This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: h2elRfvUGFY7jVi1ahNmENDBGSjSMr/cal2/9whDK0U= Subject key identifier: FA:F3:00:A6:67:B2:F3:5D:1B:74:F4:B9:FC:20:91:C9:83:E2:80:75 Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 5A Signing time: Fri 05 Dec 2025 05:00:55 +0000 Manifest this update: Fri 05 Dec 2025 05:00:54 +0000 Manifest next update: Fri 12 Dec 2025 05:00:54 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: dzWmti/Xc6hmLhAg6m9N+KdCDXP3FRU7gBIVjeyYGxw=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2Lm246NHiIIsj3yU5G9cofOj46hOe93SJKM95sww3VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Dec 5 05:00:54 2025 GMT Not After : Dec 12 05:00:54 2025 GMT Subject: CN=69326706-d9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:19:83:42:73:7b:01:27:57:b8:3e:fa:f9: 0b:23:12:bf:c2:80:72:17:1c:e0:42:57:80:0d:db: 30:84:28:1e:06:81:fc:3f:ef:4f:77:36:2b:8c:0d: 25:5a:a2:08:9d:f2:06:26:f2:30:54:44:cc:0a:16: 44:f6:f9:10:e1:5d:29:b4:9d:b1:dd:29:fb:de:de: b8:56:45:05:0c:f0:df:d2:9c:fc:04:65:a5:7d:85: b7:69:ca:a5:01:e0:6a:59:39:ef:53:55:3a:aa:34: d8:ad:80:9f:51:ad:51:31:ef:db:fa:a5:fd:02:82: db:37:98:39:9b:ef:60:e9:7e:ea:24:49:36:35:18: f4:fa:26:91:1f:62:83:c0:cd:71:21:f8:3b:ca:22: 5a:e0:ed:a9:5c:91:a2:27:2c:79:33:ca:97:0f:64: 63:09:fd:1b:98:1c:db:41:b2:f2:7c:eb:4d:55:90: 62:c9:6d:99:69:ba:7e:db:fe:c4:36:09:16:c2:cc: b0:d1:f5:ab:62:11:32:07:28:58:e0:ce:d1:a8:fa: 1f:7e:a1:b7:8f:83:22:ce:32:5d:05:1f:a7:5b:02: e5:fb:6e:37:6c:96:ea:e5:c1:e1:28:ed:3f:ec:0a: 23:8c:7b:87:4d:e1:d6:2c:d4:67:65:ac:b6:2f:00: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:00:A6:67:B2:F3:5D:1B:74:F4:B9:FC:20:91:C9:83:E2:80:75 X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:de:0c:2d:3e:cf:b3:f1:05:0e:5d:11:60:81:b7:87:bc: 74:1c:f6:5d:19:7c:3d:22:5f:4f:2b:10:9c:9f:fd:71:03:66: a0:7e:38:2a:a9:b3:39:52:7e:7c:0a:be:6b:db:0b:ee:80:84: ea:04:60:82:a4:68:61:a4:62:fc:89:f6:d1:12:25:cd:4b:1b: 67:d9:e1:b7:53:c2:85:43:63:8a:10:b9:10:d0:0b:5e:6b:74: ef:f9:6f:85:a5:01:3d:5c:58:04:3f:eb:93:56:99:15:e5:aa: e0:4b:60:f8:5c:fd:6e:36:5a:34:1c:48:79:f5:2a:61:52:48: 71:35:fc:3a:9a:48:62:d2:a5:2d:6c:52:b9:ba:21:1b:ee:d6: 98:ee:1a:72:d6:5c:2a:7e:80:61:1f:25:13:73:3b:75:9d:76: 7c:58:cd:e9:67:ec:00:b7:82:dc:df:97:83:a6:65:f1:06:d3: 59:ab:0e:e6:64:38:e5:bd:e4:7f:f2:1d:f6:5c:80:57:6f:8e: 52:f3:a4:a9:56:97:4d:a1:48:01:1e:65:1e:17:6c:59:88:db: 2e:1f:71:31:6a:e2:d8:78:62:7b:19:ba:ed:c9:ca:1c:fe:61: 5c:0b:76:e6:7f:1f:c5:13:2d:bc:4c:b2:f6:08:8a:2a:4c:71: f1:75:1c:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkVGRjExMC8GA1UEBRMoMzU0MzNDOUVDNDA4MDk5RjcwMThCQzUxNDQxRDIyQzRD MTFGQzM4NTAeFw0yNTEyMDUwNTAwNTRaFw0yNTEyMTIwNTAwNTRaMBgxFjAUBgNV BAMTDTY5MzI2NzA2LWQ5ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgMhmDQnN7ASdXuD76+QsjEr/CgHIXHOBCV4AN2zCEKB4Ggfw/7093NiuMDSVa ogid8gYm8jBURMwKFkT2+RDhXSm0nbHdKfve3rhWRQUM8N/SnPwEZaV9hbdpyqUB 4GpZOe9TVTqqNNitgJ9RrVEx79v6pf0Cgts3mDmb72DpfuokSTY1GPT6JpEfYoPA zXEh+DvKIlrg7alckaInLHkzypcPZGMJ/RuYHNtBsvJ8601VkGLJbZlpun7b/sQ2 CRbCzLDR9atiETIHKFjgztGo+h9+obePgyLOMl0FH6dbAuX7bjdslurlweEo7T/s CiOMe4dN4dYs1GdlrLYvABavAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+vMApmey 810bdPS5/CCRyYPigHUwHwYDVR0jBBgwFoAUNUM8nsQICZ9wGLxRRB0ixMEfw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRUZGL0FCOTc1QkNFNDg0 OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVNOG5zUUlDWjl3R0x4UlJCMGl4TUVmdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RUZGL0FCOTc1QkNFNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5 d0dMeFJSQjBpeE1FZnc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFgJ3gwtPs+z8QUOXRFggbeHvHQc9l0ZfD0iX08rEJyf/XEDZqB+OCqp szlSfnwKvmvbC+6AhOoEYIKkaGGkYvyJ9tESJc1LG2fZ4bdTwoVDY4oQuRDQC15r dO/5b4WlAT1cWAQ/65NWmRXlquBLYPhc/W42WjQcSHn1KmFSSHE1/DqaSGLSpS1s Urm6IRvu1pjuGnLWXCp+gGEfJRNzO3WddnxYzeln7AC3gtzfl4OmZfEG01mrDuZk OOW95H/yHfZcgFdvjlLzpKlWl02hSAEeZR4XbFmI2y4fcTFq4th4YnsZuu3Jyhz+ YVwLduZ/H8UTLbxMsvYIiipMcfF1HAQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:01 2025 by rpki-client