This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: Oflpn050oGxUn00pB+a23FlsXOo//VH91g0MZF4F9l8= Subject key identifier: 08:A1:C3:53:88:90:D3:94:09:FE:6E:C6:52:02:30:ED:8E:1C:0A:FD Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 14 Signing time: Sun 07 Dec 2025 05:53:42 +0000 Manifest this update: Sun 07 Dec 2025 05:53:41 +0000 Manifest next update: Sun 14 Dec 2025 05:53:41 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: IT7K2/MMWtTfv22dg7RuK20V0TRy5//IP8ztBCybMwI=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: yGR2xqnv87rJpxXoRJ5BLEOl4DCEpjBSrdz8OkezYaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Dec 7 05:53:41 2025 GMT Not After : Dec 14 05:53:41 2025 GMT Subject: CN=69351666-784a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:d1:22:11:f9:e5:8e:dd:c0:9e:6b:84:7e: f7:f4:44:a6:d7:5d:6b:b1:75:28:69:d2:d9:c0:e2: ee:7c:a2:bc:0c:c0:70:eb:98:5f:e9:ca:e8:89:cc: 24:e1:0e:56:29:7c:fd:d4:4f:ee:23:66:e3:d4:62: b6:ff:98:89:c1:84:04:c9:1e:aa:48:e6:03:90:84: 62:3b:32:ce:af:c8:6a:ef:16:5a:1b:c9:18:c6:72: 0b:ce:82:0a:23:bb:1f:e5:ed:b0:48:b3:9d:1d:db: 34:54:00:4f:b2:e1:9c:1f:af:0b:d0:43:f5:4e:92: d9:96:e2:c1:d1:58:58:6c:16:07:97:2f:32:8e:1e: 12:13:d1:6c:b8:34:e9:84:e6:2d:84:30:d4:79:55: 59:ed:e2:6d:30:9f:e9:d3:25:3a:9b:14:a7:f9:82: d4:81:cc:de:7a:d2:dc:19:ab:db:22:54:25:d7:a2: fd:ea:7e:9a:e5:76:12:67:8e:fd:11:e0:f5:e1:f0: 60:9f:56:e0:1e:be:6e:43:29:44:40:6f:ec:70:ce: 0c:48:7b:03:a4:68:ea:dc:a4:0f:f1:ad:cc:d3:23: cb:0c:e9:e6:18:3b:72:60:d1:d2:79:0c:6d:88:3c: 46:c8:32:9c:6e:7a:51:c9:f0:82:6a:49:88:eb:75: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:C3:53:88:90:D3:94:09:FE:6E:C6:52:02:30:ED:8E:1C:0A:FD X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:56:08:ba:f4:2c:39:75:05:e9:75:6e:75:b9:89:75:ee:34: ad:a0:91:3e:06:9f:74:e3:9a:88:56:85:a8:9b:e7:80:1f:30: 60:c8:2c:cc:a4:5a:d1:22:64:c6:26:cc:4c:1e:03:c6:67:2c: 1b:8b:6d:18:7d:ee:e4:4d:50:a6:e3:5d:c6:59:2b:c6:96:7b: 8f:99:0e:90:13:c1:8d:a5:1b:a5:35:9b:d9:23:0c:cc:93:33: ab:8a:8c:e4:5b:dc:8e:39:ff:9c:d3:51:8e:e5:9b:12:42:fb: c4:12:89:94:b7:62:73:5b:0c:55:10:cd:de:8c:bc:db:35:f6: 71:6e:e1:33:7b:39:30:62:7f:f5:20:99:85:d1:10:c8:17:ff: a4:75:09:f5:a3:22:b0:82:24:9a:04:f4:74:0f:96:91:ab:ad: 30:c4:90:95:74:fb:1b:aa:e4:87:70:b1:18:3f:59:f1:d8:8f: cd:d0:08:11:84:9f:65:58:e3:0a:cf:ae:d4:69:e3:d3:79:ea: e2:f0:52:52:8d:e5:16:c6:23:2d:89:b4:b8:be:47:ad:f2:31: d1:77:e0:ee:f7:e6:e4:e9:91:cd:81:48:1b:fc:ab:6c:18:91: 7f:e0:55:d3:d5:98:1f:eb:35:22:b5:82:aa:51:b2:21:9d:8c: 40:99:11:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTEyMDcwNTUzNDFaFw0yNTEyMTQwNTUzNDFaMBgxFjAUBgNV BAMTDTY5MzUxNjY2LTc4NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUdtEiEfnljt3AnmuEfvf0RKbXXWuxdShp0tnA4u58orwMwHDrmF/pyuiJzCTh DlYpfP3UT+4jZuPUYrb/mInBhATJHqpI5gOQhGI7Ms6vyGrvFlobyRjGcgvOggoj ux/l7bBIs50d2zRUAE+y4ZwfrwvQQ/VOktmW4sHRWFhsFgeXLzKOHhIT0Wy4NOmE 5i2EMNR5VVnt4m0wn+nTJTqbFKf5gtSBzN560twZq9siVCXXov3qfprldhJnjv0R 4PXh8GCfVuAevm5DKURAb+xwzgxIewOkaOrcpA/xrczTI8sM6eYYO3Jg0dJ5DG2I PEbIMpxuelHJ8IJqSYjrdaphAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCKHDU4iQ 05QJ/m7GUgIw7Y4cCv0wHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1WCLr0LDl1Bel1bnW5iXXuNK2gkT4Gn3TjmohWhaib54AfMGDILMyk WtEiZMYmzEweA8ZnLBuLbRh97uRNUKbjXcZZK8aWe4+ZDpATwY2lG6U1m9kjDMyT M6uKjORb3I45/5zTUY7lmxJC+8QSiZS3YnNbDFUQzd6MvNs19nFu4TN7OTBif/Ug mYXREMgX/6R1CfWjIrCCJJoE9HQPlpGrrTDEkJV0+xuq5IdwsRg/WfHYj83QCBGE n2VY4wrPrtRp49N56uLwUlKN5RbGIy2JtLi+R63yMdF34O735uTpkc2BSBv8q2wY kX/gVdPVmB/rNSK1gqpRsiGdjECZEfY= -----END CERTIFICATE-----Generated at Sun Dec 7 23:52:16 2025 by rpki-client