This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: Sdr1/RKYIcLH3oX8PO0dDS5whHH0L08A56M+vix4qPc= Subject key identifier: 64:FF:CF:FB:2C:34:17:EB:0B:EC:E7:E0:24:8C:94:5D:58:2C:02:5F Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: F5 Signing time: Fri 05 Dec 2025 03:20:33 +0000 Manifest this update: Fri 05 Dec 2025 03:20:32 +0000 Manifest next update: Fri 12 Dec 2025 03:20:31 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: VnmT9R7ICEIDXYMTIYrE6K9nJ+MZX8qbMb7kH+0jG/w=) 2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=) 3: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Dec 5 03:20:32 2025 GMT Not After : Dec 12 03:20:31 2025 GMT Subject: CN=69324f80-9f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:6f:bc:15:ec:8a:1e:88:31:4e:b6:0c:51: f3:cc:67:0f:dc:66:f6:ef:9e:77:f4:fe:54:f7:ca: ce:58:18:1f:38:7b:07:ce:85:11:5d:56:27:8a:70: a5:49:da:2e:0b:22:75:87:26:a6:c5:5e:37:56:ed: f8:fa:77:9b:19:43:b4:73:6c:41:4b:40:86:ba:de: 3f:20:87:68:d4:73:cc:f3:48:5a:b1:c1:7f:76:11: 67:a0:a0:4f:bf:54:c4:42:87:44:c6:dd:cd:1e:00: fd:6b:2c:1c:4b:b2:77:4c:df:ea:48:ea:bd:74:74: 5a:42:90:e4:83:fe:ab:36:82:f0:17:5d:00:7e:de: 15:33:af:ad:5d:05:ae:58:f3:e4:ce:d9:98:42:5b: d7:92:2d:8c:89:88:b4:bf:73:d6:49:1c:c8:60:87: d0:60:10:4a:de:f0:09:bc:24:3f:d3:d5:b8:a9:c1: 8b:19:3e:47:2b:25:8f:f7:fb:10:88:c9:be:30:c7: 57:e4:d7:fc:18:e3:95:38:62:0d:c0:a4:ae:d2:16: e7:64:91:b1:45:00:81:e4:64:92:fc:82:44:2c:8a: 45:a1:c8:72:29:30:c2:21:79:3d:5a:90:5e:aa:b4: f6:0f:bd:6d:f2:ef:4c:22:7c:08:31:e9:5f:a0:46: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:CF:FB:2C:34:17:EB:0B:EC:E7:E0:24:8C:94:5D:58:2C:02:5F X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d6:47:03:95:0e:4d:c0:1c:ac:1b:15:5d:e1:d0:5c:19:49: 0c:98:b2:54:45:07:04:3e:23:80:be:11:92:4b:cb:ac:b4:51: 97:cb:1c:aa:2e:c9:db:7a:67:b0:c8:fb:5e:87:c6:af:00:09: a1:bf:fd:c3:fb:87:c5:4c:19:3a:f2:49:ae:ff:a3:ee:49:e3: 37:7f:82:07:72:42:09:3c:6d:9e:aa:fa:04:3f:3c:e5:d3:15: 28:ba:4a:8d:2c:a5:cc:ae:fe:fb:24:94:b4:d6:de:f4:95:75: 1f:60:c2:97:44:30:61:0b:38:93:80:cc:77:52:76:5b:1e:78: ac:fb:d2:12:87:62:2c:0d:ef:7e:82:57:cb:e7:08:1b:e1:44: 2d:44:31:25:b5:8b:55:cb:a7:54:eb:b2:3c:ec:e6:05:9a:bb: bf:d0:47:f8:ab:8d:23:51:f3:78:c6:72:12:ad:88:74:cc:01: 1b:d4:83:17:a2:9b:52:e2:60:5e:68:03:b2:e2:63:05:dd:79: 61:f4:8b:8e:4c:57:c6:f9:f2:91:5a:29:53:9d:07:4c:88:49: c1:ae:6c:1c:af:52:cf:97:b7:36:a6:1f:8c:37:a6:20:e9:24: 10:9e:21:85:4f:4a:a5:cc:18:8c:f8:cc:1f:b9:ce:70:dc:7b: b9:97:a1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUxMjA1MDMyMDMyWhcNMjUxMjEyMDMyMDMxWjAYMRYwFAYD VQQDEw02OTMyNGY4MC05ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaFvvBXsih6IMU62DFHzzGcP3Gb275539P5U98rOWBgfOHsHzoURXVYninCl SdouCyJ1hyamxV43Vu34+nebGUO0c2xBS0CGut4/IIdo1HPM80hascF/dhFnoKBP v1TEQodExt3NHgD9aywcS7J3TN/qSOq9dHRaQpDkg/6rNoLwF10Aft4VM6+tXQWu WPPkztmYQlvXki2MiYi0v3PWSRzIYIfQYBBK3vAJvCQ/09W4qcGLGT5HKyWP9/sQ iMm+MMdX5Nf8GOOVOGINwKSu0hbnZJGxRQCB5GSS/IJELIpFochyKTDCIXk9WpBe qrT2D71t8u9MInwIMelfoEbYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT/z/ss NBfrC+zn4CSMlF1YLAJfMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1kcDlQ5NwBysGxVd4dBcGUkMmLJURQcEPiOAvhGSS8ustFGXyxyq LsnbemewyPteh8avAAmhv/3D+4fFTBk68kmu/6PuSeM3f4IHckIJPG2eqvoEPzzl 0xUoukqNLKXMrv77JJS01t70lXUfYMKXRDBhCziTgMx3UnZbHnis+9ISh2IsDe9+ glfL5wgb4UQtRDEltYtVy6dU67I87OYFmru/0Ef4q40jUfN4xnISrYh0zAEb1IMX optS4mBeaAOy4mMF3Xlh9IuOTFfG+fKRWilTnQdMiEnBrmwcr1LPl7c2ph+MN6Yg 6SQQniGFT0qlzBiM+Mwfuc5w3Hu5l6EE -----END CERTIFICATE-----Generated at Sun Dec 7 00:44:47 2025 by rpki-client