This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: SAoVPkEDQkX8PwIyuFHwHgaCFVmx+4Qyyoqo0hyFIss= Subject key identifier: 04:2B:0F:38:42:DA:2D:B4:28:A2:EC:28:26:E5:AA:0D:B5:4B:1F:2A Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0BBA Signing time: Thu 04 Dec 2025 19:43:28 +0000 Manifest this update: Thu 04 Dec 2025 19:43:28 +0000 Manifest next update: Thu 11 Dec 2025 19:43:28 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: WWnH3jV/LvJl7OIOllXYzyC4G6HSgsYjzR235pSJCDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Dec 4 19:43:28 2025 GMT Not After : Dec 11 19:43:28 2025 GMT Subject: CN=6931e460-9a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:14:bb:f2:1e:eb:b8:93:fa:d9:48:78:24: 63:f0:75:09:bd:74:0f:bf:ca:d5:08:65:93:11:63: a8:00:f4:4c:b7:67:34:93:b4:28:2c:f9:f7:99:78: 99:6a:eb:f8:74:4d:fe:40:e7:1e:b0:52:f3:29:73: ed:94:a4:c9:1e:c5:86:9a:9b:b1:dc:c7:1a:08:5c: f0:a1:5e:69:b3:c2:a3:c5:8c:cf:a3:e0:5e:bd:ae: d7:47:24:b4:82:88:7d:7e:7f:27:cc:26:64:e9:6d: d9:aa:e8:8b:d7:d2:af:d7:e8:65:c5:2b:7c:07:a2: 3a:68:16:06:34:13:fc:20:6e:a0:c9:e3:76:33:88: 59:d3:a0:76:f0:3e:74:60:81:18:0a:00:0a:c0:42: 57:fc:aa:fd:58:40:d4:f2:89:50:6e:96:a0:af:34: ff:fc:94:44:a2:b5:c4:66:4a:01:ee:f4:84:1e:dc: e9:89:50:44:3c:e4:c8:f5:0d:71:d6:58:62:d2:fd: e4:1a:0a:ec:b6:81:1d:2e:ad:e9:e7:fd:b3:f2:e7: d4:5f:92:5f:f8:af:32:0d:93:1d:ab:51:84:5e:86: c1:01:6e:4c:4c:35:c0:2e:c5:c4:1e:91:90:54:94: 8f:4d:08:1e:7a:4a:89:a5:80:97:cb:83:36:f9:1f: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2B:0F:38:42:DA:2D:B4:28:A2:EC:28:26:E5:AA:0D:B5:4B:1F:2A X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7a:3b:21:b5:8d:64:7d:cd:35:25:5b:91:20:ce:45:1e:6b: 3f:5c:79:96:9a:5a:c5:95:f3:27:fc:33:b9:a2:84:de:c4:53: b4:2d:b3:24:a8:28:c2:40:c6:e8:99:cd:cb:e0:bf:2d:31:c6: 0a:af:57:a3:c3:1f:b8:cb:bd:87:9a:91:81:1d:18:42:31:3b: 59:d6:34:32:b5:6d:48:88:68:5a:16:a4:b3:a9:85:7e:71:07: f3:0a:48:fb:71:25:a2:53:04:84:f0:bb:be:71:1a:fe:d9:29: 0b:5d:2e:d9:c6:e5:d7:c6:60:fa:37:5b:42:78:d1:58:4b:9f: f0:e7:62:f0:26:1b:1f:76:5a:16:74:16:ca:6f:4d:12:b8:c9: 9e:0e:ab:19:77:d9:ea:14:0b:90:b9:69:e4:02:db:c9:26:f3: f8:bc:ad:72:4f:99:5d:7b:d5:1f:1c:56:61:2f:a4:61:ac:d8: e4:51:0c:a6:d5:a3:49:6e:1b:f6:13:6d:93:8b:b9:80:c9:6c: 63:57:85:aa:fd:8f:e1:07:16:19:63:83:f9:63:70:fd:29:fe: 3f:d2:3a:96:83:c5:82:99:49:d8:85:7b:8a:33:77:96:00:b5: 37:ae:66:51:87:68:e8:85:aa:81:30:37:19:b2:eb:12:83:1e: 0d:75:10:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUxMjA0MTk0MzI4WhcNMjUxMjExMTk0MzI4WjAYMRYwFAYD VQQDEw02OTMxZTQ2MC05YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1MUu/Ie67iT+tlIeCRj8HUJvXQPv8rVCGWTEWOoAPRMt2c0k7QoLPn3mXiZ auv4dE3+QOcesFLzKXPtlKTJHsWGmpux3McaCFzwoV5ps8KjxYzPo+Beva7XRyS0 goh9fn8nzCZk6W3ZquiL19Kv1+hlxSt8B6I6aBYGNBP8IG6gyeN2M4hZ06B28D50 YIEYCgAKwEJX/Kr9WEDU8olQbpagrzT//JREorXEZkoB7vSEHtzpiVBEPOTI9Q1x 1lhi0v3kGgrstoEdLq3p5/2z8ufUX5Jf+K8yDZMdq1GEXobBAW5MTDXALsXEHpGQ VJSPTQgeekqJpYCXy4M2+R92jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQrDzhC 2i20KKLsKCblqg21Sx8qMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQejshtY1kfc01JVuRIM5FHms/XHmWmlrFlfMn/DO5ooTexFO0LbMk qCjCQMbomc3L4L8tMcYKr1ejwx+4y72HmpGBHRhCMTtZ1jQytW1IiGhaFqSzqYV+ cQfzCkj7cSWiUwSE8Lu+cRr+2SkLXS7ZxuXXxmD6N1tCeNFYS5/w52LwJhsfdloW dBbKb00SuMmeDqsZd9nqFAuQuWnkAtvJJvP4vK1yT5lde9UfHFZhL6RhrNjkUQym 1aNJbhv2E22Ti7mAyWxjV4Wq/Y/hBxYZY4P5Y3D9Kf4/0jqWg8WCmUnYhXuKM3eW ALU3rmZRh2johaqBMDcZsusSgx4NdRAy -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:49 2025 by rpki-client