This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json) Hash identifier: iZfTkbCmFKg/3p6eLIAUe9ErY9HSUETgbUtH0g6qbLY= Subject key identifier: 0B:8C:46:A5:3E:30:90:8C:B1:65:9C:EC:16:01:94:45:1C:AE:AF:71 Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft Manifest number: 026D Signing time: Thu 04 Dec 2025 23:58:47 +0000 Manifest this update: Thu 04 Dec 2025 23:58:47 +0000 Manifest next update: Thu 11 Dec 2025 23:58:47 +0000 Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: gk0n2nNpYVTElb/LOxLjYOYGBFaPvIeN/ej3LY+S0eg=) 2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: 31J9yBONwQ0Slze1cZAXabZLSH29F7mH7omWRFxw8QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Validity Not Before: Dec 4 23:58:47 2025 GMT Not After : Dec 11 23:58:47 2025 GMT Subject: CN=69322037-f6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:7b:6b:9c:b4:97:4c:0e:e6:63:e7:a3:e3: 0b:ac:cc:72:bd:12:58:a6:f7:b2:cc:0c:8f:42:95: 06:22:4a:b2:cc:f0:27:51:06:03:af:be:cf:be:ec: d0:12:94:c7:06:42:c4:f2:6e:16:37:fd:50:dd:b9: 75:64:cb:34:7e:1e:37:b0:d6:3e:b0:c4:e3:f4:82: 86:dd:07:b6:e1:fb:04:8d:b5:e5:a7:c1:cd:8e:5f: 90:51:d8:40:be:9a:be:b0:57:72:92:ed:6c:99:a8: 3c:ef:5f:9a:da:1d:19:e3:b3:c8:f5:01:05:bc:29: a7:28:c9:a0:13:d2:5c:90:5b:4b:b0:3c:60:78:92: e1:49:db:3d:5d:15:ce:01:db:62:c3:34:1a:8e:b2: 94:16:c7:c1:82:9b:08:72:9e:3d:fe:63:40:05:1f: fe:dc:78:47:19:2d:b1:05:5a:62:2a:7f:a4:24:4a: a4:fc:50:29:85:95:e1:d8:8a:ec:e3:53:86:38:f7: 92:24:bf:f3:e0:45:bb:9f:c1:1c:1b:b6:5c:7e:d8: e6:c1:02:4f:f2:0d:63:f2:a9:00:a4:2c:57:ea:f7: b2:42:94:a3:69:79:33:5f:d4:c6:7a:71:72:b8:5d: 3d:fa:16:6a:a5:8d:d6:23:d2:c8:f1:ef:e1:2a:d8: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8C:46:A5:3E:30:90:8C:B1:65:9C:EC:16:01:94:45:1C:AE:AF:71 X509v3 Authority Key Identifier: keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a5:14:22:bc:b3:c1:99:7d:51:86:ad:0b:ad:8d:ad:bf:14: 42:37:9b:c9:60:a3:38:ca:5d:6d:14:93:74:1b:da:ae:ca:0b: f6:d4:59:37:78:f7:fa:61:ef:c8:5c:ef:d2:19:61:56:40:ea: df:f5:d9:c8:fa:38:f0:c1:f1:81:ec:ec:d2:7f:27:7c:80:97: 61:cf:44:37:ea:0f:fe:b7:c3:72:f3:54:52:62:32:49:6e:87: 23:92:83:97:6e:73:cd:76:4a:b2:24:06:07:c3:28:16:76:86: 8e:3b:4d:5b:1d:2b:cf:02:e6:75:2a:37:c5:da:2a:6d:2c:82: e1:f8:9a:a1:d2:d7:a8:e0:52:3f:09:eb:89:b0:64:69:e5:0b: d8:57:78:7d:f6:54:7b:c1:35:d3:2b:ad:5c:55:cb:e5:df:1b: cb:5d:06:aa:16:8f:8c:1d:66:25:b9:1c:38:ab:94:1c:da:0a: 80:dc:d0:66:f6:11:b6:93:85:e2:16:28:45:33:3d:84:6b:3b: 05:89:c8:9e:03:62:2c:35:57:4e:66:e9:f6:6e:be:35:2f:84: 69:96:ce:42:00:4d:a4:25:48:9e:38:24:87:55:a6:6a:3e:57: a8:89:2a:1c:4a:b6:37:ce:d7:2c:34:e1:e9:4b:8c:b9:cb:8b: 3c:4b:d8:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2 QkQ3NTVGOTYwHhcNMjUxMjA0MjM1ODQ3WhcNMjUxMjExMjM1ODQ3WjAYMRYwFAYD VQQDEw02OTMyMjAzNy1mNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPF7a5y0l0wO5mPno+MLrMxyvRJYpveyzAyPQpUGIkqyzPAnUQYDr77PvuzQ EpTHBkLE8m4WN/1Q3bl1ZMs0fh43sNY+sMTj9IKG3Qe24fsEjbXlp8HNjl+QUdhA vpq+sFdyku1smag871+a2h0Z47PI9QEFvCmnKMmgE9JckFtLsDxgeJLhSds9XRXO AdtiwzQajrKUFsfBgpsIcp49/mNABR/+3HhHGS2xBVpiKn+kJEqk/FAphZXh2Irs 41OGOPeSJL/z4EW7n8EcG7ZcftjmwQJP8g1j8qkApCxX6veyQpSjaXkzX9TGenFy uF09+hZqpY3WI9LI8e/hKthq6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuMRqU+ MJCMsWWc7BYBlEUcrq9xMB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3 RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2 TWZKY29BaGt2RHByMTFYNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2pRQivLPBmX1Rhq0LrY2tvxRCN5vJYKM4yl1tFJN0G9quygv21Fk3 ePf6Ye/IXO/SGWFWQOrf9dnI+jjwwfGB7OzSfyd8gJdhz0Q36g/+t8Ny81RSYjJJ bocjkoOXbnPNdkqyJAYHwygWdoaOO01bHSvPAuZ1KjfF2iptLILh+Jqh0teo4FI/ CeuJsGRp5QvYV3h99lR7wTXTK61cVcvl3xvLXQaqFo+MHWYluRw4q5Qc2gqA3NBm 9hG2k4XiFihFMz2EazsFicieA2IsNVdOZun2br41L4Rpls5CAE2kJUieOCSHVaZq PleoiSocSrY3ztcsNOHpS4y5y4s8S9io -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:10 2025 by rpki-client