This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: gHyhTOgXfSjG2rmfgNxEqY7Zq/BhuTvkL5hVNyS0nTw= Subject key identifier: 68:C8:C4:02:0F:91:3B:0B:FB:FA:B5:DF:BE:72:AE:B9:17:90:3B:55 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: 0150 Signing time: Fri 05 Dec 2025 02:22:44 +0000 Manifest this update: Fri 05 Dec 2025 02:22:44 +0000 Manifest next update: Fri 12 Dec 2025 02:22:44 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: K/TbHUbEiDm6gCFBFYb2NvTikMdJDphrGnLVcO8TLQU=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: Dec 5 02:22:44 2025 GMT Not After : Dec 12 02:22:44 2025 GMT Subject: CN=693241f4-4294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:af:82:35:ff:11:7a:c6:b4:2d:a1:8d:d4: 0a:d1:56:e5:0a:28:c2:95:fc:de:e5:c9:13:29:db: bd:9e:8c:d6:f9:90:2e:68:f5:16:93:9f:77:b0:40: 46:55:58:62:33:88:69:f8:ff:4d:c3:03:64:fc:b2: 6d:e9:12:fe:e5:67:ad:4e:63:58:d0:2a:3d:55:80: 89:e5:49:73:31:b5:f3:56:cf:52:e1:54:14:dd:cd: d8:25:9f:66:95:b6:54:f6:ca:6b:0a:14:62:99:d7: c2:2f:cc:03:8f:96:54:e5:7d:67:97:63:e2:aa:21: 3b:1f:e3:a5:79:48:11:80:0d:bd:5c:7e:16:7a:38: a1:8e:34:dc:e3:fa:1b:82:06:89:df:bc:99:08:c7: 8d:07:0b:6d:12:07:ea:d4:db:23:9e:e3:0d:a0:c6: 5c:9b:f1:d9:e1:da:b0:eb:01:0f:1c:15:e8:01:03: 26:62:5c:dc:20:4b:92:37:ca:7a:9a:73:b7:6c:0d: 27:d6:7c:a3:31:be:53:b5:3d:e7:4c:af:0e:f3:67: 59:fe:bb:32:8e:83:de:fd:b3:00:06:52:e0:ae:70: 89:f4:2f:96:10:b5:e8:fc:9d:8a:54:8f:d5:ba:09: 60:2b:52:8d:0b:b8:bc:69:40:81:d6:5f:93:e5:9e: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C8:C4:02:0F:91:3B:0B:FB:FA:B5:DF:BE:72:AE:B9:17:90:3B:55 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:52:01:06:f8:68:06:c4:ce:0c:68:eb:7c:c6:76:1e:a1:34: 7b:48:9d:60:ea:46:84:3f:e3:02:43:f5:d0:15:15:e2:cd:24: ad:0e:92:d0:93:84:e2:d9:53:c0:60:7e:51:8e:c3:cf:a3:85: 06:15:01:a1:3c:9b:6e:8e:32:45:65:5e:01:22:03:4b:11:04: d1:de:fb:6b:97:46:d0:74:2a:a4:ca:ea:b5:5a:0f:d8:2d:79: fa:ac:09:0d:d3:d9:ec:3e:6d:39:2d:37:a4:98:a2:2f:70:1d: 32:98:bf:64:9f:64:f8:ba:8d:d4:db:e7:14:d1:3a:3d:82:54: b3:d4:ed:ca:14:3b:06:f9:26:1e:a2:32:d1:02:e4:74:16:ef: 00:23:36:04:22:31:33:71:3b:6b:a7:39:f1:b3:0c:4a:91:5c: 24:7a:4d:c3:90:4d:ff:5d:ec:26:c5:16:ea:e2:28:c9:78:87: 2b:8a:70:89:0d:e2:af:8b:72:09:54:38:ac:50:eb:ab:40:36: fa:b6:41:1f:63:e8:57:e2:59:23:0f:12:b7:9c:d0:53:6e:73: 30:b7:19:c0:32:e0:04:c8:3d:f5:a6:04:6a:4a:af:83:c4:69: 54:09:cf:06:9c:b4:68:99:c3:c4:a6:b7:d8:09:08:c0:65:77: 7d:fb:62:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUxMjA1MDIyMjQ0WhcNMjUxMjEyMDIyMjQ0WjAYMRYwFAYD VQQDEw02OTMyNDFmNC00Mjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fCvgjX/EXrGtC2hjdQK0VblCijClfze5ckTKdu9nozW+ZAuaPUWk593sEBG VVhiM4hp+P9NwwNk/LJt6RL+5WetTmNY0Co9VYCJ5UlzMbXzVs9S4VQU3c3YJZ9m lbZU9sprChRimdfCL8wDj5ZU5X1nl2PiqiE7H+OleUgRgA29XH4WejihjjTc4/ob ggaJ37yZCMeNBwttEgfq1NsjnuMNoMZcm/HZ4dqw6wEPHBXoAQMmYlzcIEuSN8p6 mnO3bA0n1nyjMb5TtT3nTK8O82dZ/rsyjoPe/bMABlLgrnCJ9C+WELXo/J2KVI/V uglgK1KNC7i8aUCB1l+T5Z5o9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjIxAIP kTsL+/q1375yrrkXkDtVMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlUgEG+GgGxM4MaOt8xnYeoTR7SJ1g6kaEP+MCQ/XQFRXizSStDpLQ k4Ti2VPAYH5RjsPPo4UGFQGhPJtujjJFZV4BIgNLEQTR3vtrl0bQdCqkyuq1Wg/Y LXn6rAkN09nsPm05LTekmKIvcB0ymL9kn2T4uo3U2+cU0To9glSz1O3KFDsG+SYe ojLRAuR0Fu8AIzYEIjEzcTtrpznxswxKkVwkek3DkE3/XewmxRbq4ijJeIcrinCJ DeKvi3IJVDisUOurQDb6tkEfY+hX4lkjDxK3nNBTbnMwtxnAMuAEyD31pgRqSq+D xGlUCc8GnLRomcPEprfYCQjAZXd9+2J7 -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:11 2025 by rpki-client