This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: 2G7/Z0xxVPNA/B2MBcD6LB2H3mkl93kdyMJhCDgqfN0= Subject key identifier: 3C:D7:88:7D:60:E3:30:EA:67:1E:DD:B4:E3:F3:4E:0F:FF:D7:18:79 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F73 Signing time: Sat 06 Dec 2025 15:42:31 +0000 Manifest this update: Sat 06 Dec 2025 15:42:30 +0000 Manifest next update: Sat 13 Dec 2025 15:42:30 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: spgakBTUldwdoSFqvIyWeX0CtUFxXdYCozxPgwahXKw=) 2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: Q+uFycE7+V0oo3Wg+zV0C0ahPstb+VAATgmaTbfe6Ok=) 3: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: ibBODN1+4t8yWfSYY+KvUP9ZEG2mJoJSb+sBmfr0WGQ=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: BJs0/jRPcsGJBvrYHUb3ul04BseX67DNX5XwfN1Yugw=) 5: 899DC6D2AF8411F0B9D1E64AC4F9AE02.roa (hash: Y4e0zUUmm0EtOQAVb1xGQ/WyDzb4AhxO88RKDT2NuDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8055 (0x1f77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Dec 6 15:42:30 2025 GMT Not After : Dec 13 15:42:30 2025 GMT Subject: CN=69344ee6-b661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:1b:a3:2d:e4:34:f8:34:61:c0:f7:a4:73: ae:a2:e4:02:68:0b:28:48:d5:1d:5a:3a:fe:7c:4d: 4c:cf:36:bd:1b:02:b4:b1:13:73:6e:dc:fe:9e:87: 46:3c:d6:8f:d8:b4:06:73:9a:1b:e7:b3:c0:d6:55: dc:47:20:08:3a:84:c6:9e:ce:4c:01:4f:66:fd:e8: a7:98:02:a6:01:d4:0d:42:d0:66:66:8d:75:92:e3: 6c:0a:ee:20:3b:d8:4a:6c:f4:3b:f6:76:73:86:5b: 9f:35:a9:26:28:16:c5:bd:6b:79:77:fd:59:ff:35: f4:b6:50:7a:f0:b4:d5:b0:73:ef:eb:86:e9:64:8b: f5:da:6e:80:13:b6:d8:80:a5:d9:72:62:76:a5:e2: 75:ad:15:ce:22:81:46:d3:c0:67:f2:f9:b6:9a:58: 6c:0d:66:b6:49:ab:be:57:eb:11:de:64:d5:54:1e: 07:48:e7:69:9e:0c:e4:1e:65:04:10:d2:20:66:51: 16:df:d4:2e:52:9a:6e:5d:fe:b4:b1:df:bb:dc:cc: 9c:76:d2:75:da:c7:03:b0:c1:81:24:7f:4a:c4:be: 77:fe:44:43:f4:03:63:30:99:1e:8f:e1:aa:5f:4f: 8b:50:93:a1:d3:bd:d5:c2:5e:8d:92:6a:f5:87:1a: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:88:7D:60:E3:30:EA:67:1E:DD:B4:E3:F3:4E:0F:FF:D7:18:79 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c4:4d:5c:5d:a1:55:21:70:75:fb:9f:97:b6:02:73:88:40: 57:02:85:56:91:57:9e:66:43:8d:2e:d2:b5:09:ea:a5:91:04: dc:54:69:1c:c0:55:e0:ba:85:51:ec:55:34:ae:f0:17:39:05: 00:b0:7b:4b:73:cd:de:ad:bf:a4:2a:fe:19:ae:0d:47:7c:29: 3b:fb:0f:85:e5:37:fb:5d:5f:79:c8:54:0d:57:84:01:4d:33: 1c:fd:0e:27:0f:b5:37:1c:29:d2:57:75:85:3e:9f:60:d6:b2: a9:df:d3:43:5d:89:0c:c7:a4:2d:96:aa:df:9f:ec:a2:4a:78: 87:00:6b:0c:9e:18:a8:74:da:b7:97:d5:77:86:9f:86:3c:a9: 86:8c:d1:a2:2c:e8:36:a8:9b:26:b4:63:cd:d4:36:55:7c:13: 37:70:38:9c:67:4d:fd:7e:50:cf:fe:2c:c7:d8:55:07:bf:e4: db:3e:f2:f8:04:16:f9:67:d7:18:eb:0c:f4:f8:88:e9:6a:be: 7d:12:8a:c0:fe:a8:9a:0a:cf:e2:6e:75:6c:fb:59:03:64:47: 45:23:5a:95:c2:36:22:d6:5c:ad:1a:c4:4b:f7:10:ab:b4:ed: 38:a1:46:0e:3c:25:30:c1:ab:15:80:ca:7d:5a:cc:c5:1b:84: a2:c4:17:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUxMjA2MTU0MjMwWhcNMjUxMjEzMTU0MjMwWjAYMRYwFAYD VQQDEw02OTM0NGVlNi1iNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRUboy3kNPg0YcD3pHOuouQCaAsoSNUdWjr+fE1Mzza9GwK0sRNzbtz+nodG PNaP2LQGc5ob57PA1lXcRyAIOoTGns5MAU9m/einmAKmAdQNQtBmZo11kuNsCu4g O9hKbPQ79nZzhlufNakmKBbFvWt5d/1Z/zX0tlB68LTVsHPv64bpZIv12m6AE7bY gKXZcmJ2peJ1rRXOIoFG08Bn8vm2mlhsDWa2Sau+V+sR3mTVVB4HSOdpngzkHmUE ENIgZlEW39QuUppuXf60sd+73MycdtJ12scDsMGBJH9KxL53/kRD9ANjMJkej+Gq X0+LUJOh073Vwl6Nkmr1hxpq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzXiH1g 4zDqZx7dtOPzTg//1xh5MB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7xE1cXaFVIXB1+5+XtgJziEBXAoVWkVeeZkONLtK1CeqlkQTcVGkc wFXguoVR7FU0rvAXOQUAsHtLc83erb+kKv4Zrg1HfCk7+w+F5Tf7XV95yFQNV4QB TTMc/Q4nD7U3HCnSV3WFPp9g1rKp39NDXYkMx6Qtlqrfn+yiSniHAGsMnhiodNq3 l9V3hp+GPKmGjNGiLOg2qJsmtGPN1DZVfBM3cDicZ039flDP/izH2FUHv+TbPvL4 BBb5Z9cY6wz0+Ijpar59EorA/qiaCs/ibnVs+1kDZEdFI1qVwjYi1lytGsRL9xCr tO04oUYOPCUwwasVgMp9WszFG4SixBdg -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:29 2025 by rpki-client