This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: HXG9Cb/7bfkcez09hRZMhjwCpmE0iNVAuJA6L3m37tM= Subject key identifier: 02:CD:EB:44:9E:58:D4:C8:51:9B:93:77:8D:12:87:5E:A1:1B:D9:71 Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 0521 Signing time: Thu 04 Dec 2025 22:09:40 +0000 Manifest this update: Thu 04 Dec 2025 22:09:40 +0000 Manifest next update: Thu 11 Dec 2025 22:09:40 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: KeX/xqvFIVNwafPhjj4HxlzmN1/SVDrEEGmg/9I4/Ts=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: cTO7dHRgQ10X2+wIM0WDWEXY+Ht/milaq+pShcIOrgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: Dec 4 22:09:40 2025 GMT Not After : Dec 11 22:09:40 2025 GMT Subject: CN=693206a4-c6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:ee:89:72:c6:23:cc:d1:09:90:63:0f:c3: 7c:0a:10:2a:6f:18:b0:97:8b:ed:b7:12:36:48:4f: fe:86:49:55:7d:42:ac:16:39:34:38:7a:95:41:7d: d7:c1:b6:02:7d:b8:13:ef:bb:d8:a7:be:6c:70:80: a2:71:55:04:f7:f7:04:dc:b0:20:97:3c:a3:31:e1: 54:a4:05:ea:32:0d:53:d4:4d:4c:75:c8:c0:d2:4e: 4f:40:40:4b:65:62:ed:53:86:63:40:8b:05:c7:51: ad:8c:27:10:a7:be:7a:04:37:17:0c:cf:d3:9c:16: 2a:38:c6:f1:02:71:31:13:34:95:b9:bf:fe:9c:7f: ad:f7:8e:b1:54:a5:6c:d4:e5:eb:31:dc:4c:e5:de: 5a:7f:49:81:09:bd:1d:67:cb:6d:ca:ae:0e:05:d0: 37:c1:6a:d6:76:43:5b:3b:ed:75:70:7c:0a:cc:fb: 05:78:14:cd:f1:a4:9b:47:6d:d2:b3:32:25:4e:11: 6f:1e:ea:78:10:0b:df:31:6a:24:bf:b8:bd:18:66: 73:22:8a:c5:bb:f4:c1:56:d0:55:7b:8c:2e:b4:2b: 9c:79:d5:e9:9f:03:0d:bc:6e:9b:6e:bf:3c:82:cd: 5a:1a:53:6f:a6:68:13:d7:b1:36:e3:75:cd:5c:c2: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CD:EB:44:9E:58:D4:C8:51:9B:93:77:8D:12:87:5E:A1:1B:D9:71 X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4b:94:9b:eb:73:b4:c4:e6:31:4f:ea:af:14:32:4f:ee:14: c2:03:23:a1:80:e3:7c:f0:f5:a9:bc:ba:34:75:a0:ac:18:38: ce:db:7f:e4:15:84:d5:ea:16:0e:09:ff:55:df:67:8d:90:23: 72:33:ea:80:3f:3d:2d:4f:02:c4:da:9c:d2:5b:68:80:1d:7c: 24:fd:3c:c6:1a:5f:24:cc:29:95:64:dc:6d:e5:b5:9c:28:2c: af:7a:44:fc:3b:9a:a6:cf:a1:a0:f3:09:7a:a4:1c:70:26:53: e4:bf:8b:19:dc:55:4d:20:e1:90:5a:e9:a0:66:d2:9f:5d:bf: de:7b:32:70:60:06:27:9b:64:67:78:83:09:1a:c2:c0:be:de: d5:34:a9:f7:b2:ae:61:15:1b:c5:a6:0f:97:98:9f:54:5b:25: f2:16:76:29:3b:74:dd:d2:d9:a1:a4:eb:70:51:d1:bf:42:a5: 3d:de:cf:2e:4e:22:4d:25:46:16:1e:9d:fc:eb:7f:29:2a:3a: 41:ce:3f:4f:5f:2d:ff:28:14:b1:c4:cb:bc:9e:8a:c2:3f:e3: 82:45:d2:33:ac:1f:d6:69:e3:d6:de:3b:4a:92:f5:9d:69:5b: fe:e4:6d:6f:97:10:d1:ca:e8:ab:e5:fc:95:3d:98:8b:31:a2: 8b:0d:3b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUxMjA0MjIwOTQwWhcNMjUxMjExMjIwOTQwWjAYMRYwFAYD VQQDEw02OTMyMDZhNC1jNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDDuiXLGI8zRCZBjD8N8ChAqbxiwl4vttxI2SE/+hklVfUKsFjk0OHqVQX3X wbYCfbgT77vYp75scICicVUE9/cE3LAglzyjMeFUpAXqMg1T1E1MdcjA0k5PQEBL ZWLtU4ZjQIsFx1GtjCcQp756BDcXDM/TnBYqOMbxAnExEzSVub/+nH+t946xVKVs 1OXrMdxM5d5af0mBCb0dZ8ttyq4OBdA3wWrWdkNbO+11cHwKzPsFeBTN8aSbR23S szIlThFvHup4EAvfMWokv7i9GGZzIorFu/TBVtBVe4wutCucedXpnwMNvG6bbr88 gs1aGlNvpmgT17E243XNXMKZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALN60Se WNTIUZuTd40Sh16hG9lxMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8S5Sb63O0xOYxT+qvFDJP7hTCAyOhgON88PWpvLo0daCsGDjO23/k FYTV6hYOCf9V32eNkCNyM+qAPz0tTwLE2pzSW2iAHXwk/TzGGl8kzCmVZNxt5bWc KCyvekT8O5qmz6Gg8wl6pBxwJlPkv4sZ3FVNIOGQWumgZtKfXb/eezJwYAYnm2Rn eIMJGsLAvt7VNKn3sq5hFRvFpg+XmJ9UWyXyFnYpO3Td0tmhpOtwUdG/QqU93s8u TiJNJUYWHp38638pKjpBzj9PXy3/KBSxxMu8norCP+OCRdIzrB/WaePW3jtKkvWd aVv+5G1vlxDRyuir5fyVPZiLMaKLDTvv -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:20 2025 by rpki-client