This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json) Hash identifier: PaGAcs0sZkUxUn61zNeN537tpi0wjohEC2bpVonbltk= Subject key identifier: C9:67:4F:A3:1E:46:20:1B:D5:FC:CD:C1:B1:DC:45:EA:66:C3:31:06 Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft Manifest number: 21 Signing time: Fri 05 Dec 2025 05:35:01 +0000 Manifest this update: Fri 05 Dec 2025 05:35:01 +0000 Manifest next update: Fri 12 Dec 2025 05:35:01 +0000 Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: a9j/YqaNunoxGg2Pmhb3shImr5GmKUcadX400ZiZ1uY=) 2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: kmSg6vhF7B8lj7niChUWGEYRwyD/4WuvdUs67V6XzE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Validity Not Before: Dec 5 05:35:01 2025 GMT Not After : Dec 12 05:35:01 2025 GMT Subject: CN=69326f05-bb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cb:5b:3b:1b:d4:63:0e:c7:c0:d8:cd:ae:cc: 61:c9:c8:ed:5e:9f:a5:ee:96:70:f4:8b:07:5e:b0: 91:24:30:a3:5f:57:72:c4:75:99:ac:2b:ab:c5:43: d3:c6:ad:23:fd:9f:2c:c9:9f:f4:90:ce:52:6d:3c: e5:17:ac:98:a8:fe:b1:bc:b4:7e:9e:7c:7f:b4:63: dd:0c:33:a7:51:f9:02:c9:90:7c:43:9f:14:56:f7: b8:14:20:9f:57:51:6a:f0:8e:b0:e8:9c:03:55:71: a0:01:f0:4f:c0:b9:87:b4:bf:62:df:e4:98:23:9d: 10:1a:63:82:07:76:e1:bd:67:80:d1:c7:16:af:e7: f7:bd:83:06:f0:e0:f3:68:b0:2b:29:c4:80:38:65: ac:a4:9a:c4:31:df:e1:60:87:a4:1e:38:38:46:4d: 93:22:e7:38:12:79:5f:3a:d0:07:61:3e:39:b9:0b: 0f:75:b6:76:f2:77:2a:36:1d:7d:d2:d3:11:87:74: 52:09:b6:99:c9:43:6e:c4:ad:0d:d7:c1:a8:42:43: 04:6d:b4:56:19:27:d2:84:c0:63:41:03:b7:af:ee: 4f:1c:34:4e:b8:78:26:0a:c2:52:63:76:c3:b6:2c: c1:a8:78:33:30:45:f9:24:d4:cc:2a:53:c7:22:6b: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:4F:A3:1E:46:20:1B:D5:FC:CD:C1:B1:DC:45:EA:66:C3:31:06 X509v3 Authority Key Identifier: keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:62:65:d4:42:14:a4:92:56:da:3e:d0:16:3a:b0:03:90: 03:21:c7:db:fc:40:c2:24:9b:b3:2c:40:8d:06:ae:5f:b1:37: cf:b3:b7:db:27:49:c4:15:b7:5d:12:4e:64:1d:44:41:c4:9d: 80:ff:e1:b0:9a:87:5c:f1:62:aa:69:6f:89:e0:ee:cc:04:72: fc:f9:b4:90:35:c0:dc:f0:1a:17:aa:58:18:3e:28:33:a8:d5: 39:d8:df:6a:e4:4f:8e:c4:95:78:42:f5:be:71:e7:68:2d:cc: d0:4c:93:e7:ee:ae:d6:80:06:f0:ce:45:e1:db:3c:83:19:ef: b4:15:d4:3d:83:ab:39:a1:bd:ac:7e:3b:fc:24:af:53:cd:49: 31:d4:2e:b7:5a:60:71:13:6f:be:36:84:02:ab:20:1e:87:38: b3:6f:ac:38:46:02:5c:fc:1b:25:a3:c7:38:55:85:bf:f3:bc: a3:24:0a:b7:d0:db:43:88:f5:93:cb:c4:9b:47:5c:82:e9:19: 25:a2:5d:35:67:42:16:16:fa:18:0f:8f:ec:36:05:a4:3f:33: 1e:6e:db:62:0e:16:8d:61:f5:24:f5:24:52:da:c6:2b:10:0c: 3f:78:21:18:34:79:98:b4:15:23:e8:f4:93:c8:50:94:6d:6a: 25:ed:98:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEZCNzExMC8GA1UEBRMoRjZCMTQ1MTAyMDUyNDdDRTU4MzMyNTkxQjlBMjk3QTE1 RDJBRUEzRjAeFw0yNTEyMDUwNTM1MDFaFw0yNTEyMTIwNTM1MDFaMBgxFjAUBgNV BAMTDTY5MzI2ZjA1LWJiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0y1s7G9RjDsfA2M2uzGHJyO1en6XulnD0iwdesJEkMKNfV3LEdZmsK6vFQ9PG rSP9nyzJn/SQzlJtPOUXrJio/rG8tH6efH+0Y90MM6dR+QLJkHxDnxRW97gUIJ9X UWrwjrDonANVcaAB8E/AuYe0v2Lf5JgjnRAaY4IHduG9Z4DRxxav5/e9gwbw4PNo sCspxIA4ZaykmsQx3+Fgh6QeODhGTZMi5zgSeV860AdhPjm5Cw91tnbydyo2HX3S 0xGHdFIJtpnJQ27ErQ3XwahCQwRttFYZJ9KEwGNBA7ev7k8cNE64eCYKwlJjdsO2 LMGoeDMwRfkk1MwqU8cia1LHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyWdPox5G IBvV/M3BsdxF6mbDMQYwHwYDVR0jBBgwFoAU9rFFECBSR85YMyWRuaKXoV0q6j8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RkI3LzdFQzY2MUM4QTA0 NDExRjBCQzVDRjk0N0M0RjlBRTAyLzlyRkZFQ0JTUjg1WU15V1J1YUtYb1YwcTZq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXJGRkVDQlNSODVZTXlXUnVhS1hvVjBxNmo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RkI3LzdFQzY2MUM4QTA0NDExRjBCQzVDRjk0N0M0RjlBRTAyLzlyRkZFQ0JTUjg1 WU15V1J1YUtYb1YwcTZqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIOxYmXUQhSkklbaPtAWOrADkAMhx9v8QMIkm7MsQI0Grl+xN8+zt9sn ScQVt10STmQdREHEnYD/4bCah1zxYqppb4ng7swEcvz5tJA1wNzwGheqWBg+KDOo 1TnY32rkT47ElXhC9b5x52gtzNBMk+furtaABvDOReHbPIMZ77QV1D2Dqzmhvax+ O/wkr1PNSTHULrdaYHETb742hAKrIB6HOLNvrDhGAlz8GyWjxzhVhb/zvKMkCrfQ 20OI9ZPLxJtHXILpGSWiXTVnQhYW+hgPj+w2BaQ/Mx5u22IOFo1h9ST1JFLaxisQ DD94IRg0eZi0FSPo9JPIUJRtaiXtmEE= -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:35 2025 by rpki-client