This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: J8EqyVUHhEPb8oXwQHnnYMhVL3betwi9e0/vUKBzB4g= Subject key identifier: C4:89:1E:C3:E9:2B:80:1A:2C:D2:B0:89:F6:E3:5D:1E:2C:4D:14:34 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07EF Signing time: Thu 04 Dec 2025 21:02:53 +0000 Manifest this update: Thu 04 Dec 2025 21:02:53 +0000 Manifest next update: Thu 11 Dec 2025 21:02:53 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: UyBv4pOzNt9HEJZvpSMxFX3lTkQnp5GvnYp+Ybn8G2A=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: XMlKN3xoWR211awSFj7o4wXNUVPU6g4tGLZ46VoBBkc=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: w9Ld0KkWk+HSLE94pTgnMmO75l3YO/TEPXrwE1OHV3U=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: wM1mmKNlwwEGHyhB8WEo2P8zb520cmuZMxNTLioe/2U=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: /m3np215OehHUCdDTNchzJpCWnkgfvYQ66txJ67HLU4=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: 80Bbu5vAr9GzJbHLW7ykwoxorF8FcLcIQYcqc83u1us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Dec 4 21:02:53 2025 GMT Not After : Dec 11 21:02:53 2025 GMT Subject: CN=6931f6fd-4f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:88:a9:59:04:53:7f:98:04:ea:73:aa:2b: b9:ad:aa:0b:37:f7:26:e0:5f:02:a4:94:98:61:fe: 46:cb:4e:ca:f4:f0:a3:03:dc:d5:38:5a:c9:dd:fd: 71:fc:f0:97:27:1b:8d:12:d3:14:89:dc:4f:3f:fc: 30:0e:41:f9:94:f3:39:53:e3:ce:f1:18:8d:c4:65: 51:12:2d:d4:24:b3:31:51:83:8c:0d:fb:98:0b:87: 49:be:98:89:21:e1:b6:54:90:bc:77:45:93:09:36: 07:97:95:89:56:1c:86:26:f9:fa:09:9d:35:6a:9b: 11:cf:8f:03:f0:0f:bc:8c:8e:1b:7b:29:41:80:63: 9e:40:af:da:e0:9c:f7:4a:64:00:6a:a3:ef:7c:e6: 36:bf:b6:09:83:77:50:cd:64:5f:42:2a:75:77:4c: 6e:7a:6b:be:ef:67:a8:33:64:e1:5a:7e:e6:d2:94: bc:48:d2:60:15:89:ce:eb:12:36:41:21:ae:ee:15: 37:33:83:32:29:59:f1:9a:27:65:d4:10:a8:8f:fc: d7:58:a2:99:8f:90:2e:53:94:df:63:0c:19:a9:14: 24:1e:31:3a:f1:52:dd:c2:4d:7b:86:4b:a1:5a:5a: a5:cb:bf:bc:aa:56:7d:a3:6c:89:dd:27:b7:af:8f: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:89:1E:C3:E9:2B:80:1A:2C:D2:B0:89:F6:E3:5D:1E:2C:4D:14:34 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:80:7d:c8:00:3a:a3:60:aa:57:c1:2e:d7:02:e5:ae:7b:70: 03:ee:a3:99:bf:31:45:e6:e6:3f:3b:20:44:2c:0d:86:c6:26: eb:36:69:06:49:15:bf:fc:7d:19:2b:f9:a3:9d:60:49:f3:9f: 2a:03:7a:1d:3c:fd:0a:90:97:0f:aa:b0:2d:53:0a:02:ae:a8: 04:d2:59:71:d4:85:f2:4f:62:b7:49:0d:33:f4:4e:3b:7d:18: 48:f2:2c:2f:d6:33:80:58:42:ae:bc:c3:30:f6:33:b9:94:02: b7:e6:da:08:94:3d:83:2a:ce:56:09:44:00:90:fd:8c:13:2b: 16:ca:ef:31:f0:c9:75:52:85:53:7f:4e:8d:dd:63:34:a9:7e: d4:74:e6:4c:8a:13:f0:ff:5f:f5:e5:51:58:f5:08:55:06:0b: e0:fa:56:45:fc:1b:5f:5f:46:03:b4:3e:2f:13:aa:68:92:6c: 12:71:91:25:e0:b5:61:73:7d:4b:ea:fb:c9:ec:70:3c:62:ac: ab:3d:83:a1:51:19:0c:78:a8:d2:83:02:7a:f9:5a:b2:d6:9c: ff:55:7f:14:c0:89:67:8e:2e:66:aa:dd:f1:fb:2b:5a:e7:25: 9e:9e:2f:25:03:e4:8f:5b:90:80:b4:ba:ab:8f:19:bc:77:8f: 9e:3c:02:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUxMjA0MjEwMjUzWhcNMjUxMjExMjEwMjUzWjAYMRYwFAYD VQQDEw02OTMxZjZmZC00ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI6IqVkEU3+YBOpzqiu5raoLN/cm4F8CpJSYYf5Gy07K9PCjA9zVOFrJ3f1x /PCXJxuNEtMUidxPP/wwDkH5lPM5U+PO8RiNxGVREi3UJLMxUYOMDfuYC4dJvpiJ IeG2VJC8d0WTCTYHl5WJVhyGJvn6CZ01apsRz48D8A+8jI4beylBgGOeQK/a4Jz3 SmQAaqPvfOY2v7YJg3dQzWRfQip1d0xuemu+72eoM2ThWn7m0pS8SNJgFYnO6xI2 QSGu7hU3M4MyKVnxmidl1BCoj/zXWKKZj5AuU5TfYwwZqRQkHjE68VLdwk17hkuh Wlqly7+8qlZ9o2yJ3Se3r4/8FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSJHsPp K4AaLNKwifbjXR4sTRQ0MB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxgH3IADqjYKpXwS7XAuWue3AD7qOZvzFF5uY/OyBELA2GxibrNmkG SRW//H0ZK/mjnWBJ858qA3odPP0KkJcPqrAtUwoCrqgE0llx1IXyT2K3SQ0z9E47 fRhI8iwv1jOAWEKuvMMw9jO5lAK35toIlD2DKs5WCUQAkP2MEysWyu8x8Ml1UoVT f06N3WM0qX7UdOZMihPw/1/15VFY9QhVBgvg+lZF/BtfX0YDtD4vE6pokmwScZEl 4LVhc31L6vvJ7HA8YqyrPYOhURkMeKjSgwJ6+Vqy1pz/VX8UwIlnji5mqt3x+yta 5yWeni8lA+SPW5CAtLqrjxm8d4+ePALT -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:35 2025 by rpki-client