This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: f01nVPSJl9CjKGqgAycU2BVLrvavegSSt6JgYOfQldw= Subject key identifier: AE:F7:D0:C3:17:9E:35:5C:DC:AD:2B:DC:C4:18:BC:D0:12:F9:C4:65 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0CB9 Signing time: Sat 06 Dec 2025 17:37:10 +0000 Manifest this update: Sat 06 Dec 2025 17:37:09 +0000 Manifest next update: Sat 13 Dec 2025 17:37:09 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: MVnqc/I/TXOa2V2OVTO/pDkd+EUN+1rmgrNI6awBzV8=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 9COC4JU57eLtq+93AZXJxKxezKMRUvq8Ungs1T3DP7c=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: EAQL7hv/BTjKApjc3ZIYKNpClj0rUyMUA1WrPrbN2NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Dec 6 17:37:09 2025 GMT Not After : Dec 13 17:37:09 2025 GMT Subject: CN=693469c5-f24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:ee:9c:18:5f:4d:34:87:fa:ca:04:44:c3: 25:9f:92:b8:97:ca:82:f1:0c:f6:89:a1:b4:76:0d: e2:be:80:9e:12:83:54:69:33:69:e6:9c:f1:a3:a1: 3f:a4:93:ac:a5:63:fe:c1:d6:64:3c:cf:e0:7a:cc: 29:3a:bb:9f:da:d7:1b:eb:13:aa:7f:4b:16:5a:da: de:f9:4c:65:00:f0:6d:6f:7c:3f:82:65:0f:f4:95: 11:4b:1a:0a:15:a9:99:f0:73:c7:0d:93:34:4f:3d: 14:a7:00:67:ee:98:54:86:cc:c8:e2:2b:63:b7:8e: 49:89:cb:04:f1:b1:63:41:1c:fa:28:a9:ea:cb:cb: d3:1d:09:7e:c0:42:d8:50:e8:fe:c1:57:0d:5a:cc: be:dc:37:09:c9:69:70:04:61:7b:a8:d7:dd:30:00: 03:3e:40:e4:36:36:fa:83:d7:0b:1d:81:b2:40:83: a3:df:38:6f:56:8e:bb:86:ee:fd:a3:d9:ab:2b:24: e0:57:ae:fe:9f:62:45:a9:60:d5:3f:21:80:df:d3: 92:87:79:67:c0:3b:75:f1:89:a5:fe:9e:1c:67:e9: 1c:da:15:2b:41:cc:61:0d:a3:9f:e7:2d:99:db:c7: d1:2d:3b:57:18:0d:f6:de:5d:73:13:65:91:5e:46: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:D0:C3:17:9E:35:5C:DC:AD:2B:DC:C4:18:BC:D0:12:F9:C4:65 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:23:a2:b4:4f:c4:42:12:e3:26:7e:f2:19:f3:17:c8:15:80: 6e:eb:43:26:43:73:57:27:8b:7d:a7:36:03:92:9b:65:9d:9e: 09:f7:04:80:8a:6b:92:30:60:ec:3a:37:6c:9d:e4:5c:65:ac: a1:f3:06:62:71:64:10:9c:6e:da:6b:62:a3:ae:c7:67:11:95: f6:23:0e:82:23:76:1f:6e:71:b5:8a:e3:ac:ff:38:6d:a2:b0: ac:80:ea:7e:d1:80:91:4d:70:6c:ea:20:8a:e2:8c:ed:84:f7: c9:32:4a:99:fe:d9:06:f8:f4:0b:38:b9:c7:88:f9:b6:a8:d0: 3e:ba:d5:f7:81:c7:a3:c4:97:46:75:b1:2f:8b:9b:7f:4e:c7: 7c:11:99:5e:1c:61:0f:b4:c7:63:0d:83:6a:bf:81:06:63:d6: c6:ac:8b:de:b5:b2:24:0f:a5:cb:48:12:cd:9a:e8:49:97:42: e6:f9:51:e9:f4:56:b5:fa:38:5d:54:57:0b:6f:ba:0d:5f:04: 4a:42:fd:26:2f:ca:c6:36:c0:c1:66:d6:b4:d0:3e:df:72:6f: 9e:9c:ec:eb:a4:a2:37:d7:f5:ae:a5:d9:69:84:9d:a8:01:cb: ac:4e:92:87:4b:7b:da:a4:2c:54:a4:20:42:9f:e4:6a:23:eb: 30:12:d3:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUxMjA2MTczNzA5WhcNMjUxMjEzMTczNzA5WjAYMRYwFAYD VQQDEw02OTM0NjljNS1mMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7/unBhfTTSH+soERMMln5K4l8qC8Qz2iaG0dg3ivoCeEoNUaTNp5pzxo6E/ pJOspWP+wdZkPM/geswpOruf2tcb6xOqf0sWWtre+UxlAPBtb3w/gmUP9JURSxoK FamZ8HPHDZM0Tz0UpwBn7phUhszI4itjt45JicsE8bFjQRz6KKnqy8vTHQl+wELY UOj+wVcNWsy+3DcJyWlwBGF7qNfdMAADPkDkNjb6g9cLHYGyQIOj3zhvVo67hu79 o9mrKyTgV67+n2JFqWDVPyGA39OSh3lnwDt18Yml/p4cZ+kc2hUrQcxhDaOf5y2Z 28fRLTtXGA323l1zE2WRXkYE7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK730MMX njVc3K0r3MQYvNAS+cRlMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzI6K0T8RCEuMmfvIZ8xfIFYBu60MmQ3NXJ4t9pzYDkptlnZ4J9wSA imuSMGDsOjdsneRcZayh8wZicWQQnG7aa2KjrsdnEZX2Iw6CI3YfbnG1iuOs/zht orCsgOp+0YCRTXBs6iCK4ozthPfJMkqZ/tkG+PQLOLnHiPm2qNA+utX3gcejxJdG dbEvi5t/Tsd8EZleHGEPtMdjDYNqv4EGY9bGrIvetbIkD6XLSBLNmuhJl0Lm+VHp 9Fa1+jhdVFcLb7oNXwRKQv0mL8rGNsDBZta00D7fcm+enOzrpKI31/WupdlphJ2o AcusTpKHS3vapCxUpCBCn+RqI+swEtPV -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:45 2025 by rpki-client