This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: 65ULmwvi3hUzMnS3GwNNd9oUy7X7w5G5GTAtcCPk3P8= Subject key identifier: 6F:A4:AB:E5:67:1B:7C:80:B5:CE:A1:BC:F8:77:DD:00:8D:F5:40:1E Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 0401 Signing time: Thu 04 Dec 2025 22:55:10 +0000 Manifest this update: Thu 04 Dec 2025 22:55:09 +0000 Manifest next update: Thu 11 Dec 2025 22:55:09 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: OQPlLHcURqdzqRXMVBtGQnK9FoTEy+DLhYpqdsSuSkM=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 8YnQugqr595jhqZisXArYlRiOGH/9vz6hBQ33+FTmLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Dec 4 22:55:09 2025 GMT Not After : Dec 11 22:55:09 2025 GMT Subject: CN=6932114e-c068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:c0:6f:df:04:19:2e:d1:55:c7:9a:8a:ac: 5a:30:fe:e2:5f:02:cf:9f:9f:2b:8a:ec:94:e6:ea: 40:c3:f1:46:9c:f8:b5:b0:b6:b0:ab:30:99:ab:7c: e2:9d:db:df:57:74:a8:65:57:38:3e:37:79:bb:d9: fa:c8:69:8c:b0:69:a9:58:8d:bd:56:31:7c:d3:58: fd:c1:47:38:ec:34:e5:a4:6f:ce:2f:66:19:a7:7b: 87:ac:53:00:e4:99:40:44:0f:e4:f0:ba:ad:0a:15: eb:f2:e4:fb:f3:1e:65:a2:d7:1f:44:22:81:18:41: 1b:98:58:52:8b:3c:a4:b9:af:b7:76:3e:b3:90:27: f2:a9:9d:44:99:38:61:29:55:38:d1:dd:80:1a:65: 51:2e:78:86:c7:04:16:b7:df:c5:5f:98:77:b7:31: 11:38:60:bb:d6:70:dd:c4:7a:02:5c:3a:7d:18:10: 8d:be:56:98:49:96:0f:df:4b:b6:83:4f:fe:8b:7e: 15:42:a1:f2:bf:98:20:f8:f8:7e:2a:e3:a2:31:89: d5:c9:8a:f3:ca:dc:82:49:5a:b5:6b:8e:bf:41:9b: 20:6f:bc:e7:34:36:bd:df:d2:1e:f4:39:89:55:ef: f2:76:cc:95:2a:c6:8b:d7:4c:53:c0:ed:f0:e8:fd: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A4:AB:E5:67:1B:7C:80:B5:CE:A1:BC:F8:77:DD:00:8D:F5:40:1E X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:5a:e1:e2:94:ac:e3:90:32:c4:60:48:f5:eb:1e:35:f3: 1a:ed:00:14:96:bc:b6:ed:32:ca:c3:3e:1c:ac:d4:4b:e6:ac: 1b:01:9d:59:ef:51:45:60:52:34:ff:4f:52:66:5d:f9:ca:d2: 64:37:38:69:8a:9f:5b:87:1c:b8:bd:d6:6f:a1:a1:91:ec:6b: 80:37:56:95:96:b2:6d:73:06:f2:5e:35:a1:e2:e0:0d:db:db: 99:97:94:cd:5f:72:3a:59:9a:6b:96:0d:06:74:3c:01:81:77: 31:8e:a4:e1:8c:ba:ab:ed:c5:b1:b2:5a:49:fc:cb:9f:ca:ed: 61:17:78:fa:ce:81:7a:a1:34:9a:a0:ef:a7:91:53:b8:1d:36: 2f:8d:f1:f5:ba:f2:68:27:41:f0:21:3b:4e:72:7a:25:62:89: af:c5:5d:e7:0e:ff:82:b7:a6:0f:77:0d:91:7e:79:c7:45:64: 9b:f4:98:60:e5:5d:d5:98:09:2d:26:04:3c:37:35:32:0b:59: c9:4b:fb:08:0e:93:fd:78:2e:3c:9c:30:76:be:4c:1a:91:b7: 5f:23:4d:e7:83:e1:23:21:7b:a2:4a:0c:40:bd:e2:e9:5d:f0: 97:e0:06:48:bc:37:98:36:7f:23:97:3b:9f:5e:ec:c0:ca:33: 77:7e:f2:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUxMjA0MjI1NTA5WhcNMjUxMjExMjI1NTA5WjAYMRYwFAYD VQQDEw02OTMyMTE0ZS1jMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlerAb98EGS7RVceaiqxaMP7iXwLPn58riuyU5upAw/FGnPi1sLawqzCZq3zi ndvfV3SoZVc4Pjd5u9n6yGmMsGmpWI29VjF801j9wUc47DTlpG/OL2YZp3uHrFMA 5JlARA/k8LqtChXr8uT78x5lotcfRCKBGEEbmFhSizykua+3dj6zkCfyqZ1EmThh KVU40d2AGmVRLniGxwQWt9/FX5h3tzEROGC71nDdxHoCXDp9GBCNvlaYSZYP30u2 g0/+i34VQqHyv5gg+Ph+KuOiMYnVyYrzytyCSVq1a46/QZsgb7znNDa939Ie9DmJ Ve/ydsyVKsaL10xTwO3w6P2EvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+kq+Vn G3yAtc6hvPh33QCN9UAeMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnBlrh4pSs45AyxGBI9eseNfMa7QAUlry27TLKwz4crNRL5qwbAZ1Z 71FFYFI0/09SZl35ytJkNzhpip9bhxy4vdZvoaGR7GuAN1aVlrJtcwbyXjWh4uAN 29uZl5TNX3I6WZprlg0GdDwBgXcxjqThjLqr7cWxslpJ/Mufyu1hF3j6zoF6oTSa oO+nkVO4HTYvjfH1uvJoJ0HwITtOcnolYomvxV3nDv+Ct6YPdw2RfnnHRWSb9Jhg 5V3VmAktJgQ8NzUyC1nJS/sIDpP9eC48nDB2vkwakbdfI03ng+EjIXuiSgxAveLp XfCX4AZIvDeYNn8jlzufXuzAyjN3fvJU -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:57 2025 by rpki-client