This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json) Hash identifier: 1h5uOme0xiffJQv1mOCFScFoupeVwAYazsGxUTAYUCc= Subject key identifier: 61:0E:81:8B:2E:9E:5F:BA:5C:FF:94:96:9B:08:F8:C0:11:68:F1:E6 Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft Manifest number: 43 Signing time: Sun 07 Dec 2025 05:29:21 +0000 Manifest this update: Sun 07 Dec 2025 05:29:21 +0000 Manifest next update: Sun 14 Dec 2025 05:29:21 +0000 Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: 7qUZ7Uq+/FcaMzy5gNYtTY+Jyx0Qv2yb5pNXCDHGUAk=) 2: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: tj++9M2lVWEa5egkhERYRXuWpoUuhAiNGmVaKo9CiAs=) 3: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: PAvwTfnZ/W9fr7RnaDWJUDQG4Z1oLxvvzVFavJSMKUc=) 4: F8E93410A85C11F0A2A48E76C4F9AE02.roa (hash: uSc+a7UP/AciXljHJWSm6FJ7cB1ozyvjX6O58aed8lU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Dec 7 05:29:21 2025 GMT Not After : Dec 14 05:29:21 2025 GMT Subject: CN=693510b1-0874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:a5:0d:ad:75:c6:45:07:a3:0c:9f:31:35: da:18:b1:e9:12:cb:73:f5:ec:4d:1f:c8:7a:0c:4d: 42:2b:de:61:6f:ce:e7:9e:b6:fd:f8:0b:ec:05:df: 0f:24:27:f3:cb:31:a8:ca:78:65:05:9d:58:6e:94: e4:c4:e6:38:c8:f2:dc:86:03:63:bd:a5:c0:44:f2: da:b1:28:c9:89:50:05:a2:ca:fb:e8:34:b9:e0:59: e6:e5:e5:79:d0:eb:2b:38:58:a4:cc:4e:d7:76:7d: 09:b3:2e:44:3e:a0:fc:29:de:c5:4c:ed:74:45:48: 7e:cf:cb:06:d2:b9:4c:02:b6:b6:11:a5:fa:09:5b: e7:b9:6b:6c:3f:78:0a:90:58:41:bb:94:df:11:20: ab:73:fa:29:e1:11:23:44:22:fe:f1:03:1d:03:0c: d2:cb:79:4b:9a:df:3a:60:ce:11:9d:c9:15:36:47: c9:0a:a7:82:d4:49:8f:db:49:92:c2:87:b9:a5:c4: ae:17:81:54:ce:c3:dc:6f:91:6a:53:33:f2:f2:d3: 15:1b:1b:10:8e:fd:52:a4:f1:49:b2:d0:9a:24:c8: 51:fb:80:b1:95:93:0f:64:47:12:32:7f:86:d0:75: 20:9b:ee:ea:d3:42:17:98:b9:c3:3a:39:2f:b3:60: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0E:81:8B:2E:9E:5F:BA:5C:FF:94:96:9B:08:F8:C0:11:68:F1:E6 X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f5:24:8b:a2:d4:d3:f3:6d:a8:11:9b:91:2f:0e:6a:1b:73: 1d:1c:33:37:f8:3c:f2:ce:6e:15:00:36:b2:30:37:fb:cf:d3: 11:43:20:07:c3:04:dd:ea:19:a6:b3:a5:3b:1c:84:35:c7:c0: cb:1a:ce:e3:2d:66:45:aa:0b:23:63:43:25:03:89:65:63:61: b8:c9:b0:8a:f6:ca:c0:e2:33:65:26:60:90:cf:1f:bc:2f:6d: 62:9e:42:28:8d:33:dd:16:45:5c:e0:a7:d7:5c:2e:9b:c0:4f: 00:89:af:43:62:c2:da:41:13:15:2a:dc:da:09:1a:1a:18:13: 6a:aa:93:29:da:05:ed:fb:23:ac:47:a6:39:48:31:1b:23:0d: 98:72:10:68:ce:38:64:93:df:45:e0:81:c2:22:a4:ea:02:17: 79:be:a0:67:93:7e:fb:99:d3:55:99:91:b9:63:ce:8b:15:cb: ee:8b:d2:f2:3c:a5:da:e2:c8:dd:33:ca:8e:f0:0d:ea:83:e7: 84:27:46:35:ac:b7:89:31:ea:51:09:b6:b7:3b:ea:ad:67:00: 6f:e6:6d:23:5a:f3:f8:12:bd:02:a8:dc:a1:44:d3:84:43:6f: 45:bc:d9:fe:ec:7c:ab:e2:6f:d2:a1:aa:3f:d9:44:b4:22:7e: 8b:84:79:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzVERTExMC8GA1UEBRMoQTYxMzZFNTBFOTQ5OEUwNDlEMEI0RDJGMTg2N0ZBMUIx ODkxQzRFRjAeFw0yNTEyMDcwNTI5MjFaFw0yNTEyMTQwNTI5MjFaMBgxFjAUBgNV BAMTDTY5MzUxMGIxLTA4NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyLKUNrXXGRQejDJ8xNdoYsekSy3P17E0fyHoMTUIr3mFvzueetv34C+wF3w8k J/PLMajKeGUFnVhulOTE5jjI8tyGA2O9pcBE8tqxKMmJUAWiyvvoNLngWebl5XnQ 6ys4WKTMTtd2fQmzLkQ+oPwp3sVM7XRFSH7PywbSuUwCtrYRpfoJW+e5a2w/eAqQ WEG7lN8RIKtz+inhESNEIv7xAx0DDNLLeUua3zpgzhGdyRU2R8kKp4LUSY/bSZLC h7mlxK4XgVTOw9xvkWpTM/Ly0xUbGxCO/VKk8Umy0JokyFH7gLGVkw9kRxIyf4bQ dSCb7urTQheYucM6OS+zYHiJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYQ6Biy6e X7pc/5SWmwj4wBFo8eYwHwYDVR0jBBgwFoAUphNuUOlJjgSdC00vGGf6GxiRxO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNURFLzg3NjJDRDFBNzQy MjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhOdVVPbEpqZ1NkQzAwdkdHZjZHeGlSeE84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD NURFLzg3NjJDRDFBNzQyMjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdT ZEMwMHZHR2Y2R3hpUnhPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHP1JIui1NPzbagRm5EvDmobcx0cMzf4PPLObhUANrIwN/vP0xFDIAfD BN3qGaazpTschDXHwMsazuMtZkWqCyNjQyUDiWVjYbjJsIr2ysDiM2UmYJDPH7wv bWKeQiiNM90WRVzgp9dcLpvATwCJr0NiwtpBExUq3NoJGhoYE2qqkynaBe37I6xH pjlIMRsjDZhyEGjOOGST30XggcIipOoCF3m+oGeTfvuZ01WZkbljzosVy+6L0vI8 pdriyN0zyo7wDeqD54QnRjWst4kx6lEJtrc76q1nAG/mbSNa8/gSvQKo3KFE04RD b0W82f7sfKvib9Khqj/ZRLQifouEeTg= -----END CERTIFICATE-----Generated at Sun Dec 7 07:16:52 2025 by rpki-client