This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: 1ZLo2D2mfO4be0dn/dzMkbJT8e3erCw6bLRV/f8fbOY= Subject key identifier: 12:83:94:E7:4A:F9:70:B7:AC:EC:59:69:FC:C2:45:9F:F5:B3:82:FE Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 66 Signing time: Fri 05 Dec 2025 04:54:21 +0000 Manifest this update: Fri 05 Dec 2025 04:54:20 +0000 Manifest next update: Fri 12 Dec 2025 04:54:20 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: XAh/AzSh3vSfuxYg/7iS+OV/75S4r9SLzdcC7xh6tto=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Dec 5 04:54:20 2025 GMT Not After : Dec 12 04:54:20 2025 GMT Subject: CN=6932657d-8d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:e3:52:b5:0d:8b:be:87:7d:19:54:a6:72: e9:c3:9b:74:17:3b:92:f2:94:9a:37:1d:c4:35:58: 2d:b7:ff:2e:e5:18:a0:3e:3b:f6:58:a6:73:ec:e1: 73:53:be:80:c4:51:ae:65:04:39:0b:64:71:12:26: 27:d7:e2:76:ad:76:b6:a6:90:ad:ab:c2:9d:64:8e: 5d:41:72:44:bb:55:e2:de:ed:33:3c:21:ad:38:8c: 40:36:d6:a7:0a:57:cb:df:7c:71:3b:17:66:e6:91: f8:27:b6:ff:87:6f:3f:9c:5a:73:ab:12:57:ff:f2: 7b:f4:a2:f6:7c:a8:de:0c:21:ee:e4:10:1f:c6:fc: b3:7f:bd:63:e1:00:67:49:32:49:9d:8f:40:88:79: c0:e4:8b:20:9f:11:b7:78:eb:31:3f:60:05:d0:8a: 6b:76:d9:bf:0c:88:34:fd:a4:84:f8:ed:70:46:ae: 8d:61:60:7a:a9:d2:06:8a:fd:14:10:dd:7d:cd:cd: 50:8e:f0:90:f3:66:eb:04:fe:51:7f:24:08:3a:d5: 3b:10:60:48:d5:ab:49:b7:a2:01:3e:e1:18:92:68: f2:26:18:f3:35:0b:30:b9:b6:d1:49:2e:7c:77:ba: 7f:7a:a3:ee:32:e7:86:25:c6:65:56:d9:9a:d8:b2: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:94:E7:4A:F9:70:B7:AC:EC:59:69:FC:C2:45:9F:F5:B3:82:FE X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2c:cc:29:11:d5:5b:e3:6f:2b:0f:47:25:52:b5:e1:d0:48: 29:53:cd:4e:34:cc:92:ed:a0:ab:2a:db:b2:60:fc:c3:17:bb: d0:7b:93:80:dc:7f:87:de:15:6e:fc:85:dd:60:fd:84:1d:e4: 02:71:78:b3:1d:37:c6:f9:8c:a9:fa:a5:d6:24:74:f9:51:63: 49:36:f5:37:77:1c:5e:99:9a:b1:a5:06:37:77:49:0e:28:39: b5:bc:8c:54:c3:c8:2a:13:3a:6f:74:e2:f0:6c:07:dc:a4:35: cb:25:e5:90:6f:18:ef:f9:56:12:20:67:0a:7c:6d:69:cb:97: a0:8c:14:5b:b7:59:82:3a:dc:99:34:78:13:85:ae:81:d0:6f: 62:dd:52:3f:58:5f:fb:48:93:89:82:b7:f6:9e:3d:3a:57:e2: ea:24:69:69:25:76:64:8f:1c:5d:f4:5b:45:37:6f:05:7d:c5: 87:eb:12:9c:de:37:e1:6b:bd:1b:59:de:75:b9:83:76:b6:e7: 8f:f4:8c:f3:f6:42:93:88:43:cc:94:94:06:8e:c1:33:15:e4: 23:bc:6b:99:90:6d:96:84:a0:2b:7b:ba:64:a8:00:d1:f6:57: 2a:70:77:ef:a9:89:be:02:ea:a8:56:09:3a:36:43:f7:1c:cb: 2f:46:68:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTEyMDUwNDU0MjBaFw0yNTEyMTIwNDU0MjBaMBgxFjAUBgNV BAMTDTY5MzI2NTdkLThkMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClQeNStQ2Lvod9GVSmcunDm3QXO5LylJo3HcQ1WC23/y7lGKA+O/ZYpnPs4XNT voDEUa5lBDkLZHESJifX4natdramkK2rwp1kjl1BckS7VeLe7TM8Ia04jEA21qcK V8vffHE7F2bmkfgntv+Hbz+cWnOrElf/8nv0ovZ8qN4MIe7kEB/G/LN/vWPhAGdJ Mkmdj0CIecDkiyCfEbd46zE/YAXQimt22b8MiDT9pIT47XBGro1hYHqp0gaK/RQQ 3X3NzVCO8JDzZusE/lF/JAg61TsQYEjVq0m3ogE+4RiSaPImGPM1CzC5ttFJLnx3 un96o+4y54YlxmVW2ZrYssyPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEoOU50r5 cLes7Flp/MJFn/Wzgv4wHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4szCkR1VvjbysPRyVSteHQSClTzU40zJLtoKsq27Jg/MMXu9B7k4Dc f4feFW78hd1g/YQd5AJxeLMdN8b5jKn6pdYkdPlRY0k29Td3HF6ZmrGlBjd3SQ4o ObW8jFTDyCoTOm904vBsB9ykNcsl5ZBvGO/5VhIgZwp8bWnLl6CMFFu3WYI63Jk0 eBOFroHQb2LdUj9YX/tIk4mCt/aePTpX4uokaWkldmSPHF30W0U3bwV9xYfrEpze N+FrvRtZ3nW5g3a254/0jPP2QpOIQ8yUlAaOwTMV5CO8a5mQbZaEoCt7umSoANH2 Vypwd++pib4C6qhWCTo2Q/ccyy9GaIA= -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:16 2025 by rpki-client