This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: gLC/Nt5k5dELwPBGI0Ioo6zn5H6z8diCBrR4kz8x85g= Subject key identifier: 4E:D7:AE:63:72:F8:48:D9:81:D0:CC:5A:53:B1:D6:F6:83:68:DB:E6 Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0C90 Signing time: Thu 04 Dec 2025 18:01:42 +0000 Manifest this update: Thu 04 Dec 2025 18:01:42 +0000 Manifest next update: Thu 11 Dec 2025 18:01:42 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: UoHnDb8Xh1apGnoG75ez4hFfvTCHHS370DgP6f1/7Uo=) 2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: koYkzKfCTAv1tCwfqS1UV81p0eyhkxC28R0kJ+9NqSg=) 3: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: 4mPqfTPQ2fcMHjXPMtWwiqLKnBhl1p74F2zSiB+yYkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Dec 4 18:01:42 2025 GMT Not After : Dec 11 18:01:42 2025 GMT Subject: CN=6931cc86-39ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:09:31:84:26:53:77:ce:8d:e7:b9:6c:b7: 42:78:f4:f1:88:2d:62:c2:ea:8c:9c:91:97:97:ce: d5:ef:b0:48:d6:b3:a4:2b:90:f9:e6:78:28:9e:ed: 6d:59:71:d8:15:8d:1c:b5:7e:55:04:3c:0f:f3:b4: e4:c2:ac:01:6f:06:84:e5:c1:03:58:e9:53:29:95: 55:3d:93:51:b8:27:00:c7:cb:97:61:7d:03:ae:6e: 3e:2f:b3:ae:a6:d7:3a:ea:2b:2a:f3:13:70:db:72: 2f:20:67:56:0a:87:dc:ae:a9:ec:97:c5:42:fc:cf: 3f:9c:99:26:c7:43:18:15:2a:bd:16:6e:db:06:ed: 70:fa:47:15:12:62:cc:ac:af:3b:26:7f:f7:5a:0e: 25:49:ef:63:de:96:5b:c5:e6:aa:8f:c3:ca:54:0d: 31:1c:1c:39:04:18:6a:90:6d:d6:61:76:35:1b:e9: 4b:81:d2:f1:f2:fc:c7:9b:71:01:e8:93:cd:41:43: c8:d0:0a:cc:14:8d:51:7d:a1:cf:bb:a3:e7:77:70: 12:45:5f:06:6a:0a:b4:07:71:43:ff:a7:63:0c:d4: 1d:64:fa:1f:6d:2f:2d:c0:b3:e8:27:a0:24:5d:80: 80:e5:4c:88:f1:0a:2b:03:b2:08:fe:a7:74:4d:c5: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D7:AE:63:72:F8:48:D9:81:D0:CC:5A:53:B1:D6:F6:83:68:DB:E6 X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ef:d8:9d:3b:dd:54:83:4e:ab:7a:08:d8:f1:fa:a8:9d:04: a5:88:5e:8f:74:46:32:a0:00:fb:1f:c6:8c:ab:e6:57:0e:d2: 11:45:a4:44:52:f1:b1:7b:45:15:3f:5b:b5:fb:64:9e:e1:6e: aa:52:bc:ab:a2:fe:2a:bd:1e:c2:b5:e6:1b:83:c6:d8:2d:86: f0:e8:1f:39:0a:24:2b:39:82:47:aa:b8:ac:cc:8e:1e:59:a8: aa:c3:cc:02:bc:ae:f8:52:e4:41:97:c6:ec:45:74:33:91:ef: cb:3a:1a:88:65:75:28:c8:27:e3:bf:81:40:1a:c0:f3:c9:a2: af:80:77:d1:ae:44:f8:18:f0:da:0b:9a:3e:96:05:6f:c2:50: 4c:7e:2d:39:98:ea:18:7b:38:5e:fb:34:42:70:78:2a:85:c1: 2f:bb:21:83:7b:ff:fb:e1:a4:42:c1:ad:a4:30:b4:9c:d8:69: c5:25:d9:31:85:9c:32:82:66:4a:3c:98:f2:1b:54:fb:ca:c6: 02:8b:fc:e3:ff:33:08:8b:16:93:ed:29:6b:83:dd:5e:07:ec: 1f:3f:23:f5:03:0d:b3:61:d7:de:ac:3b:2f:b8:bf:c2:80:75: 9e:f1:2b:d8:4b:5b:bf:8b:66:0c:d3:56:cc:74:1b:01:00:2b: 56:13:90:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUxMjA0MTgwMTQyWhcNMjUxMjExMTgwMTQyWjAYMRYwFAYD VQQDEw02OTMxY2M4Ni0zOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRgJMYQmU3fOjee5bLdCePTxiC1iwuqMnJGXl87V77BI1rOkK5D55ngonu1t WXHYFY0ctX5VBDwP87TkwqwBbwaE5cEDWOlTKZVVPZNRuCcAx8uXYX0Drm4+L7Ou ptc66isq8xNw23IvIGdWCofcrqnsl8VC/M8/nJkmx0MYFSq9Fm7bBu1w+kcVEmLM rK87Jn/3Wg4lSe9j3pZbxeaqj8PKVA0xHBw5BBhqkG3WYXY1G+lLgdLx8vzHm3EB 6JPNQUPI0ArMFI1RfaHPu6Pnd3ASRV8Gagq0B3FD/6djDNQdZPofbS8twLPoJ6Ak XYCA5UyI8QorA7II/qd0TcWwAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7XrmNy +EjZgdDMWlOx1vaDaNvmMB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz79idO91Ug06regjY8fqonQSliF6PdEYyoAD7H8aMq+ZXDtIRRaRE UvGxe0UVP1u1+2Se4W6qUryrov4qvR7CteYbg8bYLYbw6B85CiQrOYJHqriszI4e Waiqw8wCvK74UuRBl8bsRXQzke/LOhqIZXUoyCfjv4FAGsDzyaKvgHfRrkT4GPDa C5o+lgVvwlBMfi05mOoYezhe+zRCcHgqhcEvuyGDe//74aRCwa2kMLSc2GnFJdkx hZwygmZKPJjyG1T7ysYCi/zj/zMIixaT7Slrg91eB+wfPyP1Aw2zYdferDsvuL/C gHWe8SvYS1u/i2YM01bMdBsBACtWE5AR -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:54 2025 by rpki-client