This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: rlSLLpV5GuQ6Fn8fBvtoxzKW2aC/dkldqcGl3t8kRZI= Subject key identifier: 0F:28:CC:8C:C8:68:00:09:E7:E1:EB:1C:9B:B4:AE:BE:8B:99:FC:4B Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 03C6 Signing time: Thu 04 Dec 2025 23:05:09 +0000 Manifest this update: Thu 04 Dec 2025 23:05:09 +0000 Manifest next update: Thu 11 Dec 2025 23:05:09 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: ctaMHLCpbAsBsv8OKY3r887ZkNB6opbFJxuI9xOxYWQ=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: 5JeHEtG1xdKCrCH6rPS3zOfVRTqBs2fv9GJfMUQ9NfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: Dec 4 23:05:09 2025 GMT Not After : Dec 11 23:05:09 2025 GMT Subject: CN=693213a5-eb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:04:84:b7:ae:f6:ce:01:b6:02:61:a0:11: 32:31:8f:30:ca:35:b2:7a:6f:e1:ce:30:57:8c:ad: b6:7e:03:87:89:70:b7:0b:68:74:e8:1a:be:57:68: 65:69:52:95:ae:76:bc:f1:59:a7:6f:7b:36:fa:e8: ff:93:11:d5:ec:0a:a9:ae:9c:8e:c5:a5:2e:5c:52: 0d:20:a6:e6:70:77:8b:48:50:04:d1:8c:2e:bb:0e: 2d:ef:61:c3:a5:b5:2e:b0:c1:16:45:f6:4e:c3:e1: d5:ab:be:aa:d3:76:99:6e:d2:76:e0:ad:57:bc:80: e8:54:f8:7e:a0:75:d7:db:b0:0d:c1:27:fb:ab:8e: c7:f3:03:50:46:fb:58:6d:20:b2:71:ec:04:db:d7: 3c:a9:3e:62:5a:7e:aa:f2:24:59:0e:b7:df:25:a3: d4:ee:d4:7b:b4:a4:02:73:65:42:8f:ad:39:c5:95: 76:89:d0:e3:cd:89:de:04:95:f0:a4:2d:72:56:4d: 18:de:09:f2:69:64:1a:4a:a9:73:d1:c8:a3:4f:ee: f6:57:5f:72:a3:17:f4:6a:57:a3:3a:5a:37:eb:ee: d8:7e:2e:8e:47:5f:3a:04:9c:33:92:d7:36:aa:17: 85:0e:e0:ac:e6:23:78:d8:7e:90:94:ec:71:c9:10: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:CC:8C:C8:68:00:09:E7:E1:EB:1C:9B:B4:AE:BE:8B:99:FC:4B X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:80:2a:8e:8a:df:6f:dd:22:4f:13:28:8d:8f:9d:c6:83: d0:df:2b:d7:62:d8:c3:1e:95:85:f9:2b:51:c0:21:7f:bf:2d: 09:0e:22:99:e9:fb:5e:65:d4:ae:65:53:5f:d9:60:b4:58:31: 9b:dd:f3:30:7d:f0:82:ad:ed:4d:56:6d:35:48:7a:d0:62:96: a7:59:32:b6:0e:80:88:e8:11:44:00:2a:d4:3f:30:e2:8c:5e: 14:c2:1b:1d:36:94:fe:fe:93:be:a9:4d:64:84:ca:be:61:cc: 1a:16:c3:e5:ba:3e:fc:20:91:cd:3b:ec:90:8b:e3:67:cb:e8: c6:87:97:24:45:ac:02:90:d5:77:0f:4e:25:31:ad:09:02:0c: c5:b1:1e:48:be:8e:7c:5c:fe:be:86:71:3e:f7:ad:09:76:40: a1:4c:89:9b:ec:14:84:28:77:12:02:a0:a7:d6:41:49:61:87: 73:a7:a2:93:15:a7:ba:4f:9f:b9:eb:18:4b:4a:51:c6:47:0d: fe:db:9a:52:47:21:f2:50:e3:31:fd:a1:18:b9:a4:1b:31:60: 7c:ef:76:aa:1d:47:20:5e:ae:a2:0c:c1:1c:39:88:0b:f6:7f: 23:18:8b:ec:2c:95:79:1b:95:7b:77:1e:6c:2a:7a:9e:76:af: d9:b8:34:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjUxMjA0MjMwNTA5WhcNMjUxMjExMjMwNTA5WjAYMRYwFAYD VQQDEw02OTMyMTNhNS1lYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSEEhLeu9s4BtgJhoBEyMY8wyjWyem/hzjBXjK22fgOHiXC3C2h06Bq+V2hl aVKVrna88Vmnb3s2+uj/kxHV7AqprpyOxaUuXFINIKbmcHeLSFAE0Ywuuw4t72HD pbUusMEWRfZOw+HVq76q03aZbtJ24K1XvIDoVPh+oHXX27ANwSf7q47H8wNQRvtY bSCycewE29c8qT5iWn6q8iRZDrffJaPU7tR7tKQCc2VCj605xZV2idDjzYneBJXw pC1yVk0Y3gnyaWQaSqlz0cijT+72V19yoxf0alejOlo36+7Yfi6OR186BJwzktc2 qheFDuCs5iN42H6QlOxxyRASTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8ozIzI aAAJ5+HrHJu0rr6LmfxLMB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbO4Aqjorfb90iTxMojY+dxoPQ3yvXYtjDHpWF+StRwCF/vy0JDiKZ 6fteZdSuZVNf2WC0WDGb3fMwffCCre1NVm01SHrQYpanWTK2DoCI6BFEACrUPzDi jF4UwhsdNpT+/pO+qU1khMq+YcwaFsPluj78IJHNO+yQi+Nny+jGh5ckRawCkNV3 D04lMa0JAgzFsR5Ivo58XP6+hnE+960JdkChTImb7BSEKHcSAqCn1kFJYYdzp6KT Fae6T5+56xhLSlHGRw3+25pSRyHyUOMx/aEYuaQbMWB873aqHUcgXq6iDMEcOYgL 9n8jGIvsLJV5G5V7dx5sKnqedq/ZuDTl -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:56 2025 by rpki-client