This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: flKOF2yNn70Ry1GaGfjWro1pJCyYbnLPptrj2HkHSZA= Subject key identifier: C7:49:11:85:E8:54:33:15:B9:BB:EE:FB:1A:BA:CC:79:E6:B1:9A:EF Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0EDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0ECC Signing time: Thu 04 Dec 2025 17:12:39 +0000 Manifest this update: Thu 04 Dec 2025 17:12:38 +0000 Manifest next update: Thu 11 Dec 2025 17:12:38 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: JBImeUYL0bQZXBzsxUxIjIPpJrbesdz7qJhEfd7NleQ=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3803 (0xedb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Dec 4 17:12:38 2025 GMT Not After : Dec 11 17:12:38 2025 GMT Subject: CN=6931c106-8618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:d8:33:41:eb:6a:5c:1f:be:a7:ee:39:d5: 58:59:ec:94:91:f8:a3:a4:0a:a5:f3:dc:68:d5:b9: f3:56:7e:2e:59:59:fb:20:bb:27:b8:ac:d9:5a:ce: b2:31:27:e9:c6:b5:ca:6a:ed:d6:be:82:65:a8:8d: 1d:4f:09:d3:ca:b2:36:0f:12:4f:f8:c9:48:e4:eb: e0:08:3f:22:55:82:ac:e8:3c:d9:3e:6c:fc:0c:d8: fa:86:e8:67:43:ae:16:62:46:0b:be:c5:9c:dd:32: c5:a1:8a:9a:b9:51:56:96:32:7f:ce:5a:e4:a1:49: 59:39:30:55:e0:bc:6c:82:05:56:da:e5:07:51:8a: 4b:11:89:6c:18:2b:50:ad:78:ed:44:bb:5b:94:83: 59:ed:1f:13:e2:da:b8:4b:23:35:62:af:9f:11:47: 2f:9a:c3:98:50:dc:b9:8e:fe:c4:b3:82:31:05:55: db:6b:4e:fb:e9:c1:06:ae:95:2d:e0:7c:18:e9:0d: 3b:a9:bb:15:1a:f5:48:9b:fa:62:58:2b:3f:10:b6: 91:77:78:88:23:80:e6:82:bb:81:64:2f:7d:c7:76: 34:40:e3:8f:5a:28:13:c3:ad:75:a9:16:3c:13:d2: 63:f2:7f:56:c5:bc:30:1e:78:fb:7a:98:89:8f:f5: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:11:85:E8:54:33:15:B9:BB:EE:FB:1A:BA:CC:79:E6:B1:9A:EF X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3d:63:5b:4d:34:03:f2:4b:9a:5e:b1:70:be:80:14:28:4d: 58:72:85:a0:d9:e9:44:5c:2d:46:7c:ec:c0:b6:d7:13:08:2e: 6d:9e:73:e1:d0:dc:e7:87:66:89:6a:98:f5:61:4d:86:14:e4: b6:78:95:3c:41:42:d3:2f:f8:93:77:da:ab:53:f6:79:89:a7: b3:b6:1b:3f:99:cf:fb:83:bb:2a:cf:38:49:c6:89:c5:6f:9d: 21:ae:8f:0b:fb:7b:0f:29:d5:c5:81:46:4b:a6:d2:65:b6:13: 2a:a4:41:13:69:aa:74:f2:0b:02:38:1a:59:91:05:51:02:3e: d7:6e:a5:32:7b:00:d9:f3:dc:1d:cf:bc:6f:96:b7:56:87:13: 88:d4:8e:16:98:8a:31:5d:dd:b5:3e:00:c4:03:ce:c9:ad:14: c3:91:70:92:b9:dd:30:06:fa:f7:50:91:71:35:3a:81:a9:8f: 5f:65:90:58:5c:ad:b9:c9:80:09:51:dd:97:34:f2:a4:9f:f3: 82:ad:a6:8e:13:67:56:31:47:09:8e:1c:f0:72:b5:d8:aa:6f: f2:c0:f1:12:44:9c:dd:7c:5b:ac:07:bf:3e:cd:63:c5:cf:df: cd:8d:d9:0d:aa:be:f4:75:56:52:62:05:63:7a:c8:e5:48:19: 16:26:ae:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUxMjA0MTcxMjM4WhcNMjUxMjExMTcxMjM4WjAYMRYwFAYD VQQDEw02OTMxYzEwNi04NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LrYM0HralwfvqfuOdVYWeyUkfijpAql89xo1bnzVn4uWVn7ILsnuKzZWs6y MSfpxrXKau3WvoJlqI0dTwnTyrI2DxJP+MlI5OvgCD8iVYKs6DzZPmz8DNj6huhn Q64WYkYLvsWc3TLFoYqauVFWljJ/zlrkoUlZOTBV4LxsggVW2uUHUYpLEYlsGCtQ rXjtRLtblINZ7R8T4tq4SyM1Yq+fEUcvmsOYUNy5jv7Es4IxBVXba0776cEGrpUt 4HwY6Q07qbsVGvVIm/piWCs/ELaRd3iII4DmgruBZC99x3Y0QOOPWigTw611qRY8 E9Jj8n9WxbwwHnj7epiJj/VfzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdJEYXo VDMVubvu+xq6zHnmsZrvMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHPWNbTTQD8kuaXrFwvoAUKE1YcoWg2elEXC1GfOzAttcTCC5tnnPh 0Nznh2aJapj1YU2GFOS2eJU8QULTL/iTd9qrU/Z5iaezths/mc/7g7sqzzhJxonF b50hro8L+3sPKdXFgUZLptJlthMqpEETaap08gsCOBpZkQVRAj7XbqUyewDZ89wd z7xvlrdWhxOI1I4WmIoxXd21PgDEA87JrRTDkXCSud0wBvr3UJFxNTqBqY9fZZBY XK25yYAJUd2XNPKkn/OCraaOE2dWMUcJjhzwcrXYqm/ywPESRJzdfFusB78+zWPF z9/NjdkNqr70dVZSYgVjesjlSBkWJq5r -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:34 2025 by rpki-client