This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: kTSNUPs7XszHz1CEnSOxXPSSJHVzwUG/OwE7wi+21JQ= Subject key identifier: A5:EA:E0:2F:CF:14:0E:43:96:48:AA:3C:29:49:68:C2:CC:A6:DE:1E Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: 01D3 Signing time: Fri 05 Dec 2025 01:04:12 +0000 Manifest this update: Fri 05 Dec 2025 01:04:11 +0000 Manifest next update: Fri 12 Dec 2025 01:04:11 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: i9OqWTrBF9YJbXYXrFlec3CE7i0+ntzPKcxiY+De0fo=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: SwrvoVYgU6/JlbNtHbJmqe4zyeb9jSsFgyQPBZNxoww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: Dec 5 01:04:11 2025 GMT Not After : Dec 12 01:04:11 2025 GMT Subject: CN=69322f8c-9f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d9:f9:b1:41:9b:cc:8b:6e:35:d2:ae:59:fb: 98:a9:86:f4:14:f2:98:1c:c4:a8:ac:71:67:0d:26: 54:9a:18:96:9b:4d:23:45:51:31:09:59:f4:12:a4: e1:42:fa:15:36:ff:c4:68:08:05:6a:57:19:a7:b2: 1c:b2:78:9d:7d:1d:c9:c3:bc:6a:30:aa:78:d1:9e: dc:3d:dc:a1:0c:d9:a7:a1:61:87:3f:52:6b:e6:73: b6:07:f4:ce:93:8f:ba:a7:49:ac:77:c6:d2:92:6d: 86:a6:f7:cd:60:f8:da:0f:fa:13:8d:78:27:ea:44: d6:e7:eb:ba:d7:62:eb:de:2b:ed:ed:dc:4a:af:b7: e0:22:27:ff:7d:ad:53:1f:53:18:a2:a5:43:96:9b: c2:6d:c9:62:9e:b7:51:6c:9e:0a:31:27:a5:88:9d: dc:29:be:ac:02:26:6b:06:10:27:46:fa:5c:e9:60: aa:e2:4c:28:b5:cb:63:ad:b0:c8:5d:d5:32:bb:3f: 61:83:fb:b0:06:18:ad:0c:6a:29:17:34:dc:7e:4f: 77:13:47:9a:92:84:7d:0f:45:89:51:38:c6:4f:74: de:f3:65:13:cd:92:3c:4d:3d:2f:dd:b5:66:1b:7a: 13:c1:91:e9:84:f2:0e:c9:e8:91:57:47:e9:e0:6d: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:E0:2F:CF:14:0E:43:96:48:AA:3C:29:49:68:C2:CC:A6:DE:1E X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:db:42:f7:ce:5c:af:11:43:30:81:53:ac:c5:da:c8:36:6b: ed:b3:b4:05:64:28:3a:39:43:b8:34:96:93:f7:ac:fb:64:a2: 64:20:61:6d:76:86:99:8d:c0:ab:4c:5b:77:ef:24:84:fb:6c: 24:65:ec:80:3f:14:4e:5f:3c:40:83:10:5f:9d:45:7a:7a:b9: 53:b0:ea:eb:67:bb:e1:19:1d:94:78:a0:dd:c4:78:5f:50:56: 03:bb:e0:07:bc:20:17:8d:81:a9:5b:ac:92:12:11:4d:26:88: aa:64:85:08:e8:5f:7b:3e:ad:16:ba:04:b5:d3:37:a7:a6:5f: 8b:b9:0c:da:fc:ec:25:43:b1:45:3c:7f:63:14:4f:b7:11:01: 07:38:c2:97:8c:37:b1:a8:65:74:69:b4:16:59:05:54:c0:b4: 24:a8:37:c7:a1:36:ce:10:76:eb:c8:17:d9:55:f1:66:7a:7e: 30:74:f7:a0:7e:77:e5:f5:84:ff:fb:27:ff:fa:71:73:12:e3: 5f:72:90:27:d9:2e:df:da:9e:b3:f4:c5:57:d3:f4:3d:49:dc: 06:ac:51:f6:04:d3:a0:43:3a:fe:b9:7b:02:c8:97:35:00:d2: 36:90:c9:b3:9c:b6:57:5f:53:a5:94:16:f2:2b:a6:15:48:3c: d5:a8:06:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjUxMjA1MDEwNDExWhcNMjUxMjEyMDEwNDExWjAYMRYwFAYD VQQDEw02OTMyMmY4Yy05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dn5sUGbzItuNdKuWfuYqYb0FPKYHMSorHFnDSZUmhiWm00jRVExCVn0EqTh QvoVNv/EaAgFalcZp7IcsnidfR3Jw7xqMKp40Z7cPdyhDNmnoWGHP1Jr5nO2B/TO k4+6p0msd8bSkm2GpvfNYPjaD/oTjXgn6kTW5+u612Lr3ivt7dxKr7fgIif/fa1T H1MYoqVDlpvCbclinrdRbJ4KMSeliJ3cKb6sAiZrBhAnRvpc6WCq4kwotctjrbDI XdUyuz9hg/uwBhitDGopFzTcfk93E0eakoR9D0WJUTjGT3Te82UTzZI8TT0v3bVm G3oTwZHphPIOyeiRV0fp4G2FgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXq4C/P FA5DlkiqPClJaMLMpt4eMB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU20L3zlyvEUMwgVOsxdrINmvts7QFZCg6OUO4NJaT96z7ZKJkIGFt doaZjcCrTFt37ySE+2wkZeyAPxROXzxAgxBfnUV6erlTsOrrZ7vhGR2UeKDdxHhf UFYDu+AHvCAXjYGpW6ySEhFNJoiqZIUI6F97Pq0WugS10zenpl+LuQza/OwlQ7FF PH9jFE+3EQEHOMKXjDexqGV0abQWWQVUwLQkqDfHoTbOEHbryBfZVfFmen4wdPeg fnfl9YT/+yf/+nFzEuNfcpAn2S7f2p6z9MVX0/Q9SdwGrFH2BNOgQzr+uXsCyJc1 ANI2kMmznLZXX1OllBbyK6YVSDzVqAa2 -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:54 2025 by rpki-client