This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: R46WFfRRxfBK5HQAwIinBFepq8haZw49s9nQX/kDGKI= Subject key identifier: 98:4B:DC:BB:E4:AF:54:CE:D7:DF:2C:4A:9E:DA:18:33:AB:9B:59:1E Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0BAE Signing time: Sat 06 Dec 2025 18:16:17 +0000 Manifest this update: Sat 06 Dec 2025 18:16:16 +0000 Manifest next update: Sat 13 Dec 2025 18:16:16 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: OIFLJ8BG01Sz6+E8mqva3TPLAB1M/o1jhd3PvJnJ/KQ=) 2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=) 3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Dec 6 18:16:16 2025 GMT Not After : Dec 13 18:16:16 2025 GMT Subject: CN=693472f1-5cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:f3:13:31:e4:0d:e1:50:da:2e:9e:1f:cb: 86:3d:28:f0:4f:6a:b6:ea:14:95:bf:5f:88:86:e6: fc:5b:1b:87:47:2e:76:6c:3e:8c:5d:40:d3:53:2b: 1f:fc:fe:0a:a4:ab:5c:2f:6f:f1:96:3d:28:3b:cf: 9f:85:98:b4:c5:1a:ea:34:dc:c3:da:dc:ca:85:9d: 0f:64:50:b9:3a:9a:8c:55:73:49:e7:08:c1:3a:e2: 9a:7b:12:27:17:72:1a:7b:02:33:3f:06:cf:1d:e3: 51:3b:6d:1d:c9:fc:6c:01:bb:51:fa:b3:7c:c2:c3: 4c:e8:ea:70:b3:2d:da:6c:5e:5a:86:3b:bd:75:73: bf:5a:aa:8e:38:9d:1a:b5:a9:f0:1c:ed:fa:8e:4a: 11:3e:c8:fc:41:93:ed:60:36:1b:23:3d:cd:a0:9b: 7e:75:a2:a3:ef:0b:5f:a7:a3:62:a4:f2:18:f5:03: 0e:51:a5:4a:71:06:e8:8d:1b:73:55:1d:4d:bf:67: a8:d0:34:08:8c:78:e1:c5:56:c3:36:f6:2c:34:69: b0:33:a4:07:7f:88:3e:bb:60:25:0d:66:d3:d8:78: 25:67:d2:5e:e7:fb:91:6f:1a:d0:09:9d:20:06:21: 32:17:35:11:55:60:3d:5b:52:7d:07:63:85:c0:96: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:DC:BB:E4:AF:54:CE:D7:DF:2C:4A:9E:DA:18:33:AB:9B:59:1E X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9b:0e:78:e8:8c:5d:b3:91:1a:97:84:6b:e7:6d:50:11:99: de:ef:43:25:83:0f:b6:9e:c1:c0:cd:4e:00:5e:f6:55:28:8b: fe:4b:61:aa:25:6d:ff:6b:79:d2:1c:7a:a9:c0:24:65:45:0b: d1:41:af:98:05:bf:8f:c0:b4:2e:fe:a1:8d:87:91:45:9f:30: d8:ec:e0:36:84:e3:c4:4d:a1:f9:42:0b:2d:98:42:85:48:2c: d8:3d:aa:1d:b3:43:3b:ac:7f:b1:91:aa:e0:f9:ea:ff:50:7e: 83:ca:98:c7:5a:96:8b:f5:fb:99:3b:a3:a9:03:d4:43:3b:1e: 44:c4:35:bc:6f:c2:64:a9:51:b7:58:72:2f:b6:7e:45:1d:91: 6e:42:75:d4:e8:dd:27:9e:64:17:4d:2f:cc:e0:a0:56:03:d7: f0:12:7d:63:3f:9b:f9:9b:18:7f:f8:3f:15:c2:fe:19:e6:3d: ba:2c:3b:09:fd:af:ba:8d:51:39:b2:8b:db:34:22:c3:25:1a: ec:30:7c:3c:b8:99:0a:7f:b2:b2:f4:7c:c3:52:31:44:86:0a: d0:ef:61:3c:68:6a:72:10:a9:33:e5:01:62:c1:3d:a4:3a:74: 9e:93:9f:06:0f:1a:9c:a6:5e:76:3e:2a:c4:e0:77:3f:6e:e2: 50:2f:d5:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjUxMjA2MTgxNjE2WhcNMjUxMjEzMTgxNjE2WjAYMRYwFAYD VQQDEw02OTM0NzJmMS01Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j/zEzHkDeFQ2i6eH8uGPSjwT2q26hSVv1+Ihub8WxuHRy52bD6MXUDTUysf /P4KpKtcL2/xlj0oO8+fhZi0xRrqNNzD2tzKhZ0PZFC5OpqMVXNJ5wjBOuKaexIn F3IaewIzPwbPHeNRO20dyfxsAbtR+rN8wsNM6Opwsy3abF5ahju9dXO/WqqOOJ0a tanwHO36jkoRPsj8QZPtYDYbIz3NoJt+daKj7wtfp6NipPIY9QMOUaVKcQbojRtz VR1Nv2eo0DQIjHjhxVbDNvYsNGmwM6QHf4g+u2AlDWbT2HglZ9Je5/uRbxrQCZ0g BiEyFzURVWA9W1J9B2OFwJYvowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhL3Lvk r1TO198sSp7aGDOrm1keMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABmw546Ixds5Eal4Rr521QEZne70Mlgw+2nsHAzU4AXvZVKIv+S2Gq JW3/a3nSHHqpwCRlRQvRQa+YBb+PwLQu/qGNh5FFnzDY7OA2hOPETaH5QgstmEKF SCzYPaods0M7rH+xkarg+er/UH6DypjHWpaL9fuZO6OpA9RDOx5ExDW8b8JkqVG3 WHIvtn5FHZFuQnXU6N0nnmQXTS/M4KBWA9fwEn1jP5v5mxh/+D8Vwv4Z5j26LDsJ /a+6jVE5sovbNCLDJRrsMHw8uJkKf7Ky9HzDUjFEhgrQ72E8aGpyEKkz5QFiwT2k OnSek58GDxqcpl52PirE4Hc/buJQL9X3 -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:50 2025 by rpki-client