This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: ebOL4OpliGHU1hDA0wncntAJvYYdL+oAFgUb/kq4vYw= Subject key identifier: 26:3D:7C:B9:26:1C:F2:B0:B8:7C:D6:A1:B4:AD:08:CE:1E:AB:81:44 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 0176 Signing time: Fri 05 Dec 2025 02:03:07 +0000 Manifest this update: Fri 05 Dec 2025 02:03:06 +0000 Manifest next update: Fri 12 Dec 2025 02:03:06 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: emHKRIaUpDWZQ0Ossh6NVXHfif6NyJtNwASc4ggW6ig=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Dec 5 02:03:06 2025 GMT Not After : Dec 12 02:03:06 2025 GMT Subject: CN=69323d5a-03ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:ec:2c:e7:67:ac:05:3e:4b:81:b9:0f:e0: 48:23:3f:e5:f4:fd:06:53:33:e1:81:37:4b:d4:8a: 56:3f:07:7d:d8:dd:8a:c2:27:f3:f9:10:31:8c:93: ed:24:63:29:74:40:fd:ca:2d:3e:a1:41:5d:0c:b3: 3e:b0:76:1e:4c:bf:c9:52:a6:ce:5f:28:c3:a3:46: 7d:44:fe:1c:c9:d4:56:49:aa:0e:87:fa:7e:27:b4: 84:d6:1b:40:fa:73:12:cb:66:7d:36:2d:24:51:68: bb:21:e7:d1:35:42:03:d6:04:64:2e:98:6a:41:6e: dc:9b:18:1d:49:ce:ef:cc:a6:dd:0d:54:8c:65:a4: d4:4f:86:52:33:dc:9c:f8:cb:ef:fa:29:57:c8:9e: ab:62:77:1d:13:10:bb:0a:f0:4a:27:6c:ad:53:a1: 31:65:43:6a:a5:ca:32:8e:dc:c9:7f:df:f6:1f:89: 99:36:1d:06:a8:bd:70:56:97:6e:e1:c8:bf:18:28: 1f:b8:09:bc:f3:df:9b:71:ec:7c:14:21:89:a8:a9: 85:e7:a5:f2:cc:19:7c:65:41:4e:09:0d:43:f0:31: ac:48:95:08:fc:cc:4e:93:dc:e1:38:7c:e4:fa:57: 23:78:90:fb:70:38:0c:dc:fb:6e:8a:4d:09:62:53: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3D:7C:B9:26:1C:F2:B0:B8:7C:D6:A1:B4:AD:08:CE:1E:AB:81:44 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1f:db:9b:b4:40:2b:78:59:db:fd:38:e8:fb:73:bc:86:9f: f9:63:4b:f8:5e:37:a4:41:11:b8:4a:e7:48:3c:38:13:77:1c: 1b:53:6a:0f:7f:71:48:9e:d9:0a:ed:6a:3d:a5:31:ce:bc:18: fc:c5:0c:d7:a1:8a:bb:90:02:4e:4e:2d:6e:40:35:cf:e0:39: 7b:3d:44:05:73:f6:6b:c8:b2:37:1d:11:4e:dd:79:a5:54:a4: 12:88:1e:28:92:ff:ff:ea:cf:1c:0a:c6:67:31:49:8a:0b:df: b1:62:e4:ff:88:52:33:be:dc:ab:15:e8:54:c0:10:a4:e8:e2: d5:bd:38:df:b3:de:92:8d:7c:4f:d3:f0:92:e3:0c:dc:3d:d3: 45:51:ac:71:4f:82:a0:fe:a6:e1:b7:ed:4e:64:ce:10:db:4b: ca:80:bd:81:63:29:d5:f9:ec:f9:a4:85:82:0c:4a:20:0b:b3: a4:08:fb:c3:5a:71:ad:1b:d5:2f:a0:c1:80:03:c8:13:84:d3: 9b:1f:5f:ee:7f:56:4c:57:c0:df:61:13:0f:5d:8b:fc:2d:d1: 5b:6d:0c:52:73:73:98:47:db:4f:c8:77:59:e5:96:e6:19:df: 52:b3:e1:22:32:95:a1:1e:a6:b8:20:cb:a1:3d:22:e7:06:4e: 3a:22:df:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUxMjA1MDIwMzA2WhcNMjUxMjEyMDIwMzA2WjAYMRYwFAYD VQQDEw02OTMyM2Q1YS0wM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjvsLOdnrAU+S4G5D+BIIz/l9P0GUzPhgTdL1IpWPwd92N2Kwifz+RAxjJPt JGMpdED9yi0+oUFdDLM+sHYeTL/JUqbOXyjDo0Z9RP4cydRWSaoOh/p+J7SE1htA +nMSy2Z9Ni0kUWi7IefRNUID1gRkLphqQW7cmxgdSc7vzKbdDVSMZaTUT4ZSM9yc +Mvv+ilXyJ6rYncdExC7CvBKJ2ytU6ExZUNqpcoyjtzJf9/2H4mZNh0GqL1wVpdu 4ci/GCgfuAm889+bcex8FCGJqKmF56XyzBl8ZUFOCQ1D8DGsSJUI/MxOk9zhOHzk +lcjeJD7cDgM3Ptuik0JYlPoWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY9fLkm HPKwuHzWobStCM4eq4FEMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsH9ubtEAreFnb/Tjo+3O8hp/5Y0v4XjekQRG4SudIPDgTdxwbU2oP f3FIntkK7Wo9pTHOvBj8xQzXoYq7kAJOTi1uQDXP4Dl7PUQFc/ZryLI3HRFO3Xml VKQSiB4okv//6s8cCsZnMUmKC9+xYuT/iFIzvtyrFehUwBCk6OLVvTjfs96SjXxP 0/CS4wzcPdNFUaxxT4Kg/qbht+1OZM4Q20vKgL2BYynV+ez5pIWCDEogC7OkCPvD WnGtG9UvoMGAA8gThNObH1/uf1ZMV8DfYRMPXYv8LdFbbQxSc3OYR9tPyHdZ5Zbm Gd9Ss+EiMpWhHqa4IMuhPSLnBk46It8K -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:24 2025 by rpki-client