20/gRQt83XuGPcqwaGNUv0WCHxG81UTDVXXWITLXt8rC+8PvgdRswZej5XyWJ fRrXQVnoHxQEbrup0GTxOojikJ8GjSCdMf031hLouwG1vFYJtmovMH4T4tpN9iy5 4LQsWJkbk+zp9aHqMH8wZVaMVq7jeRF0 -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:25 2025 by rpki-client