This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: 5qrlOchJ/6jfrTUYkuIwDKk9GF8CMgKCoptHVX3thKQ= Subject key identifier: 6A:F8:DD:78:FB:39:6D:71:F8:4C:4D:90:5E:63:24:A1:B9:65:C0:B2 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 01BC Signing time: Fri 05 Dec 2025 01:17:03 +0000 Manifest this update: Fri 05 Dec 2025 01:17:03 +0000 Manifest next update: Fri 12 Dec 2025 01:17:02 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: kalu3n+CldgtHeVt36LF9V4C5dtj5/fauixqvZDypKQ=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Dec 5 01:17:03 2025 GMT Not After : Dec 12 01:17:02 2025 GMT Subject: CN=6932328f-1b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:0a:91:fc:ef:a0:36:1c:8e:3a:7a:be:dc: 66:62:c7:e2:03:35:a4:5c:75:6a:7b:ba:09:e0:7a: 22:0b:bf:92:68:1c:ad:2f:59:7a:e5:02:88:ff:54: b1:45:22:87:f7:16:b8:97:b7:b6:be:90:ba:ae:cd: d5:5c:8a:de:83:02:59:2a:c6:88:ec:db:d0:1c:74: c7:37:8a:88:86:7b:73:5d:4b:e5:6f:92:7a:53:b4: 01:48:d1:5b:9b:64:8f:41:96:10:d9:2b:53:bc:60: d5:7e:6b:31:56:d1:7a:40:16:96:26:74:49:0d:d7: 45:d2:9e:93:6a:91:41:b0:62:f1:21:6f:c4:26:b6: 12:53:7f:76:c1:c9:9f:69:e8:a5:76:7b:1f:c8:23: 6c:fc:1a:3e:7a:d6:49:fa:7c:db:a3:be:3f:5d:ed: 99:c0:16:17:8d:e1:92:f3:c4:58:a9:b6:44:c0:c6: 19:0c:31:82:50:5b:f7:99:88:97:23:44:b6:35:2c: 9e:68:52:93:80:37:ca:cf:49:49:9b:01:f3:db:f1: ad:70:a8:aa:9d:7d:98:45:82:20:13:b1:95:35:4d: 8d:46:43:e8:1c:b9:e8:f3:1c:8a:19:23:f1:94:09: 30:12:92:56:d6:47:19:47:cd:78:76:29:8d:07:7d: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F8:DD:78:FB:39:6D:71:F8:4C:4D:90:5E:63:24:A1:B9:65:C0:B2 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:70:b8:df:55:ef:9b:d0:6c:6e:75:82:1d:b8:ee:8c:1d:ba: 96:4c:64:13:cd:42:7f:eb:a1:84:2f:1f:54:b0:98:eb:c6:30: 77:a2:9c:45:52:31:e1:9a:59:7b:1a:34:76:a9:20:48:ba:cc: 52:7e:ba:f8:fe:b7:c6:be:ee:b9:f3:2f:05:84:c1:93:ea:c8: cc:25:d5:82:a2:0b:37:bd:bd:70:c2:18:47:91:66:04:b5:e1: c1:86:24:ae:6d:44:5e:70:19:3d:0a:f1:ca:d4:7d:11:d6:fa: 0c:4b:26:3c:ed:f3:2f:a0:b5:79:48:cc:cb:be:36:67:dc:ac: 7f:71:25:a7:43:93:df:ba:27:0b:ec:13:43:74:61:73:46:f1: d4:e7:84:37:8d:c3:e3:2b:12:9c:bb:c7:76:b1:73:80:b7:d2: ed:b8:fb:0b:86:98:fc:a2:3b:a7:67:84:46:69:92:86:8d:a4: 50:28:e7:43:19:a0:42:3c:c2:dd:03:4e:4a:fb:1a:1a:00:92: 53:27:5f:65:54:7f:a0:c8:ad:10:95:6d:5e:da:60:ed:b1:0e: 04:ae:0a:03:e7:ab:4c:af:b9:d4:0e:a3:5a:64:5e:4e:01:43: 91:de:12:58:ec:03:75:78:8c:83:83:19:ab:bc:75:2f:b4:d7: 53:34:65:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUxMjA1MDExNzAzWhcNMjUxMjEyMDExNzAyWjAYMRYwFAYD VQQDEw02OTMyMzI4Zi0xYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHsKkfzvoDYcjjp6vtxmYsfiAzWkXHVqe7oJ4HoiC7+SaBytL1l65QKI/1Sx RSKH9xa4l7e2vpC6rs3VXIregwJZKsaI7NvQHHTHN4qIhntzXUvlb5J6U7QBSNFb m2SPQZYQ2StTvGDVfmsxVtF6QBaWJnRJDddF0p6TapFBsGLxIW/EJrYSU392wcmf aeildnsfyCNs/Bo+etZJ+nzbo74/Xe2ZwBYXjeGS88RYqbZEwMYZDDGCUFv3mYiX I0S2NSyeaFKTgDfKz0lJmwHz2/GtcKiqnX2YRYIgE7GVNU2NRkPoHLno8xyKGSPx lAkwEpJW1kcZR814dimNB30+LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr43Xj7 OW1x+ExNkF5jJKG5ZcCyMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpcLjfVe+b0GxudYIduO6MHbqWTGQTzUJ/66GELx9UsJjrxjB3opxF UjHhmll7GjR2qSBIusxSfrr4/rfGvu658y8FhMGT6sjMJdWCogs3vb1wwhhHkWYE teHBhiSubURecBk9CvHK1H0R1voMSyY87fMvoLV5SMzLvjZn3Kx/cSWnQ5PfuicL 7BNDdGFzRvHU54Q3jcPjKxKcu8d2sXOAt9LtuPsLhpj8ojunZ4RGaZKGjaRQKOdD GaBCPMLdA05K+xoaAJJTJ19lVH+gyK0QlW1e2mDtsQ4ErgoD56tMr7nUDqNaZF5O AUOR3hJY7AN1eIyDgxmrvHUvtNdTNGVW -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:00 2025 by rpki-client