This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: QIdNcC1qPpOR2KkA7MgZOxhaY3L+arciAzj+4AnTf+E= Subject key identifier: 6E:ED:C3:A6:D1:70:AC:87:37:0D:94:02:7E:6E:BE:F4:DE:4A:05:2A Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 1A Signing time: Fri 05 Dec 2025 05:38:48 +0000 Manifest this update: Fri 05 Dec 2025 05:38:47 +0000 Manifest next update: Fri 12 Dec 2025 05:38:47 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: E/JZlvGD+Ivs1w6B+5w6pCekR0W98SfmUJ/kC7F/iew=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Dec 5 05:38:47 2025 GMT Not After : Dec 12 05:38:47 2025 GMT Subject: CN=69326fe8-593e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:65:93:bc:32:2e:18:f3:18:87:00:ef:87: 54:e9:ca:e1:c8:e6:06:4e:10:85:a1:5e:4b:44:16: 71:27:be:30:3b:01:32:af:6c:cd:4f:9e:27:be:8c: ca:e4:9f:83:3b:b9:1a:0f:82:13:37:c8:6e:38:81: 34:66:3d:8d:5e:47:da:38:7a:51:23:d0:ff:22:40: e4:eb:e5:8f:45:c2:e9:2d:f5:56:24:61:44:67:a3: d6:10:1f:0b:63:94:74:b1:b5:66:ab:d6:4a:be:f5: c3:eb:24:a9:c8:fa:ae:b0:b4:c4:a9:c6:77:c3:2d: f0:29:94:1a:bd:34:1f:58:05:f7:f5:1e:29:0e:2e: ab:9d:9b:4f:52:0e:2f:1a:ed:e5:ae:77:3b:cc:38: 19:ba:88:64:a6:bc:bf:7e:00:ef:bf:9e:36:70:aa: 1c:64:84:b4:7a:88:fd:d1:91:21:80:54:df:5a:0e: 2c:ba:7e:49:21:2f:ce:e2:5c:3c:7b:58:e5:20:b7: 7e:96:02:51:1e:94:93:27:ca:23:e7:bb:ae:43:f8: 38:17:92:35:6e:ab:b1:64:d6:1f:4a:9b:d2:94:34: 1b:07:26:f5:78:c9:2d:0d:e8:18:b0:55:0e:9d:44: 19:a7:27:1b:06:bd:93:52:63:81:67:de:9a:c7:0a: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:ED:C3:A6:D1:70:AC:87:37:0D:94:02:7E:6E:BE:F4:DE:4A:05:2A X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ec:9c:4d:b5:26:62:84:1a:6b:be:46:e1:52:40:f3:64:05: 5a:71:85:3b:52:d0:41:95:3a:0a:32:9e:54:24:ac:be:3f:05: ef:58:fe:ab:23:e1:b6:c5:fa:f6:fc:5f:3e:93:e1:a0:d6:9a: 9f:92:ef:3f:eb:a8:63:46:42:4a:a1:30:a2:50:48:1c:46:3d: 1f:fa:2c:30:c3:36:6c:56:7f:da:d0:38:db:d9:90:98:f3:ef: ea:08:58:aa:1c:a7:b0:05:37:5b:ae:c6:e1:9b:05:34:a6:12: ad:82:89:c5:38:bd:67:d9:99:57:12:ab:3f:69:e2:d7:12:02: fa:ae:f9:ce:7f:8f:cf:0c:96:b7:f1:d0:72:42:e5:b7:67:a6: 79:5b:a6:f7:aa:5e:fe:a1:6c:7e:eb:5f:f8:78:ab:21:64:cf: 70:88:8b:5a:19:e6:50:57:ca:8a:2b:e0:90:e7:14:f9:9c:ff: 13:4c:60:2b:3d:07:03:02:d9:1c:c8:fb:09:98:16:1c:ba:a6: 19:58:28:a3:61:c8:e3:e8:f1:ba:c2:16:07:47:13:48:2f:dd: cf:71:6b:6f:4b:3e:50:0b:8c:6c:6b:dd:f9:04:e0:88:37:fc: 20:8f:62:42:39:ca:22:26:f7:e8:67:95:08:b9:2d:95:18:c4: fd:d8:53:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNTEyMDUwNTM4NDdaFw0yNTEyMTIwNTM4NDdaMBgxFjAUBgNV BAMTDTY5MzI2ZmU4LTU5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBnWWTvDIuGPMYhwDvh1TpyuHI5gZOEIWhXktEFnEnvjA7ATKvbM1Pnie+jMrk n4M7uRoPghM3yG44gTRmPY1eR9o4elEj0P8iQOTr5Y9Fwukt9VYkYURno9YQHwtj lHSxtWar1kq+9cPrJKnI+q6wtMSpxnfDLfAplBq9NB9YBff1HikOLqudm09SDi8a 7eWudzvMOBm6iGSmvL9+AO+/njZwqhxkhLR6iP3RkSGAVN9aDiy6fkkhL87iXDx7 WOUgt36WAlEelJMnyiPnu65D+DgXkjVuq7Fk1h9Km9KUNBsHJvV4yS0N6BiwVQ6d RBmnJxsGvZNSY4Fn3prHCg+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbu3DptFw rIc3DZQCfm6+9N5KBSowHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLsnE21JmKEGmu+RuFSQPNkBVpxhTtS0EGVOgoynlQkrL4/Be9Y/qsj 4bbF+vb8Xz6T4aDWmp+S7z/rqGNGQkqhMKJQSBxGPR/6LDDDNmxWf9rQONvZkJjz 7+oIWKocp7AFN1uuxuGbBTSmEq2CicU4vWfZmVcSqz9p4tcSAvqu+c5/j88Mlrfx 0HJC5bdnpnlbpveqXv6hbH7rX/h4qyFkz3CIi1oZ5lBXyoor4JDnFPmc/xNMYCs9 BwMC2RzI+wmYFhy6phlYKKNhyOPo8brCFgdHE0gv3c9xa29LPlALjGxr3fkE4Ig3 /CCPYkI5yiIm9+hnlQi5LZUYxP3YUyo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:44 2025 by rpki-client