This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: d2z1SrQEnHXjxinUb1qbFTtXDkRF55z5SfRyH+Qj0AU= Subject key identifier: 5D:86:E7:F7:A7:AC:26:79:5E:97:43:E9:97:69:F0:DC:9D:69:9A:3E Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 084D Signing time: Thu 04 Dec 2025 19:53:13 +0000 Manifest this update: Thu 04 Dec 2025 19:53:12 +0000 Manifest next update: Thu 11 Dec 2025 19:53:12 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: Lnzyc5haxjXVKdhYYM/9P4GjHSklF1nKen3/jCy75gg=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) 7: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Dec 4 19:53:12 2025 GMT Not After : Dec 11 19:53:12 2025 GMT Subject: CN=6931e6a9-fa45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:23:43:85:83:e8:a1:2c:6c:ac:26:0c:67: c2:7a:e4:17:da:7f:c5:18:b8:f9:6b:a0:28:1a:91: f6:25:74:ef:b2:66:d6:08:1c:ca:89:e2:a5:d0:c8: 4a:30:8e:51:67:71:6e:d1:eb:c8:6a:46:8f:f2:df: 42:02:73:e3:1e:6f:77:f7:7c:4f:5a:3a:02:a3:65: ec:75:88:40:da:fc:5c:78:56:9a:7d:7b:b8:a9:a0: 5c:73:a4:8f:4e:b4:ee:e8:e9:47:2c:ee:93:3c:4c: 0c:18:2b:0f:0e:0e:9a:d1:9c:0b:7c:ec:a0:e0:26: b1:d4:1e:7b:75:ea:30:44:36:88:f6:0c:5a:f8:af: 4e:65:2c:df:1d:91:0a:42:17:c6:78:37:49:82:7e: d7:54:55:18:06:ac:84:7b:6b:45:5e:71:7b:5f:46: 14:ee:3d:00:60:4f:02:d9:4d:e3:93:e7:f3:88:17: 5e:3b:cc:cd:04:52:06:b0:5b:31:0e:72:d9:cd:ee: 6a:1d:86:a7:b3:60:9c:f3:ee:3a:e5:c4:c1:50:1f: fe:8e:db:83:cc:d8:82:fc:12:0b:06:cf:e4:be:82: 1e:62:35:7d:01:43:91:95:e3:85:60:b4:82:16:ca: da:15:6e:d9:69:94:67:ba:c4:b7:a3:7b:00:1d:6e: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:86:E7:F7:A7:AC:26:79:5E:97:43:E9:97:69:F0:DC:9D:69:9A:3E X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f8:2c:84:00:0c:1a:b4:71:62:12:68:ec:b5:e7:2d:de:29: 5c:b2:43:dc:ee:b3:9c:5e:9d:3c:7b:e0:cf:ae:de:1b:ca:6a: df:33:1a:be:4e:42:ff:ef:92:42:ea:d0:e9:eb:60:97:60:48: c1:89:b1:ad:97:e5:93:f4:12:b3:ae:81:f6:30:e3:98:73:d9: 90:50:9f:a7:f5:83:67:8b:75:10:30:66:df:a9:af:b9:90:32: 77:23:f1:25:7c:7d:b2:8d:38:0b:15:81:0a:61:99:db:89:21: 9b:98:6f:ae:ac:f0:08:71:a1:66:30:d4:7b:30:15:51:4c:04: de:fc:94:02:9d:81:ea:61:5a:ad:6e:76:53:77:d8:bb:9d:8d: 5f:08:4c:6a:f1:43:22:53:13:ec:f8:a5:7e:41:8d:c4:d5:f6: 83:7c:c4:fa:6a:82:9e:42:6c:00:15:86:42:9d:4f:87:8e:36: 4e:18:06:53:21:37:0f:f0:b2:94:d8:14:ed:66:f2:ad:e6:61: 33:42:52:a5:b9:72:8f:b9:d4:43:15:56:0e:2a:07:89:d8:5f: 8f:1b:ee:0e:1c:25:d0:d5:c2:36:d4:e9:69:05:03:f8:45:47: 4d:d9:21:72:80:71:88:db:e4:99:fd:c3:42:11:40:aa:45:8e: fb:8d:82:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUxMjA0MTk1MzEyWhcNMjUxMjExMTk1MzEyWjAYMRYwFAYD VQQDEw02OTMxZTZhOS1mYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoG4jQ4WD6KEsbKwmDGfCeuQX2n/FGLj5a6AoGpH2JXTvsmbWCBzKieKl0MhK MI5RZ3Fu0evIakaP8t9CAnPjHm9393xPWjoCo2XsdYhA2vxceFaafXu4qaBcc6SP TrTu6OlHLO6TPEwMGCsPDg6a0ZwLfOyg4Cax1B57deowRDaI9gxa+K9OZSzfHZEK QhfGeDdJgn7XVFUYBqyEe2tFXnF7X0YU7j0AYE8C2U3jk+fziBdeO8zNBFIGsFsx DnLZze5qHYans2Cc8+465cTBUB/+jtuDzNiC/BILBs/kvoIeYjV9AUORleOFYLSC FsraFW7ZaZRnusS3o3sAHW7iswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2G5/en rCZ5XpdD6Zdp8NydaZo+MB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+CyEAAwatHFiEmjstect3ilcskPc7rOcXp08e+DPrt4bymrfMxq+ TkL/75JC6tDp62CXYEjBibGtl+WT9BKzroH2MOOYc9mQUJ+n9YNni3UQMGbfqa+5 kDJ3I/ElfH2yjTgLFYEKYZnbiSGbmG+urPAIcaFmMNR7MBVRTATe/JQCnYHqYVqt bnZTd9i7nY1fCExq8UMiUxPs+KV+QY3E1faDfMT6aoKeQmwAFYZCnU+HjjZOGAZT ITcP8LKU2BTtZvKt5mEzQlKluXKPudRDFVYOKgeJ2F+PG+4OHCXQ1cI21OlpBQP4 RUdN2SFygHGI2+SZ/cNCEUCqRY77jYLF -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:24 2025 by rpki-client