This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: 7OBU44w9q4m4CkC7Spv3P3SWShpHIUmGlOegNkdk6rg= Subject key identifier: 95:17:4B:37:A6:99:53:A8:2C:E4:30:82:CB:EB:09:DC:16:DE:15:B6 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0D06 Signing time: Thu 04 Dec 2025 17:36:02 +0000 Manifest this update: Thu 04 Dec 2025 17:36:02 +0000 Manifest next update: Thu 11 Dec 2025 17:36:02 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: zuVbZmQBB1LxDBm8eT62/BwcerYVx/lPhkqC3pC6mKk=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: ovp+DvhtxAcfaLvm4B/msgxFKoL594Nnc6PIvhnqZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Dec 4 17:36:02 2025 GMT Not After : Dec 11 17:36:02 2025 GMT Subject: CN=6931c682-e58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:af:25:b6:31:0b:07:53:e4:70:66:87:b8: 8c:88:61:92:e3:04:be:27:55:9a:bd:8d:70:f5:92: 91:e1:f7:8b:33:0a:7a:8f:9c:4a:f1:31:18:d0:f2: b0:02:1d:cd:17:8b:30:01:2f:b8:5a:3e:c2:2e:02: b1:14:d4:45:4f:e7:f3:81:28:c3:e7:52:a7:ba:8c: 71:49:5c:8a:d0:20:68:13:df:10:cc:6d:d6:75:99: 9b:ae:94:bc:cc:3a:22:39:ba:fa:bd:ad:28:b6:50: cf:25:8b:7a:b5:42:01:77:c5:f4:a9:ba:69:1c:5f: 3b:02:30:7f:71:71:16:d3:ce:f6:2e:99:aa:7c:c3: 6c:58:5a:57:b5:78:84:75:ba:e3:f0:27:0b:26:5a: 05:c7:2e:85:c1:88:17:50:35:72:49:4b:55:c0:a0: dd:a9:89:d7:2c:44:bf:a2:3e:59:71:2f:bd:d4:a3: da:cc:e5:a6:72:27:71:44:1d:b9:0e:10:a5:61:1e: 36:9c:ff:3b:88:15:bd:e1:32:1f:7c:50:70:38:5e: 21:7b:22:6d:e0:48:d1:d7:0b:d3:db:b3:33:8c:99: c9:5c:2a:46:d1:5b:20:0d:15:45:2c:c0:86:69:ee: b7:59:a4:bf:fe:8c:a0:ab:d0:f3:34:72:be:80:44: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:4B:37:A6:99:53:A8:2C:E4:30:82:CB:EB:09:DC:16:DE:15:B6 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:0f:3c:c0:79:c1:f8:e0:89:04:62:db:dd:30:d6:45:dc:33: 3f:0d:3d:53:93:36:c1:76:eb:7b:21:21:0f:e4:91:1d:c8:5b: 3b:a8:db:c3:bd:d8:a7:8c:7c:28:f7:e7:3c:da:4f:d2:93:58: b3:92:ef:ba:98:4b:91:ba:1c:27:6e:b7:61:f7:f5:3a:37:54: c3:bf:4c:fa:0b:e1:85:a1:4d:4d:26:58:3f:4e:58:ee:e5:fc: 0f:82:a3:09:cc:10:e0:db:52:18:dd:cc:54:a0:0c:1c:f6:54: 59:c9:de:f8:ee:2d:4f:1c:d8:e8:86:af:b9:0f:48:2e:a1:fa: dc:d3:99:93:7c:1b:f9:b7:1c:06:b3:a2:bd:89:78:03:1f:1f: 70:30:37:83:72:70:9d:6e:f3:34:d5:08:00:bb:5f:05:af:8a: 8a:a1:43:81:67:86:86:2e:aa:fb:0a:2b:fd:54:c7:a9:b5:98: 8b:43:a7:d0:56:78:93:37:96:15:ce:c7:95:31:c3:b4:80:4a: 99:5d:47:bd:b7:d0:af:8d:eb:ee:b8:cf:60:52:68:fa:d4:34: 55:a1:00:3d:e3:8f:98:61:3b:e6:b4:af:d8:ce:7b:86:db:40: 2b:d5:4d:26:9b:0e:56:04:2a:30:36:e1:07:9d:bc:c6:46:83: 0e:1e:73:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUxMjA0MTczNjAyWhcNMjUxMjExMTczNjAyWjAYMRYwFAYD VQQDEw02OTMxYzY4Mi1lNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/OvJbYxCwdT5HBmh7iMiGGS4wS+J1WavY1w9ZKR4feLMwp6j5xK8TEY0PKw Ah3NF4swAS+4Wj7CLgKxFNRFT+fzgSjD51KnuoxxSVyK0CBoE98QzG3WdZmbrpS8 zDoiObr6va0otlDPJYt6tUIBd8X0qbppHF87AjB/cXEW0872LpmqfMNsWFpXtXiE dbrj8CcLJloFxy6FwYgXUDVySUtVwKDdqYnXLES/oj5ZcS+91KPazOWmcidxRB25 DhClYR42nP87iBW94TIffFBwOF4heyJt4EjR1wvT27MzjJnJXCpG0VsgDRVFLMCG ae63WaS//oygq9DzNHK+gESzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUXSzem mVOoLOQwgsvrCdwW3hW2MB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtDzzAecH44IkEYtvdMNZF3DM/DT1TkzbBdut7ISEP5JEdyFs7qNvD vdinjHwo9+c82k/Sk1izku+6mEuRuhwnbrdh9/U6N1TDv0z6C+GFoU1NJlg/Tlju 5fwPgqMJzBDg21IY3cxUoAwc9lRZyd747i1PHNjohq+5D0guofrc05mTfBv5txwG s6K9iXgDHx9wMDeDcnCdbvM01QgAu18Fr4qKoUOBZ4aGLqr7Civ9VMeptZiLQ6fQ VniTN5YVzseVMcO0gEqZXUe9t9CvjevuuM9gUmj61DRVoQA944+YYTvmtK/YznuG 20Ar1U0mmw5WBCowNuEHnbzGRoMOHnMt -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:10 2025 by rpki-client