This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: MzmhCjSvBf45LdArm5YiCsjO4w1DuJWvEauz+n4r75s= Subject key identifier: 90:AB:16:3A:E0:67:7B:45:E8:AC:0A:E9:A2:F4:C7:87:19:9C:A5:EA Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: D9 Signing time: Fri 05 Dec 2025 03:40:14 +0000 Manifest this update: Fri 05 Dec 2025 03:40:14 +0000 Manifest next update: Fri 12 Dec 2025 03:40:14 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: wWkVNewG0ax8wHLELV+BR3EN40zhTHxrYFQ58Kh81aU=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: Ccx7SnGjPCxsvKUBeamLN1Oa9v9jyBTBtL74lgFdLHk=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: k2dEAv933yKqFgM4NCZBdb4Xn5r7WtBWqggONtm/gBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Dec 5 03:40:14 2025 GMT Not After : Dec 12 03:40:14 2025 GMT Subject: CN=6932541e-5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:81:7a:ef:32:c2:3d:b4:e4:b0:0f:71:99: 2c:55:22:96:34:75:03:9f:1b:cf:b9:17:0b:4e:b5: fa:9a:e0:d3:b9:25:e4:1c:b7:be:f9:a2:3c:3d:31: 0d:d1:11:73:ce:39:d7:84:62:a8:50:f2:5b:d9:e4: 59:71:e3:7d:f2:ec:4b:21:9c:ae:fb:95:c2:0a:4c: d5:3b:f6:1c:d0:dc:5c:28:cf:2b:c9:20:78:53:87: f9:db:24:72:0a:2d:4f:60:1d:35:a7:2a:e0:c8:12: 27:cd:1e:ec:1f:23:32:1e:30:e7:23:e3:3a:d4:38: 8b:f9:b6:4a:18:25:89:7e:25:79:68:ac:17:06:bd: a7:5d:d2:22:ea:96:d9:11:d3:60:9d:47:c3:e5:a3: 77:ab:c3:7c:9a:5b:5d:65:73:ec:61:3a:55:9a:af: 21:26:23:46:18:ba:8b:02:a6:38:5f:1a:2b:e3:31: 4e:2e:f6:10:ca:06:4f:b8:f7:ef:bc:d6:ba:f7:72: e4:b3:34:4b:aa:47:89:e8:fd:83:90:82:d4:a0:a3: 11:37:3f:f6:30:f4:72:ab:32:18:c2:4f:c5:61:e5: d8:68:71:fd:85:ce:f7:2c:19:bc:a9:dc:c1:24:55: f4:be:af:64:d8:18:dc:ce:35:c4:11:5e:e8:0e:9f: 27:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AB:16:3A:E0:67:7B:45:E8:AC:0A:E9:A2:F4:C7:87:19:9C:A5:EA X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a7:72:d0:35:31:47:bc:4a:6e:f4:13:a4:07:94:9c:8d:98: c4:46:a2:00:fe:6a:c8:0d:90:55:cf:59:33:44:77:8e:cb:13: 8d:4a:e0:65:17:fb:b2:25:a6:e6:61:69:1f:a3:a9:8e:b4:75: f4:d6:f4:98:4e:99:10:02:6a:42:11:a4:6d:3f:38:bc:b5:82: 08:87:55:46:05:1d:0f:bc:ab:99:c0:50:e0:bd:1f:8d:6f:6a: d8:10:12:60:a0:48:b6:86:96:9e:87:7d:fe:74:34:93:60:e3: a4:5d:ae:3e:b5:78:12:42:20:cf:e4:7d:a1:94:84:d8:32:a6: ce:75:23:c3:c9:36:1f:50:0e:b3:90:46:36:df:6b:3a:dd:de: 18:ac:66:2c:5e:d1:27:d6:93:2b:94:48:f2:31:47:aa:da:88: 17:0f:89:59:ea:74:c5:1a:49:38:cf:bf:af:7b:4d:73:22:8e: 8b:df:df:62:30:a0:6a:e8:6e:cc:18:b9:88:0b:40:dc:08:b3: 3d:e2:24:90:25:8b:45:f1:8a:b6:5f:7a:db:4e:88:6b:15:53: b4:18:bf:2b:7a:06:94:8d:3b:5f:66:91:14:92:fb:f6:7e:7f: 1f:32:d5:e3:2d:21:07:a8:ae:4d:c2:99:fe:7d:f5:71:ba:b2: 03:dc:16:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUxMjA1MDM0MDE0WhcNMjUxMjEyMDM0MDE0WjAYMRYwFAYD VQQDEw02OTMyNTQxZS01ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OaBeu8ywj205LAPcZksVSKWNHUDnxvPuRcLTrX6muDTuSXkHLe++aI8PTEN 0RFzzjnXhGKoUPJb2eRZceN98uxLIZyu+5XCCkzVO/Yc0NxcKM8rySB4U4f52yRy Ci1PYB01pyrgyBInzR7sHyMyHjDnI+M61DiL+bZKGCWJfiV5aKwXBr2nXdIi6pbZ EdNgnUfD5aN3q8N8mltdZXPsYTpVmq8hJiNGGLqLAqY4Xxor4zFOLvYQygZPuPfv vNa693LkszRLqkeJ6P2DkILUoKMRNz/2MPRyqzIYwk/FYeXYaHH9hc73LBm8qdzB JFX0vq9k2BjczjXEEV7oDp8nlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCrFjrg Z3tF6KwK6aL0x4cZnKXqMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqp3LQNTFHvEpu9BOkB5ScjZjERqIA/mrIDZBVz1kzRHeOyxONSuBl F/uyJabmYWkfo6mOtHX01vSYTpkQAmpCEaRtPzi8tYIIh1VGBR0PvKuZwFDgvR+N b2rYEBJgoEi2hpaeh33+dDSTYOOkXa4+tXgSQiDP5H2hlITYMqbOdSPDyTYfUA6z kEY232s63d4YrGYsXtEn1pMrlEjyMUeq2ogXD4lZ6nTFGkk4z7+ve01zIo6L399i MKBq6G7MGLmIC0DcCLM94iSQJYtF8Yq2X3rbTohrFVO0GL8regaUjTtfZpEUkvv2 fn8fMtXjLSEHqK5Nwpn+ffVxurID3Bag -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:57 2025 by rpki-client