This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: rchWdaFZWn2QJ2P5qD0hqXSEIaqNkr9EiTOD9E9j++s= Subject key identifier: EF:D3:39:F2:6E:E2:B0:7A:71:C2:CA:A2:69:4F:F7:AB:00:B6:AA:3B Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0DB8 Signing time: Sat 06 Dec 2025 17:19:24 +0000 Manifest this update: Sat 06 Dec 2025 17:19:23 +0000 Manifest next update: Sat 13 Dec 2025 17:19:23 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: 8NfelbdVr3tJ0p9lxoA1TauLvzXMCyW2BHwk7CnwTKQ=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Dec 6 17:19:23 2025 GMT Not After : Dec 13 17:19:23 2025 GMT Subject: CN=6934659c-81e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:27:2e:e3:ee:71:6c:41:e0:50:7e:8e:2f:ab: 40:67:83:6d:de:ae:5c:4c:97:5a:c3:a3:9c:62:08: 9e:64:8b:67:54:6d:89:e7:c4:e4:c8:5d:57:b0:41: bd:b2:27:57:35:4c:8f:cd:ed:3d:bb:c1:4d:fd:c7: db:05:07:3f:50:8e:09:e0:7b:b2:6c:f5:4d:9b:dd: 87:71:4e:45:d4:c0:c0:da:87:e3:b3:7a:cf:e4:df: 11:60:f5:3d:41:5c:f8:13:6b:58:2d:5e:1e:c9:66: 4e:8e:dc:11:21:4e:94:38:be:5e:38:51:31:70:41: 54:dd:8b:a3:e5:7a:72:b6:ea:81:84:84:21:88:88: e0:6e:6c:d5:48:c3:d1:8a:b3:d4:2c:56:b2:10:e4: ea:a7:76:9f:11:6a:17:ff:07:7d:16:15:12:c0:f7: 9c:69:67:e7:b6:ef:94:a3:d1:15:43:3b:14:76:bf: b2:a9:e5:40:85:d4:16:69:52:32:4d:9f:be:5a:99: 6a:90:62:2f:27:45:f9:89:b6:8d:cd:47:37:7c:b4: b0:e6:55:b0:8a:26:09:4f:b5:b5:02:4a:ef:d1:dc: 96:a2:c2:01:85:15:38:2e:5a:c8:a7:ee:fe:27:c4: 18:e1:74:f5:7e:04:69:e5:59:77:ae:6d:0c:c8:ba: ef:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D3:39:F2:6E:E2:B0:7A:71:C2:CA:A2:69:4F:F7:AB:00:B6:AA:3B X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d2:15:a8:c9:ac:27:06:4c:67:19:e5:a3:ec:f2:e0:1d:bc: 33:ee:be:91:88:07:f4:56:ed:41:8d:f1:b6:26:41:a0:04:15: 97:ec:e8:c9:a7:51:8c:42:af:6f:25:7f:14:28:8d:1e:8c:36: 05:eb:ed:b9:f2:7f:42:fe:e6:49:8a:4e:d5:6e:63:7b:a9:b0: 92:07:77:f4:44:29:a9:28:4b:cd:90:6c:b8:9a:98:55:ed:3f: f1:08:06:b2:6c:2f:39:c1:1a:13:cb:e5:e6:51:87:37:76:98: 63:24:75:0a:e3:5c:bc:60:d7:74:f7:7f:55:e8:df:3d:4b:cd: af:95:b8:41:89:4f:3c:fd:09:bd:e5:38:bf:f5:d1:36:b5:4e: 74:97:16:22:ec:ff:b3:c0:8b:4c:f0:89:03:11:6c:c9:ea:da: c3:1f:bb:f8:6d:9e:39:14:ac:76:dd:07:4a:51:d4:0a:5d:73: 3f:8e:bf:26:e7:0b:e1:d9:e6:7d:9b:92:9f:74:b8:de:34:7e: 42:8d:3c:90:b9:dc:ce:65:de:72:27:a4:f7:e3:ca:ab:9b:ac: 2b:30:c5:86:a1:c7:f7:05:e0:07:3a:39:f8:72:2d:23:28:8b: 10:51:86:c0:37:fc:ef:ab:37:2d:3d:79:15:ad:a8:de:a3:26: c6:33:60:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUxMjA2MTcxOTIzWhcNMjUxMjEzMTcxOTIzWjAYMRYwFAYD VQQDEw02OTM0NjU5Yy04MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5icu4+5xbEHgUH6OL6tAZ4Nt3q5cTJdaw6OcYgieZItnVG2J58TkyF1XsEG9 sidXNUyPze09u8FN/cfbBQc/UI4J4HuybPVNm92HcU5F1MDA2ofjs3rP5N8RYPU9 QVz4E2tYLV4eyWZOjtwRIU6UOL5eOFExcEFU3Yuj5XpytuqBhIQhiIjgbmzVSMPR irPULFayEOTqp3afEWoX/wd9FhUSwPecaWfntu+Uo9EVQzsUdr+yqeVAhdQWaVIy TZ++WplqkGIvJ0X5ibaNzUc3fLSw5lWwiiYJT7W1Akrv0dyWosIBhRU4LlrIp+7+ J8QY4XT1fgRp5Vl3rm0MyLrvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/TOfJu 4rB6ccLKomlP96sAtqo7MB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq0hWoyawnBkxnGeWj7PLgHbwz7r6RiAf0Vu1BjfG2JkGgBBWX7OjJ p1GMQq9vJX8UKI0ejDYF6+258n9C/uZJik7VbmN7qbCSB3f0RCmpKEvNkGy4mphV 7T/xCAaybC85wRoTy+XmUYc3dphjJHUK41y8YNd0939V6N89S82vlbhBiU88/Qm9 5Ti/9dE2tU50lxYi7P+zwItM8IkDEWzJ6trDH7v4bZ45FKx23QdKUdQKXXM/jr8m 5wvh2eZ9m5KfdLjeNH5CjTyQudzOZd5yJ6T348qrm6wrMMWGocf3BeAHOjn4ci0j KIsQUYbAN/zvqzctPXkVrajeoybGM2Dt -----END CERTIFICATE-----Generated at Sat Dec 6 18:48:54 2025 by rpki-client