This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: 4X9ooWEB6f2yunXy5rhxanyuCLJbXzeF7DoepXuxeKo= Subject key identifier: 8D:9D:52:29:09:83:54:F4:28:FD:E5:C5:7C:B6:AB:9A:51:E4:88:0D Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 051C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 0513 Signing time: Thu 04 Dec 2025 22:13:49 +0000 Manifest this update: Thu 04 Dec 2025 22:13:49 +0000 Manifest next update: Thu 11 Dec 2025 22:13:49 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: ydrcYe/Mm6hEbUFelEnLa4SSsKP4GKJMTLUb7HdJKGA=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Dec 4 22:13:49 2025 GMT Not After : Dec 11 22:13:49 2025 GMT Subject: CN=6932079d-a3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:7c:0d:ca:37:18:80:c1:3f:76:69:dd:7b: 82:bb:c7:51:e5:ff:94:f7:35:51:b3:75:41:01:8b: dc:ef:e0:6c:a6:d7:fb:42:50:12:7f:5a:6e:24:85: cc:39:68:d5:61:2d:08:7c:ed:fe:f6:d6:01:fd:31: 46:ff:63:0b:c3:19:04:06:49:db:10:7c:49:57:6e: d1:41:b3:6e:1a:7d:9d:56:66:e9:bd:52:48:57:2e: 71:16:a8:fa:0e:eb:33:6c:50:91:96:a9:87:b8:8e: c5:c2:21:1e:8d:10:ca:cd:98:fa:36:88:eb:f7:ac: 16:33:54:c6:56:9b:0e:c3:2b:8a:ea:7e:00:8f:b3: e2:ee:c0:a0:67:a3:f2:af:69:df:fb:4f:3e:d4:5d: 23:a3:de:82:5b:ec:0e:71:ef:62:19:0f:1a:1c:db: 3c:98:b0:ae:7d:20:06:d9:08:ef:d9:9a:e2:5d:cb: ad:ed:7f:4b:c8:ec:72:9f:70:e8:7f:df:da:30:9c: 8e:49:0e:e1:9d:e0:a7:90:97:35:c7:b9:6f:6e:32: 8d:36:e7:d1:ff:39:02:85:58:86:a1:dd:1f:f7:3a: d4:ff:3c:ef:1b:46:99:d7:5a:cd:43:a7:7f:06:1b: 7b:6f:50:5d:15:97:39:a5:14:aa:29:2f:22:b1:5d: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9D:52:29:09:83:54:F4:28:FD:E5:C5:7C:B6:AB:9A:51:E4:88:0D X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:87:35:85:46:4d:b2:c1:c2:0c:7e:90:77:8e:11:65:6c:ab: 0d:dd:5d:40:fe:18:d8:32:44:d6:c8:2b:4b:8c:ab:84:c1:6c: 96:4b:0c:38:cf:3f:58:7c:f2:de:28:ef:2f:2f:84:40:62:57: ef:29:31:b5:8b:f0:94:8b:7d:a7:c0:08:e1:d7:e5:27:99:53: 6b:fa:ae:4e:0d:ea:de:33:6b:9b:cf:99:5d:ad:f5:da:72:a9: 1d:3c:eb:1e:eb:d8:ef:7c:c0:eb:e5:e7:ba:d0:f0:60:66:4f: 89:7a:f1:41:8a:0a:75:3b:71:bb:56:52:8f:42:18:6e:53:71: 6f:57:bb:83:43:29:65:50:f2:69:35:07:3a:d4:df:54:6a:ca: 24:44:c7:5a:93:72:8a:24:76:34:c4:7c:b1:e9:89:3d:2f:fd: 7a:1c:65:30:79:b5:4f:84:a4:40:50:e8:b2:85:ab:1c:32:8e: de:38:bd:fb:02:5a:0a:a5:5a:c1:81:bd:5a:ac:24:4d:d1:13: d0:5c:79:36:88:5d:09:85:86:b6:35:52:c2:c0:af:14:da:08: 11:83:33:11:26:fc:9a:57:68:a1:5a:ac:cc:73:70:87:36:5d: d4:22:bb:be:47:92:2f:60:77:38:04:4f:35:de:d4:57:e1:4b: 29:ce:df:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUxMjA0MjIxMzQ5WhcNMjUxMjExMjIxMzQ5WjAYMRYwFAYD VQQDEw02OTMyMDc5ZC1hM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05Z8Dco3GIDBP3Zp3XuCu8dR5f+U9zVRs3VBAYvc7+Bsptf7QlASf1puJIXM OWjVYS0IfO3+9tYB/TFG/2MLwxkEBknbEHxJV27RQbNuGn2dVmbpvVJIVy5xFqj6 DuszbFCRlqmHuI7FwiEejRDKzZj6Nojr96wWM1TGVpsOwyuK6n4Aj7Pi7sCgZ6Py r2nf+08+1F0jo96CW+wOce9iGQ8aHNs8mLCufSAG2Qjv2ZriXcut7X9LyOxyn3Do f9/aMJyOSQ7hneCnkJc1x7lvbjKNNufR/zkChViGod0f9zrU/zzvG0aZ11rNQ6d/ Bht7b1BdFZc5pRSqKS8isV2n0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2dUikJ g1T0KP3lxXy2q5pR5IgNMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBhzWFRk2ywcIMfpB3jhFlbKsN3V1A/hjYMkTWyCtLjKuEwWyWSww4 zz9YfPLeKO8vL4RAYlfvKTG1i/CUi32nwAjh1+UnmVNr+q5ODereM2ubz5ldrfXa cqkdPOse69jvfMDr5ee60PBgZk+JevFBigp1O3G7VlKPQhhuU3FvV7uDQyllUPJp NQc61N9UasokRMdak3KKJHY0xHyx6Yk9L/16HGUwebVPhKRAUOiyhascMo7eOL37 AloKpVrBgb1arCRN0RPQXHk2iF0JhYa2NVLCwK8U2ggRgzMRJvyaV2ihWqzMc3CH Nl3UIru+R5IvYHc4BE813tRX4Uspzt+q -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:47 2025 by rpki-client