This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json) Hash identifier: Ua+PSdLy53NcgxrRj7ef9HbAra8Ubot91vdom1J9VLQ= Subject key identifier: 13:65:CC:E6:D0:01:EE:AC:3E:50:BB:E0:66:E7:85:F0:65:6A:66:46 Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft Manifest number: 0683 Signing time: Sat 06 Dec 2025 21:22:17 +0000 Manifest this update: Sat 06 Dec 2025 21:22:17 +0000 Manifest next update: Sat 13 Dec 2025 21:22:17 +0000 Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: Z4TY2TeAgWx/Mb/KcnbWGycSgyqeMuW9+GB0hPaicm4=) 2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: u94MQjoE9DI5ldBDPfqmoxt1XvvR3zVSKElHRq9GZVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Validity Not Before: Dec 6 21:22:17 2025 GMT Not After : Dec 13 21:22:17 2025 GMT Subject: CN=69349e89-4260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:5a:9c:c4:1b:29:5a:8e:f4:d8:73:52:ad: df:00:d5:18:f6:79:1d:e9:2c:d0:01:a2:7d:32:ba: bc:ea:37:db:7f:c9:84:3a:cc:2e:79:c7:3a:78:22: fa:0f:a9:88:4b:36:ef:b4:0b:ed:3a:0d:59:92:32: 30:47:6f:45:68:4d:a8:87:8c:22:54:37:37:86:74: d4:e2:b2:42:29:a4:2c:56:7a:0f:b4:60:56:b1:83: 52:6a:c7:cc:f4:f2:5c:fb:f9:b5:84:76:97:c5:93: cf:3d:2e:f7:56:1f:54:7c:a9:43:5e:80:7c:46:6d: 6d:68:0e:62:e6:e5:28:6a:86:27:8e:73:ce:8b:32: 18:c3:3a:c7:14:12:b7:96:55:73:f4:c7:26:c1:f3: 77:d8:34:c8:e5:71:50:48:99:f5:5d:c2:ee:10:41: 55:53:a1:e2:a3:b2:76:12:84:e8:65:1e:d4:4d:82: 88:ad:74:cf:05:fc:5b:c7:67:7a:84:a1:0f:92:8d: ab:6a:a1:c2:4e:bd:bf:8a:43:23:1d:9a:b0:d6:da: c8:72:42:7a:19:6b:e8:af:e0:b0:a6:b2:32:bf:13: 3a:d8:c9:1d:3d:89:09:0c:d4:f2:6e:52:a7:52:ce: e4:82:c1:db:51:f2:6d:37:1f:44:6b:6d:82:37:16: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:65:CC:E6:D0:01:EE:AC:3E:50:BB:E0:66:E7:85:F0:65:6A:66:46 X509v3 Authority Key Identifier: keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:14:b4:ed:dd:58:f0:d4:76:cb:a9:b9:6b:fe:68:5a:32:ba: 74:e1:10:00:7d:a1:bc:4c:89:3d:ac:28:93:fd:af:38:f0:44: 80:f6:48:a4:78:6c:f8:33:d7:71:f9:0a:11:22:7f:33:86:77: 36:eb:c0:c4:35:b1:1c:4c:c0:69:a8:82:1b:76:b0:84:01:57: bb:d7:d7:89:93:f5:f4:2d:f9:b7:a4:e6:d0:d5:96:46:83:fb: c2:31:ff:61:e1:5e:3d:94:76:36:30:eb:9d:f0:c6:95:5c:52: a7:a8:e6:d4:03:84:7f:06:9a:bd:00:aa:4e:b5:72:3a:a6:55: c2:47:42:8b:68:79:3f:f3:15:ad:85:cf:22:49:45:9d:49:99: 31:67:63:8c:1a:78:c9:e7:75:ab:83:7b:48:24:02:9c:72:88: 25:9b:08:67:59:57:fe:dc:1d:89:54:91:c8:3a:3f:b3:a6:91: 32:d6:48:d6:82:7b:cb:cc:76:0d:a1:dc:9a:77:28:82:70:57: ce:e3:ec:24:3c:e6:ac:32:45:ff:33:bc:4a:99:19:1e:d5:41: 38:75:36:32:0a:b9:3d:1f:25:fe:ed:d8:19:6e:5a:30:59:cc: 3e:09:a3:e7:d5:83:4e:80:d7:44:e7:80:01:48:ca:68:97:f9: af:2d:61:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2 OTU3QTgwQkMwHhcNMjUxMjA2MjEyMjE3WhcNMjUxMjEzMjEyMjE3WjAYMRYwFAYD VQQDEw02OTM0OWU4OS00MjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YpanMQbKVqO9NhzUq3fANUY9nkd6SzQAaJ9Mrq86jfbf8mEOswuecc6eCL6 D6mISzbvtAvtOg1ZkjIwR29FaE2oh4wiVDc3hnTU4rJCKaQsVnoPtGBWsYNSasfM 9PJc+/m1hHaXxZPPPS73Vh9UfKlDXoB8Rm1taA5i5uUoaoYnjnPOizIYwzrHFBK3 llVz9McmwfN32DTI5XFQSJn1XcLuEEFVU6Hio7J2EoToZR7UTYKIrXTPBfxbx2d6 hKEPko2raqHCTr2/ikMjHZqw1trIckJ6GWvor+CwprIyvxM62MkdPYkJDNTyblKn Us7kgsHbUfJtNx9Ea22CNxZqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNlzObQ Ae6sPlC74GbnhfBlamZGMB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp R242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwFLTt3Vjw1HbLqblr/mhaMrp04RAAfaG8TIk9rCiT/a848ESA9kik eGz4M9dx+QoRIn8zhnc268DENbEcTMBpqIIbdrCEAVe719eJk/X0Lfm3pObQ1ZZG g/vCMf9h4V49lHY2MOud8MaVXFKnqObUA4R/Bpq9AKpOtXI6plXCR0KLaHk/8xWt hc8iSUWdSZkxZ2OMGnjJ53Wrg3tIJAKccoglmwhnWVf+3B2JVJHIOj+zppEy1kjW gnvLzHYNodyadyiCcFfO4+wkPOasMkX/M7xKmRke1UE4dTYyCrk9HyX+7dgZblow Wcw+CaPn1YNOgNdE54ABSMpol/mvLWGC -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:19 2025 by rpki-client