This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: BTORJVMZoreH/rHUl//IMHgsxmd5bA8I4Hrn48wOzlA= Subject key identifier: 5C:1C:D8:78:9F:33:90:D1:CD:83:DC:38:F6:35:14:3B:EA:B9:51:A6 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B55 Signing time: Sat 06 Dec 2025 18:29:14 +0000 Manifest this update: Sat 06 Dec 2025 18:29:13 +0000 Manifest next update: Sat 13 Dec 2025 18:29:13 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: EowS/C+ndUl4MDK5JM/0bsqNzRM9BeqYY3WYqkiZ9Do=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: 3BMG6uItAs9xe89CU+uSbUQiL4CIKnWXf7xQtbg3bbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Dec 6 18:29:13 2025 GMT Not After : Dec 13 18:29:13 2025 GMT Subject: CN=693475fa-f2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:69:58:91:92:86:0a:84:08:b9:44:38:79: 5c:62:d3:7b:5a:b3:cc:75:0e:bd:e1:1a:71:0c:9d: b7:d8:77:3a:74:1b:9c:f1:50:38:ef:dd:c5:10:ac: d5:40:f2:81:c7:a2:49:a6:44:45:1f:4f:5b:0c:7b: f4:86:12:2f:7d:99:1d:86:bd:6c:81:99:1e:47:b8: 1f:e5:d9:9b:6e:52:7b:30:41:3e:c9:60:25:0a:3c: 25:77:78:6c:eb:f9:c5:91:81:39:38:70:a5:1d:09: dc:06:1f:12:84:84:e3:bb:2f:48:cb:82:25:a9:a4: fe:bc:64:8e:0f:d9:aa:4f:9b:ea:51:c4:23:9a:00: fb:a8:10:5c:15:b9:f7:3b:dd:28:83:e4:b2:85:ca: f4:3c:7c:14:e8:66:2f:3b:f8:e2:8c:3c:19:41:cd: 83:fc:6a:7d:63:32:b2:70:5e:0b:6c:be:3d:d4:4a: 2b:88:5a:83:1b:64:b4:9e:b4:d4:ea:be:a3:2b:31: bf:8e:cd:89:09:51:b9:6c:ca:d8:d3:b2:8a:97:a2: a6:c1:fc:b9:22:3e:fb:6c:ae:a4:a6:6a:0a:89:56: da:29:fd:b1:8e:9f:42:99:a8:ca:d5:79:57:29:8b: fe:26:0b:6c:f7:dc:46:be:e4:f7:10:f6:aa:34:58: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:D8:78:9F:33:90:D1:CD:83:DC:38:F6:35:14:3B:EA:B9:51:A6 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e9:d4:4b:30:2f:25:7a:b5:ef:db:e7:51:2d:b6:4d:59:34: 72:10:17:40:a9:1d:b6:7a:d4:b0:50:91:9b:4a:d3:fc:9e:14: 18:76:12:fb:f7:8b:c0:bb:bf:ee:f9:8c:28:da:24:06:94:fd: 9e:bd:74:da:00:84:5a:af:22:50:3e:6c:da:4c:37:04:4d:09: 1c:2e:e4:b7:fd:6a:ab:c6:b5:23:d0:d4:ab:c9:58:7a:6b:00: 41:13:26:cf:8e:29:d5:71:7b:e0:45:5a:d0:cb:11:5d:ff:b7: 59:b1:8e:d4:51:02:74:94:3a:5c:7d:85:31:d6:58:6b:11:b0: f8:99:54:fa:a3:8f:fa:19:c7:a3:80:d5:84:e7:7e:01:d6:32: 81:66:d3:d6:52:d5:4b:8e:97:34:99:f5:c0:06:35:bc:39:d2: b4:29:79:b0:2a:89:e2:af:7e:13:8e:ad:03:d4:3f:c1:5b:ea: c7:0d:61:3c:d0:a7:d3:43:e0:74:92:d7:bf:16:61:b7:d6:6e: 2e:d5:f1:af:bc:e3:a6:a8:fa:db:c1:65:96:5b:17:f9:18:2c: 67:44:bc:ba:c7:53:3b:37:e0:26:17:99:a5:f6:22:56:05:9a: ce:ee:0b:af:2b:76:3b:92:8b:6a:6a:e3:c6:49:be:19:d0:a8: 43:11:5a:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUxMjA2MTgyOTEzWhcNMjUxMjEzMTgyOTEzWjAYMRYwFAYD VQQDEw02OTM0NzVmYS1mMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyANpWJGShgqECLlEOHlcYtN7WrPMdQ694RpxDJ232Hc6dBuc8VA4793FEKzV QPKBx6JJpkRFH09bDHv0hhIvfZkdhr1sgZkeR7gf5dmbblJ7MEE+yWAlCjwld3hs 6/nFkYE5OHClHQncBh8ShITjuy9Iy4IlqaT+vGSOD9mqT5vqUcQjmgD7qBBcFbn3 O90og+Syhcr0PHwU6GYvO/jijDwZQc2D/Gp9YzKycF4LbL491EoriFqDG2S0nrTU 6r6jKzG/js2JCVG5bMrY07KKl6Kmwfy5Ij77bK6kpmoKiVbaKf2xjp9CmajK1XlX KYv+Jgts99xGvuT3EPaqNFi5vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwc2Hif M5DRzYPcOPY1FDvquVGmMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK6dRLMC8lerXv2+dRLbZNWTRyEBdAqR22etSwUJGbStP8nhQYdhL7 94vAu7/u+Ywo2iQGlP2evXTaAIRaryJQPmzaTDcETQkcLuS3/WqrxrUj0NSryVh6 awBBEybPjinVcXvgRVrQyxFd/7dZsY7UUQJ0lDpcfYUx1lhrEbD4mVT6o4/6Gcej gNWE534B1jKBZtPWUtVLjpc0mfXABjW8OdK0KXmwKonir34Tjq0D1D/BW+rHDWE8 0KfTQ+B0kte/FmG31m4u1fGvvOOmqPrbwWWWWxf5GCxnRLy6x1M7N+AmF5ml9iJW BZrO7guvK3Y7kotqauPGSb4Z0KhDEVqe -----END CERTIFICATE-----Generated at Sun Dec 7 01:29:02 2025 by rpki-client