This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json) Hash identifier: TMe9ir/Ci4RS5rfVQIBTICDmRHQZMyTQGd5P2+a+agg= Subject key identifier: D7:2E:27:23:20:D3:1F:31:E3:96:E2:07:19:3E:E6:6B:23:29:C7:7B Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Certificate serial: 0E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft Manifest number: 0E8D Signing time: Sat 06 Dec 2025 17:09:47 +0000 Manifest this update: Sat 06 Dec 2025 17:09:46 +0000 Manifest next update: Sat 13 Dec 2025 17:09:46 +0000 Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: 9cWM1Ff5jDDbRS5yttiJ39RzW2l4BAng4b+ayM4hXPs=) 2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: pWiGa9e3CsBZCkEfjYxSv/AY6FwzKhNWqEBfC5Rt5as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3735 (0xe97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Validity Not Before: Dec 6 17:09:46 2025 GMT Not After : Dec 13 17:09:46 2025 GMT Subject: CN=6934635a-c730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:7c:3a:65:9f:6a:85:22:78:98:2f:06:e0: b0:d1:6e:ca:0d:0a:62:63:47:41:e5:a4:a2:f3:2b: 3e:a4:f4:95:7c:0c:7e:43:72:88:7d:5e:85:a6:db: ed:6b:1b:56:8c:37:c6:b5:b2:d8:da:1e:00:36:13: e4:1e:8b:e1:0e:1d:77:4b:f3:62:9d:39:4e:91:4d: c5:ab:41:be:dd:39:c6:8e:35:c3:76:10:87:be:ef: b0:25:1f:f7:2d:60:66:ee:f0:68:9e:a1:5f:b5:ff: 0f:c3:f7:77:86:ed:f9:df:e8:26:3b:29:7b:b7:f0: 4c:b1:c8:91:51:9d:99:b2:06:02:f2:3a:f8:fb:4d: b7:fe:9d:70:b5:05:22:a1:48:d1:66:d3:72:29:57: 88:d8:aa:dc:79:57:c1:3f:f2:6a:e5:af:19:fc:7b: d4:1d:a4:ed:a7:3b:6d:85:26:bf:50:dc:75:e6:9d: 4f:c5:ba:09:3c:08:5f:35:51:20:ff:75:d6:a2:fc: 38:0a:59:77:51:4e:18:3d:4f:8f:99:3d:d6:4c:2f: 5c:f3:a8:07:6e:d7:f3:1c:2f:3f:1e:aa:53:aa:50: ee:1d:8f:6b:60:5b:bf:ad:97:15:85:07:69:ba:43: f3:1c:27:13:4c:f5:3d:b6:04:44:b3:ce:e9:03:dd: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2E:27:23:20:D3:1F:31:E3:96:E2:07:19:3E:E6:6B:23:29:C7:7B X509v3 Authority Key Identifier: keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:5f:92:cb:b5:4f:09:48:99:eb:f1:d3:b9:4f:0b:4f:2b:62: 11:5d:d9:34:40:1d:f3:d8:81:15:00:22:63:06:24:98:5e:c0: b0:25:82:26:fc:3b:2c:c7:06:64:4f:60:4d:74:df:ff:18:ad: 32:9e:ac:2f:ef:2d:7d:d2:40:ed:85:99:d8:59:5f:81:94:82: 41:b8:14:0a:e7:ea:10:d7:ed:31:05:ca:53:24:24:80:89:19: e3:d5:ea:a9:2a:47:bd:5b:90:d9:05:22:50:7f:fd:17:89:da: 9d:10:ab:dd:6e:6d:18:07:37:2f:86:73:5a:6c:2b:c2:22:a4: f8:c8:b1:37:71:64:44:90:31:43:38:9a:b6:5c:8c:5c:3d:8c: 0a:e8:73:b9:94:1c:08:0f:95:f3:4e:23:cc:2a:42:e9:85:50: 2c:0d:cb:84:ea:4a:14:e1:ca:3c:c5:46:73:6c:98:3a:d1:b8: b8:23:5c:4f:79:49:34:2d:a5:ed:47:6c:0e:e6:a5:b9:c1:8b: 11:d9:ec:5a:a1:6a:c3:b7:b6:1d:40:7a:95:fc:e0:46:0d:91: 82:7c:87:b2:50:55:63:91:48:d7:38:8c:5b:96:55:e6:fb:9c: 3a:69:24:9a:f8:4a:d7:ee:b5:24:21:e8:74:a8:60:c5:66:2b: b0:46:79:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCQzQxMTAvBgNVBAUTKDgzQ0U4NTNBN0E2NkVBQjlFMUYyMzM0NjcxMUQzREM5 N0Q1NzU5NzgwHhcNMjUxMjA2MTcwOTQ2WhcNMjUxMjEzMTcwOTQ2WjAYMRYwFAYD VQQDEw02OTM0NjM1YS1jNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFV8OmWfaoUieJgvBuCw0W7KDQpiY0dB5aSi8ys+pPSVfAx+Q3KIfV6Fptvt axtWjDfGtbLY2h4ANhPkHovhDh13S/NinTlOkU3Fq0G+3TnGjjXDdhCHvu+wJR/3 LWBm7vBonqFftf8Pw/d3hu353+gmOyl7t/BMsciRUZ2ZsgYC8jr4+023/p1wtQUi oUjRZtNyKVeI2KrceVfBP/Jq5a8Z/HvUHaTtpztthSa/UNx15p1PxboJPAhfNVEg /3XWovw4Cll3UU4YPU+PmT3WTC9c86gHbtfzHC8/HqpTqlDuHY9rYFu/rZcVhQdp ukPzHCcTTPU9tgREs87pA92w9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcuJyMg 0x8x45biBxk+5msjKcd7MB8GA1UdIwQYMBaAFIPOhTp6Zuq54fIzRnEdPcl9V1l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUJDNC85MkU4MjFGMEE0 NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZybmg4ak5HY1IwOXlYMVhX WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4NkZPbnBtNnJuaDhqTkdjUjA5eVgxWFdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUJDNC85MkU4MjFGMEE0NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZy bmg4ak5HY1IwOXlYMVhXWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFX5LLtU8JSJnr8dO5TwtPK2IRXdk0QB3z2IEVACJjBiSYXsCwJYIm /DssxwZkT2BNdN//GK0ynqwv7y190kDthZnYWV+BlIJBuBQK5+oQ1+0xBcpTJCSA iRnj1eqpKke9W5DZBSJQf/0XidqdEKvdbm0YBzcvhnNabCvCIqT4yLE3cWREkDFD OJq2XIxcPYwK6HO5lBwID5XzTiPMKkLphVAsDcuE6koU4co8xUZzbJg60bi4I1xP eUk0LaXtR2wO5qW5wYsR2exaoWrDt7YdQHqV/OBGDZGCfIeyUFVjkUjXOIxbllXm +5w6aSSa+ErX7rUkIeh0qGDFZiuwRnnJ -----END CERTIFICATE-----Generated at Sun Dec 7 06:22:03 2025 by rpki-client