This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: H2qsZIWxoBb+KEgVSlnweSfZ3Sv+gfLVAQ7R3sOhY4Y= Subject key identifier: D5:9A:E9:12:73:5F:A0:77:99:04:38:E1:D3:AF:A7:E7:6C:16:9A:91 Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 088A Signing time: Thu 04 Dec 2025 19:42:20 +0000 Manifest this update: Thu 04 Dec 2025 19:42:19 +0000 Manifest next update: Thu 11 Dec 2025 19:42:19 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: t1JovT51Qt+EJNKA4Uesp+dZNed7FLWh9+soSC8b48g=) 2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: xQNJE/wFi8JMz2ss0ss1yj9BAf/VPU6rBNzmi8uV9UI=) 3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: j94hdqhS8hEZkUNMK0Gy0/wMaWkISNSvPZJQcef/86U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Dec 4 19:42:19 2025 GMT Not After : Dec 11 19:42:19 2025 GMT Subject: CN=6931e41b-d7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:55:64:60:1f:13:02:84:6e:1d:78:49:37: fa:7e:8d:5e:ec:79:c8:3d:b6:3a:41:8e:89:5e:d8: 3c:e9:6b:54:6e:fb:71:2b:ff:e2:da:6f:7b:1d:4c: 8c:15:12:5c:ee:44:5e:56:8c:53:41:b6:8a:14:a5: 21:b0:d0:36:8d:67:c5:4d:62:40:22:87:fa:d6:c3: 7e:6f:82:ab:ea:b2:c3:4a:03:ea:96:bb:9a:f6:b0: ff:5d:48:f3:4a:42:b3:6d:31:73:e7:0a:21:f6:53: 6f:57:66:d2:8f:60:0c:34:9d:fc:60:14:85:d6:ee: ec:21:22:6f:19:ff:94:24:38:48:a1:ef:98:78:ec: 24:9a:2a:78:e8:12:7c:06:8a:1b:d0:63:11:7a:a5: c5:50:ee:dd:e5:7e:35:b5:23:5c:9a:0a:54:9e:1d: dc:58:52:18:5a:68:d8:27:00:4e:2a:96:66:d9:7a: a1:a8:92:3e:1e:e9:a3:c4:63:08:56:c6:d9:90:a8: f0:4d:29:e1:29:aa:e3:67:1e:37:e4:81:2f:4c:31: 70:cf:aa:cc:7a:fa:ae:e5:98:c0:e5:6f:49:f3:3c: c8:d3:ea:66:28:50:55:f6:3f:7c:81:34:2a:97:a6: 22:d3:d8:82:b8:ef:5a:75:61:69:ce:ef:dd:df:d2: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9A:E9:12:73:5F:A0:77:99:04:38:E1:D3:AF:A7:E7:6C:16:9A:91 X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:66:99:29:47:d2:41:aa:1d:3b:e6:78:90:c5:31:61:bd:12: 01:c6:b7:db:f7:b9:49:55:bc:28:c7:86:be:02:48:ba:8d:15: 19:59:ce:f5:0b:39:1e:88:39:d5:6b:7d:9c:36:9b:13:d1:f9: 38:69:87:c2:8d:42:94:37:27:34:12:ba:36:93:a2:6b:12:e4: e1:3e:1c:2a:a5:4a:58:1a:83:e3:14:0c:ff:cb:bb:fe:ae:c9: cc:76:29:09:b2:4f:9d:b6:05:67:44:21:2d:a4:f5:cf:89:79: 20:50:55:14:63:5c:70:44:60:a1:76:88:3f:57:ba:a1:0f:ce: bb:a7:5e:cd:9e:95:ed:ce:f1:c5:ff:e4:ba:f8:04:65:3b:2e: 02:d3:12:6e:3b:37:aa:e0:c4:8c:bc:99:e8:d6:09:ac:d6:d7: 23:64:6d:6e:71:42:ef:2a:e8:05:02:d0:54:08:eb:69:d5:22: 94:c4:51:10:76:8c:b2:f1:67:4f:2b:ba:d9:01:4d:eb:85:5e: 3f:bb:75:2c:4f:5f:54:00:48:2c:61:8e:7a:4b:bc:01:d6:62: ef:9e:f4:01:f6:66:51:03:38:77:80:9d:be:83:65:8f:1a:85: 21:cb:2e:17:c4:2f:a6:6a:d0:d7:33:52:8b:a0:a2:2b:56:17: e4:0b:e3:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUxMjA0MTk0MjE5WhcNMjUxMjExMTk0MjE5WjAYMRYwFAYD VQQDEw02OTMxZTQxYi1kN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MxVZGAfEwKEbh14STf6fo1e7HnIPbY6QY6JXtg86WtUbvtxK//i2m97HUyM FRJc7kReVoxTQbaKFKUhsNA2jWfFTWJAIof61sN+b4Kr6rLDSgPqlrua9rD/XUjz SkKzbTFz5woh9lNvV2bSj2AMNJ38YBSF1u7sISJvGf+UJDhIoe+YeOwkmip46BJ8 Boob0GMReqXFUO7d5X41tSNcmgpUnh3cWFIYWmjYJwBOKpZm2XqhqJI+HumjxGMI VsbZkKjwTSnhKarjZx435IEvTDFwz6rMevqu5ZjA5W9J8zzI0+pmKFBV9j98gTQq l6Yi09iCuO9adWFpzu/d39I35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWa6RJz X6B3mQQ44dOvp+dsFpqRMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhZpkpR9JBqh075niQxTFhvRIBxrfb97lJVbwox4a+Aki6jRUZWc71 CzkeiDnVa32cNpsT0fk4aYfCjUKUNyc0Ero2k6JrEuThPhwqpUpYGoPjFAz/y7v+ rsnMdikJsk+dtgVnRCEtpPXPiXkgUFUUY1xwRGChdog/V7qhD867p17NnpXtzvHF /+S6+ARlOy4C0xJuOzeq4MSMvJno1gms1tcjZG1ucULvKugFAtBUCOtp1SKUxFEQ doyy8WdPK7rZAU3rhV4/u3UsT19UAEgsYY56S7wB1mLvnvQB9mZRAzh3gJ2+g2WP GoUhyy4XxC+matDXM1KLoKIrVhfkC+OP -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:35 2025 by rpki-client