This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: QG/4Cm7RLNWJvlSRrdhHxskxQ4AOMK36rexEaFlzzKM= Subject key identifier: 64:E2:5C:0B:EE:B0:10:D4:2B:33:CC:C2:7A:08:4B:A9:90:C9:29:33 Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 02BF Signing time: Thu 04 Dec 2025 23:48:14 +0000 Manifest this update: Thu 04 Dec 2025 23:48:14 +0000 Manifest next update: Thu 11 Dec 2025 23:48:14 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: +BCyrJyaPNSvdwj5vJsnsYelCdjNcUcwTBM0YcZsZnw=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: NyO/WjiaEa7cdOFl5O0R3ch16GCk/x68oKBSzQpBSAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Dec 4 23:48:14 2025 GMT Not After : Dec 11 23:48:14 2025 GMT Subject: CN=69321dbe-7e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:85:3e:65:17:2a:95:1c:8a:2f:17:fc:b4: 01:66:79:94:16:7a:ad:df:69:5e:12:8b:4f:44:a8: a0:c5:4f:4a:46:55:51:85:ab:78:75:b4:28:11:e3: 67:1e:30:1f:a1:74:d3:0f:32:0b:ec:d6:ef:23:b7: d1:9c:9f:f2:76:26:8e:e1:72:79:d3:36:57:d1:d6: 39:82:bc:ca:67:ee:7a:9b:04:ef:6f:31:c6:69:5d: 5c:f1:22:f0:16:81:9d:c1:fd:e2:a0:9a:b5:e2:b6: 33:56:81:78:87:08:1f:dd:0f:0f:ec:85:c4:62:1c: c4:39:04:16:dc:cb:84:2d:a5:27:2e:0a:3e:23:11: af:25:22:07:ad:7d:6e:92:d0:68:9e:df:14:61:03: cd:f9:c4:2e:d5:55:53:dd:53:6d:57:f7:08:12:db: f1:ba:21:32:b2:e0:fe:45:93:0b:a0:11:ee:71:38: 7f:eb:63:d7:16:ba:96:0f:20:c1:4c:3c:00:de:c4: 03:66:66:90:65:d0:27:6e:40:d4:3b:56:3b:0e:a4: 9a:2a:ab:c1:b9:a2:cc:b3:81:ea:5d:d7:18:3e:3f: ec:b0:f0:d4:7c:c0:da:99:79:38:b4:a5:97:21:29: 43:59:06:07:c9:b1:2b:97:2e:5f:fc:3d:f3:fd:a5: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E2:5C:0B:EE:B0:10:D4:2B:33:CC:C2:7A:08:4B:A9:90:C9:29:33 X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:02:9b:3c:75:ad:8a:a8:9c:bf:15:5e:98:98:e0:0d:ee:5b: f2:1a:21:a0:01:ac:84:18:ca:c7:67:bd:93:79:49:06:f3:a1: 14:cb:44:a6:12:cc:fe:b2:a1:0a:29:9d:68:6a:4a:ac:49:11: e1:43:fa:07:06:e5:f8:11:40:33:18:38:8a:73:7f:1f:f0:d3: ab:f9:23:86:0d:ed:30:c5:1e:95:8b:68:50:ae:93:8b:04:8f: c9:1e:0e:9e:fc:83:01:7a:36:f8:40:d3:2f:67:ed:06:fc:9f: 34:ee:f1:69:be:46:6a:7b:77:94:d6:be:1c:87:06:01:06:eb: d9:92:1d:c0:a4:f6:bb:ed:73:05:df:17:fd:46:9e:c5:42:67: a1:69:ce:6d:42:00:63:a0:07:99:71:37:51:b3:f9:5f:a4:49: cc:02:4c:5b:4c:10:9d:f8:c5:77:1b:76:3b:24:a0:51:a6:0c: 8a:f3:8d:69:f8:58:c1:f1:71:4a:28:6d:7f:b2:4b:ee:0a:de: a2:1d:83:58:60:17:73:b2:73:c4:52:23:ac:d7:b6:b1:fb:83: 23:2f:9d:99:e8:9e:b9:f2:6f:ca:06:ed:f8:a6:56:c0:f5:87: 08:2b:66:d7:3a:5e:6a:e6:2e:a0:e5:22:87:27:f5:ef:19:e0: 42:2a:bd:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUxMjA0MjM0ODE0WhcNMjUxMjExMjM0ODE0WjAYMRYwFAYD VQQDEw02OTMyMWRiZS03ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvOFPmUXKpUcii8X/LQBZnmUFnqt32leEotPRKigxU9KRlVRhat4dbQoEeNn HjAfoXTTDzIL7NbvI7fRnJ/ydiaO4XJ50zZX0dY5grzKZ+56mwTvbzHGaV1c8SLw FoGdwf3ioJq14rYzVoF4hwgf3Q8P7IXEYhzEOQQW3MuELaUnLgo+IxGvJSIHrX1u ktBont8UYQPN+cQu1VVT3VNtV/cIEtvxuiEysuD+RZMLoBHucTh/62PXFrqWDyDB TDwA3sQDZmaQZdAnbkDUO1Y7DqSaKqvBuaLMs4HqXdcYPj/ssPDUfMDamXk4tKWX ISlDWQYHybErly5f/D3z/aUlgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTiXAvu sBDUKzPMwnoIS6mQySkzMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeAps8da2KqJy/FV6YmOAN7lvyGiGgAayEGMrHZ72TeUkG86EUy0Sm Esz+sqEKKZ1oakqsSRHhQ/oHBuX4EUAzGDiKc38f8NOr+SOGDe0wxR6Vi2hQrpOL BI/JHg6e/IMBejb4QNMvZ+0G/J807vFpvkZqe3eU1r4chwYBBuvZkh3ApPa77XMF 3xf9Rp7FQmehac5tQgBjoAeZcTdRs/lfpEnMAkxbTBCd+MV3G3Y7JKBRpgyK841p +FjB8XFKKG1/skvuCt6iHYNYYBdzsnPEUiOs17ax+4MjL52Z6J658m/KBu34plbA 9YcIK2bXOl5q5i6g5SKHJ/XvGeBCKr1c -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:41 2025 by rpki-client