This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: KL0e/ptd40x9pMFefcqWF9ZaBieHsSGo3dePCC+dt70= Subject key identifier: 86:CE:CC:AC:CB:F9:BC:FE:34:60:B1:5E:27:CD:4F:40:56:9B:A5:67 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0294 Signing time: Thu 04 Dec 2025 23:57:21 +0000 Manifest this update: Thu 04 Dec 2025 23:57:20 +0000 Manifest next update: Thu 11 Dec 2025 23:57:20 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: tCwxWw/pznqN1J5Qe/vUWnlTicWnkWz0XLAS2akP+IM=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Dec 4 23:57:20 2025 GMT Not After : Dec 11 23:57:20 2025 GMT Subject: CN=69321fe1-bc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:fd:48:f3:50:02:09:14:57:b6:bf:32:d5: 16:9c:45:e6:8b:89:5a:d3:a7:7b:cb:70:9a:dc:ca: 2b:9b:e3:85:ac:26:bf:c5:5a:f8:a1:cf:ff:08:28: f6:ba:90:31:4f:a0:c9:c0:e7:54:6b:a4:3c:72:25: 61:b8:1a:72:a9:04:8e:90:42:8c:6a:91:33:ed:35: f0:1c:c9:81:bc:0e:30:f2:b8:f8:c3:b6:65:ce:40: 21:8e:69:2a:9a:0b:28:87:0f:57:b8:25:6e:54:6d: 6e:b1:6c:bb:31:92:9f:1a:1f:ce:08:03:fc:ff:4e: 3d:88:8c:a7:5e:84:37:e7:86:bf:0e:a8:09:79:04: d5:32:fd:00:0c:0c:f5:0e:89:1a:a9:7f:b5:7d:5b: 00:98:1c:b6:f2:c0:fa:9e:23:dd:8f:49:1f:12:59: a8:a1:0f:b9:c5:b5:d7:b6:6a:0d:b1:5c:1d:fc:f6: 2e:8c:0e:c8:c4:8f:22:df:4d:bd:91:b3:bf:fa:54: c8:26:b5:d8:3c:9d:46:f5:02:c1:2b:aa:e8:1f:f4: ab:20:89:0f:fc:4d:31:8f:2c:38:96:52:41:29:d9: 38:6c:4a:64:59:38:f0:71:c7:c2:f7:da:d3:65:b8: 84:9c:8e:05:49:ea:e9:f4:30:ca:cf:ad:01:05:4d: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:CC:AC:CB:F9:BC:FE:34:60:B1:5E:27:CD:4F:40:56:9B:A5:67 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:6b:6d:34:1b:e1:c0:96:b6:99:22:e8:94:d8:76:b8:b1:84: 9b:90:bd:b3:d7:f4:47:14:cb:57:7b:7b:2f:2e:aa:d7:f4:c3: da:e9:f4:bb:80:43:06:9e:89:29:81:78:8f:f5:10:8a:38:8f: 9a:08:f4:71:ed:25:c8:2f:84:09:d4:24:33:df:3b:cb:98:33: 26:70:72:a3:9c:b7:12:18:79:dc:47:2e:a2:7d:ac:53:2f:38: bd:36:29:d3:71:64:4c:af:2a:67:dc:6f:56:c0:1c:c7:77:7f: 20:6d:97:c6:f1:38:f4:7b:af:c1:66:55:14:5d:3b:64:68:cb: 9d:97:6d:f2:67:76:e3:6c:cd:fd:91:b9:76:e1:8a:19:c9:b6: 33:96:46:73:e8:2e:d4:6d:df:a1:e5:b2:3a:8a:92:63:b0:a4: 09:80:a4:73:d1:c1:91:13:34:61:ef:c9:fd:4b:56:24:1a:33: ce:11:96:c9:81:86:c8:67:bb:52:64:05:ea:6e:61:d7:78:16: dd:38:fb:0e:f9:52:57:cc:2e:03:ee:82:26:77:a1:03:31:a5: 73:9d:ec:2a:38:38:c5:c8:b3:37:a1:41:16:35:5d:97:2a:98: c5:01:93:ca:83:23:b4:55:5d:53:20:99:80:98:7e:5c:d8:91: ee:1c:4e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUxMjA0MjM1NzIwWhcNMjUxMjExMjM1NzIwWjAYMRYwFAYD VQQDEw02OTMyMWZlMS1iYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowL9SPNQAgkUV7a/MtUWnEXmi4la06d7y3Ca3Morm+OFrCa/xVr4oc//CCj2 upAxT6DJwOdUa6Q8ciVhuBpyqQSOkEKMapEz7TXwHMmBvA4w8rj4w7ZlzkAhjmkq mgsohw9XuCVuVG1usWy7MZKfGh/OCAP8/049iIynXoQ354a/DqgJeQTVMv0ADAz1 DokaqX+1fVsAmBy28sD6niPdj0kfElmooQ+5xbXXtmoNsVwd/PYujA7IxI8i3029 kbO/+lTIJrXYPJ1G9QLBK6roH/SrIIkP/E0xjyw4llJBKdk4bEpkWTjwccfC99rT ZbiEnI4FSerp9DDKz60BBU3MswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbOzKzL +bz+NGCxXifNT0BWm6VnMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1a200G+HAlraZIuiU2Ha4sYSbkL2z1/RHFMtXe3svLqrX9MPa6fS7 gEMGnokpgXiP9RCKOI+aCPRx7SXIL4QJ1CQz3zvLmDMmcHKjnLcSGHncRy6ifaxT Lzi9NinTcWRMrypn3G9WwBzHd38gbZfG8Tj0e6/BZlUUXTtkaMudl23yZ3bjbM39 kbl24YoZybYzlkZz6C7Ubd+h5bI6ipJjsKQJgKRz0cGREzRh78n9S1YkGjPOEZbJ gYbIZ7tSZAXqbmHXeBbdOPsO+VJXzC4D7oImd6EDMaVznewqODjFyLM3oUEWNV2X KpjFAZPKgyO0VV1TIJmAmH5c2JHuHE5y -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:57 2025 by rpki-client