This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: h6BqxC4E0WbaGoFxw7KXusvpHB86IPFp/4RK5/zitBc= Subject key identifier: 7C:F8:00:93:A5:D2:CD:C6:CF:29:69:1E:C7:78:B3:52:DE:85:65:66 Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 01CE Signing time: Fri 05 Dec 2025 01:09:34 +0000 Manifest this update: Fri 05 Dec 2025 01:09:33 +0000 Manifest next update: Fri 12 Dec 2025 01:09:33 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: Iv41JQv4a2C726iXSvJcWTxZ+UMcvGs40ZcZazPBvy8=) 2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: IHKKhIw85fk9s47CrpZDKzzYoR/RN4XUlJphLrYmJyk=) 3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: P7EwycxEH4BjaRzRhYFgj1fovDv1DxA8C+5endacXNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Dec 5 01:09:33 2025 GMT Not After : Dec 12 01:09:33 2025 GMT Subject: CN=693230cd-0a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:5a:d8:6e:3c:29:09:af:b2:ce:fe:c8:3d: ab:e9:59:91:b2:77:ff:38:8c:84:5c:71:57:1b:4b: 28:df:c2:58:ea:30:38:23:2a:0b:c2:20:d7:19:84: 38:05:8b:e2:50:26:5a:87:63:b6:da:4c:62:c1:d5: 2d:a1:18:68:7e:85:3d:ae:db:4d:fe:d6:0a:a2:4d: 35:dc:b0:c3:54:77:cd:a3:54:4c:16:9f:35:1c:c2: 31:de:49:94:a9:7b:90:ce:d6:88:ed:63:74:36:97: 5e:bb:85:45:aa:b3:8d:22:a9:de:37:24:a8:97:a2: 74:66:b6:74:17:b0:76:d0:d6:bb:11:81:84:a6:35: e0:95:e6:f8:fe:55:f5:c0:e4:65:72:63:a7:45:a1: c0:1d:87:81:fe:1d:4d:50:f2:c1:eb:f7:f0:c4:79: 94:9a:73:9f:8c:95:33:fd:b8:14:82:1c:fa:1d:fb: fc:01:43:86:01:f4:ab:11:4b:18:ba:4d:bb:75:99: b8:d4:49:ae:d5:f8:1f:74:41:52:7a:9a:e2:40:a8: f6:a4:c3:81:12:5a:ce:3f:f9:cd:de:39:2c:f4:60: 0b:e9:29:2a:4e:ce:33:6f:09:e9:62:3d:ae:31:6c: 59:74:32:ca:a1:1d:f8:e1:b2:92:e5:b0:e1:95:97: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F8:00:93:A5:D2:CD:C6:CF:29:69:1E:C7:78:B3:52:DE:85:65:66 X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b5:4b:89:19:9b:8c:ad:d8:46:c4:eb:77:f7:44:c3:92:e6: 98:8a:5f:18:7b:e6:e0:a3:81:87:6f:a9:fc:10:7b:2f:cf:99: 18:d1:55:78:00:5e:52:51:03:44:84:f4:36:a9:46:6f:3d:d1: ca:45:27:89:b2:10:ab:d6:c9:d9:ed:1a:f5:ed:b0:26:f5:88: fa:63:41:d2:9d:1d:fe:b9:f2:f7:f1:43:4d:95:48:27:7c:d6: 74:b1:71:b7:41:49:20:f1:3a:d7:67:1f:55:a5:e0:dd:b4:e6: a7:7e:39:62:43:be:81:a5:22:f6:78:88:7b:ee:f8:ea:49:1b: be:7f:f4:0d:22:8e:8a:04:b3:53:5a:75:2a:da:ed:cd:02:48: 86:79:52:fc:99:cd:d8:66:21:a9:45:2d:69:9b:8e:3b:70:f6: fe:a0:60:8d:95:7b:88:ef:05:91:a3:06:59:dc:68:5c:df:3e: 45:1f:15:9e:f2:03:f7:bf:b7:2c:e1:b6:51:82:47:99:c5:75: 96:4e:e7:c1:fe:81:08:e8:f3:a5:82:a9:46:a4:97:14:41:26: 0f:95:49:d0:15:48:a9:e9:02:38:67:a8:ae:f7:36:5e:6c:33: b8:d0:87:a7:a6:51:a6:b3:06:32:30:fc:f6:ee:71:0c:37:9d: b0:a2:11:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUxMjA1MDEwOTMzWhcNMjUxMjEyMDEwOTMzWjAYMRYwFAYD VQQDEw02OTMyMzBjZC0wYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl1a2G48KQmvss7+yD2r6VmRsnf/OIyEXHFXG0so38JY6jA4IyoLwiDXGYQ4 BYviUCZah2O22kxiwdUtoRhofoU9rttN/tYKok013LDDVHfNo1RMFp81HMIx3kmU qXuQztaI7WN0Npdeu4VFqrONIqneNySol6J0ZrZ0F7B20Na7EYGEpjXgleb4/lX1 wORlcmOnRaHAHYeB/h1NUPLB6/fwxHmUmnOfjJUz/bgUghz6Hfv8AUOGAfSrEUsY uk27dZm41Emu1fgfdEFSepriQKj2pMOBElrOP/nN3jks9GAL6SkqTs4zbwnpYj2u MWxZdDLKoR344bKS5bDhlZf2TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz4AJOl 0s3GzylpHsd4s1LehWVmMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKtUuJGZuMrdhGxOt390TDkuaYil8Ye+bgo4GHb6n8EHsvz5kY0VV4 AF5SUQNEhPQ2qUZvPdHKRSeJshCr1snZ7Rr17bAm9Yj6Y0HSnR3+ufL38UNNlUgn fNZ0sXG3QUkg8TrXZx9VpeDdtOanfjliQ76BpSL2eIh77vjqSRu+f/QNIo6KBLNT WnUq2u3NAkiGeVL8mc3YZiGpRS1pm447cPb+oGCNlXuI7wWRowZZ3Ghc3z5FHxWe 8gP3v7cs4bZRgkeZxXWWTufB/oEI6POlgqlGpJcUQSYPlUnQFUip6QI4Z6iu9zZe bDO40IenplGmswYyMPz27nEMN52wohHJ -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:45 2025 by rpki-client