This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: tFajwlQwlzezoEDhBGnMIcUV4bQYQWFyxuK8roX/QEk= Subject key identifier: 3D:80:0B:7E:80:30:E6:FE:B5:F6:C0:CE:2F:0B:B9:38:AD:1B:BD:D8 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 0909 Signing time: Sat 06 Dec 2025 19:30:25 +0000 Manifest this update: Sat 06 Dec 2025 19:30:25 +0000 Manifest next update: Sat 13 Dec 2025 19:30:25 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: KbJwOnjIdMuYJ2VuFcO+AjGb0TqVGWJfLtx2JPMUwXY=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Dec 6 19:30:25 2025 GMT Not After : Dec 13 19:30:25 2025 GMT Subject: CN=69348451-cc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:2b:c1:c3:2d:8f:63:3b:c4:76:23:24:76: 44:08:bb:43:7b:12:8f:cd:80:a0:aa:d6:6b:64:86: 66:6b:22:ee:90:24:28:39:11:a3:4a:d5:b7:71:15: b0:e0:af:23:b4:21:5c:20:23:6c:2a:db:b6:40:62: 41:79:cd:ea:84:e1:4f:94:85:7e:db:27:e1:fb:e7: 72:09:4e:49:e0:fe:d8:42:e3:85:6e:56:39:9a:35: 18:55:2b:3d:05:32:0f:13:d1:c8:ad:0e:26:42:c0: d8:5c:5c:22:76:70:6f:31:4f:94:a9:b7:79:4a:b6: 39:ed:36:58:ca:16:be:c2:4e:59:0a:f8:cb:0c:3b: 9e:87:46:b5:a7:58:4d:1c:8a:1c:45:84:10:18:a8: de:8e:eb:3f:41:c0:24:12:f3:45:03:e5:91:e5:ce: 82:58:c9:77:da:18:8e:bc:9d:b5:23:00:3b:50:b3: 9a:24:85:89:e0:7e:95:2f:c3:f9:90:0b:0d:81:a9: 20:d4:d0:5f:90:5c:a3:41:64:d9:d1:1c:fb:04:ab: 90:d0:7b:bb:f5:8b:26:51:3c:40:95:30:69:bd:c9: d4:df:8e:33:04:f0:1c:da:cd:32:eb:70:04:37:ab: 5a:fa:a3:1d:29:b3:cf:64:b4:15:14:ab:52:bf:96: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:0B:7E:80:30:E6:FE:B5:F6:C0:CE:2F:0B:B9:38:AD:1B:BD:D8 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:22:cf:e5:fc:f3:67:8d:27:2e:2d:30:1e:88:62:f5:70: 99:fa:03:01:0e:7a:3f:1b:25:52:81:92:01:91:56:76:0b:ab: 5e:60:cb:f9:15:b4:26:eb:89:48:7c:9f:66:35:3a:22:9b:39: f5:3d:bd:55:ba:e1:2c:b6:69:f2:78:db:25:af:05:49:1b:04: 6f:73:a3:ae:29:a8:c4:9b:e1:dc:c5:ab:f7:2e:81:8b:bd:aa: 77:04:eb:e2:ee:c5:b0:ee:6c:99:fb:e9:fb:c0:d8:88:99:dd: af:0a:d4:6a:6e:74:4e:8f:aa:30:4d:2c:86:78:3e:e8:a7:32: ed:40:55:46:9f:a0:27:ab:ad:4d:f9:1a:94:3c:34:9e:95:1a: e8:2c:a0:c8:ac:52:fd:21:2f:5d:1a:8a:e8:f8:5e:70:d5:42: 2a:b2:f0:2d:62:30:59:8e:50:17:c4:e7:fe:58:da:92:66:58: 19:fb:12:3b:4d:6c:b5:c2:ce:d8:eb:26:0d:a3:71:8b:ed:50: 5b:19:01:93:6f:c5:9f:17:63:9e:30:29:45:8f:21:38:39:bc: 9c:9c:7a:c3:76:be:ab:8e:07:ee:6b:22:28:45:37:17:a1:3e: 92:38:8b:1f:a8:ab:00:51:15:6e:0d:3f:2c:ad:e6:78:8c:98: 19:dc:69:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUxMjA2MTkzMDI1WhcNMjUxMjEzMTkzMDI1WjAYMRYwFAYD VQQDEw02OTM0ODQ1MS1jYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTorwcMtj2M7xHYjJHZECLtDexKPzYCgqtZrZIZmayLukCQoORGjStW3cRWw 4K8jtCFcICNsKtu2QGJBec3qhOFPlIV+2yfh++dyCU5J4P7YQuOFblY5mjUYVSs9 BTIPE9HIrQ4mQsDYXFwidnBvMU+Uqbd5SrY57TZYyha+wk5ZCvjLDDueh0a1p1hN HIocRYQQGKjejus/QcAkEvNFA+WR5c6CWMl32hiOvJ21IwA7ULOaJIWJ4H6VL8P5 kAsNgakg1NBfkFyjQWTZ0Rz7BKuQ0Hu79YsmUTxAlTBpvcnU344zBPAc2s0y63AE N6ta+qMdKbPPZLQVFKtSv5brKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2AC36A MOb+tfbAzi8LuTitG73YMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLyLP5fzzZ40nLi0wHohi9XCZ+gMBDno/GyVSgZIBkVZ2C6teYMv5 FbQm64lIfJ9mNToimzn1Pb1VuuEstmnyeNslrwVJGwRvc6OuKajEm+Hcxav3LoGL vap3BOvi7sWw7myZ++n7wNiImd2vCtRqbnROj6owTSyGeD7opzLtQFVGn6Anq61N +RqUPDSelRroLKDIrFL9IS9dGoro+F5w1UIqsvAtYjBZjlAXxOf+WNqSZlgZ+xI7 TWy1ws7Y6yYNo3GL7VBbGQGTb8WfF2OeMClFjyE4ObycnHrDdr6rjgfuayIoRTcX oT6SOIsfqKsAURVuDT8sreZ4jJgZ3Gl7 -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:58 2025 by rpki-client