This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: AdQdnkMFKqX2PT2ongpzZjIeRVTy90XgRjFslRMi8U4= Subject key identifier: 29:4D:10:0B:EB:1B:20:28:1F:09:55:22:1D:82:C4:08:A9:D5:A0:4A Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CF4 Signing time: Sat 06 Dec 2025 17:30:26 +0000 Manifest this update: Sat 06 Dec 2025 17:30:25 +0000 Manifest next update: Sat 13 Dec 2025 17:30:25 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: pqDIJof8kk3EWvJFxu8chwlsz815gUB3XwGw9yd5kq8=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Dec 6 17:30:25 2025 GMT Not After : Dec 13 17:30:25 2025 GMT Subject: CN=69346831-c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:6b:00:a6:af:8b:bf:28:07:ba:6f:d7:7c: e5:ea:37:4c:f2:e6:95:30:cc:cb:95:6d:99:52:3e: b9:99:07:ef:82:7d:86:13:e9:78:cf:ea:2d:f4:31: 87:df:cc:0b:56:27:27:85:38:2f:a8:c6:76:97:71: ea:c4:de:73:23:9c:b0:e9:ff:67:63:f3:72:23:fa: 3e:07:00:34:d9:f1:d6:32:25:f2:f3:ff:98:e1:81: 12:6b:e8:72:d6:6f:5a:d9:af:d2:c1:a0:21:c4:ea: 24:27:de:d7:7c:aa:59:c9:dc:3e:b7:37:57:b8:06: 4b:3a:c1:e9:69:a6:a3:f4:d5:cc:97:7f:50:e5:4e: 07:5a:ad:97:2a:d5:44:3a:4e:d1:6f:5e:1e:87:53: 8f:bb:d0:28:7e:7f:16:54:fe:a2:32:cf:55:6c:78: e3:1b:c2:e0:3c:10:95:b9:cd:c1:ff:ef:e8:38:e7: ec:58:62:73:f3:b8:92:af:65:1f:b0:93:51:57:59: 22:98:b6:04:cb:fb:e7:b5:4c:ff:bd:0f:46:fe:6a: bb:6a:ec:0a:2b:36:c4:4a:e2:5a:ab:1b:cf:f2:15: a4:fb:7f:26:68:2d:a2:16:0b:67:8c:92:81:aa:e0: f0:0c:67:67:23:26:54:c3:dd:33:a2:f1:5b:64:6c: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4D:10:0B:EB:1B:20:28:1F:09:55:22:1D:82:C4:08:A9:D5:A0:4A X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:10:3e:ec:7b:e8:40:ad:c0:75:42:a4:46:bf:15:a0:80:00: ba:6d:57:dc:35:fa:23:a9:f7:01:91:b6:6c:70:e3:1b:16:37: 95:74:0a:8b:dd:03:9f:a5:50:2f:6d:60:9b:bb:37:2a:d9:39: 04:00:4f:ae:3e:40:19:bf:b2:68:6c:51:33:8d:9f:29:bc:c0: 0c:ab:60:fd:b1:0c:e5:79:f5:9c:5d:4e:8f:2a:b5:d0:db:e4: 6e:26:86:d8:6e:86:92:d1:91:66:20:e7:19:b9:62:e7:b4:ce: 3f:bc:16:14:0a:61:0e:0b:0a:1a:aa:06:ad:8d:1a:73:ce:10: ea:6b:6e:63:7c:e1:d0:db:83:8c:3c:8c:1a:86:ff:b8:1a:40: 31:ed:fd:d0:ce:4c:d4:20:6c:e6:ac:f5:27:10:2c:c2:d5:30: fe:cf:91:c8:af:0a:fd:ba:5b:46:93:6f:da:78:d7:97:63:66: a3:14:c6:e8:6b:78:7e:21:a4:2f:4a:d5:19:01:07:ca:a0:5b: 11:4e:3d:15:ac:2c:9f:3f:0b:7c:b1:34:15:a7:f8:79:1f:07: af:48:d6:60:c4:7d:5e:0b:02:89:15:3e:5b:5c:30:ad:27:b8: 13:5a:be:65:19:44:78:54:40:d0:0c:ea:ad:7b:a8:4a:12:5f: dd:0d:97:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUxMjA2MTczMDI1WhcNMjUxMjEzMTczMDI1WjAYMRYwFAYD VQQDEw02OTM0NjgzMS1jMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zdrAKavi78oB7pv13zl6jdM8uaVMMzLlW2ZUj65mQfvgn2GE+l4z+ot9DGH 38wLVicnhTgvqMZ2l3HqxN5zI5yw6f9nY/NyI/o+BwA02fHWMiXy8/+Y4YESa+hy 1m9a2a/SwaAhxOokJ97XfKpZydw+tzdXuAZLOsHpaaaj9NXMl39Q5U4HWq2XKtVE Ok7Rb14eh1OPu9Aofn8WVP6iMs9VbHjjG8LgPBCVuc3B/+/oOOfsWGJz87iSr2Uf sJNRV1kimLYEy/vntUz/vQ9G/mq7auwKKzbESuJaqxvP8hWk+38maC2iFgtnjJKB quDwDGdnIyZUw90zovFbZGzghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClNEAvr GyAoHwlVIh2CxAip1aBKMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjED7se+hArcB1QqRGvxWggAC6bVfcNfojqfcBkbZscOMbFjeVdAqL 3QOfpVAvbWCbuzcq2TkEAE+uPkAZv7JobFEzjZ8pvMAMq2D9sQzlefWcXU6PKrXQ 2+RuJobYboaS0ZFmIOcZuWLntM4/vBYUCmEOCwoaqgatjRpzzhDqa25jfOHQ24OM PIwahv+4GkAx7f3QzkzUIGzmrPUnECzC1TD+z5HIrwr9ultGk2/aeNeXY2ajFMbo a3h+IaQvStUZAQfKoFsRTj0VrCyfPwt8sTQVp/h5HwevSNZgxH1eCwKJFT5bXDCt J7gTWr5lGUR4VEDQDOqte6hKEl/dDZff -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:54 2025 by rpki-client