This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: 4DM+DVhdlBc8LBgUQV50XnVtxW7yfetEckmZxvVwf8A= Subject key identifier: C7:77:E9:E6:4F:98:C5:39:A8:3A:57:78:3D:B5:CA:53:30:8E:E6:AA Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A41 Signing time: Thu 04 Dec 2025 19:00:02 +0000 Manifest this update: Thu 04 Dec 2025 19:00:02 +0000 Manifest next update: Thu 11 Dec 2025 19:00:02 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: YUwU3Tj7MVvT+guStNOv8HivmvRynZkdB65R61iDj9s=) 2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=) 3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Dec 4 19:00:02 2025 GMT Not After : Dec 11 19:00:02 2025 GMT Subject: CN=6931da32-9306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:50:0b:5e:75:58:82:ad:fa:5c:42:53:14: d8:3c:5a:c6:7c:7c:3c:07:22:0f:e0:9a:94:5a:73: a1:97:87:de:a7:28:67:7c:0b:56:4c:6a:88:76:db: 5e:2c:4e:63:bf:90:35:c4:8d:4e:d1:9e:8d:86:c1: e4:00:77:1e:d4:5b:97:dc:10:d2:f8:21:5f:7f:b9: ef:75:6a:f5:d9:9b:fd:08:ab:e5:70:0a:7e:d9:1d: ca:81:74:fa:f6:af:a7:d2:61:24:77:43:9e:d5:f5: c3:a7:47:94:70:15:da:f6:56:be:ad:24:80:a4:90: 7a:54:c5:2e:54:81:d2:e0:fa:64:9d:69:82:3d:81: 94:3e:80:84:68:b0:69:e8:d7:62:f8:48:2c:d4:b5: 75:3b:3e:4d:0e:bf:31:32:d2:0d:11:7c:13:1e:bd: 15:6e:bb:da:03:c3:ee:25:62:eb:bc:f6:88:af:46: 7f:31:43:80:12:e1:1d:ed:e9:c2:0f:bf:87:4a:b1: e4:53:f1:31:66:e3:4d:37:ad:62:b1:b1:46:eb:0c: b7:3c:d5:34:c2:c2:7d:37:db:bc:48:49:2a:73:d2: 35:72:4f:47:cc:35:48:76:5e:43:90:43:75:b6:54: ae:de:50:fd:38:2d:f5:ad:9f:31:0f:06:b5:bd:ca: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:E9:E6:4F:98:C5:39:A8:3A:57:78:3D:B5:CA:53:30:8E:E6:AA X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:79:e0:ff:fa:0f:17:19:07:f7:94:b2:40:bf:2b:f3:3f:5b: 3c:3b:30:06:c1:b4:f3:24:00:9a:bb:61:2e:ee:67:39:a2:e2: a0:65:ec:60:53:7c:5e:6f:16:0d:95:11:20:e7:90:45:16:c8: be:0f:22:46:04:83:ca:37:47:cf:2b:1e:61:80:f6:62:44:82: c7:ce:a3:60:76:67:2c:cc:99:e8:fd:b8:21:4a:87:a7:19:6c: e5:4d:1e:b6:05:73:7d:9b:57:4b:7b:14:2e:88:be:01:85:07: 57:c5:46:fd:ff:e6:83:54:a7:24:6b:04:e0:45:6d:24:94:35: ad:1d:f5:16:55:63:be:cd:c3:11:db:27:7d:2a:f1:c1:97:34: 97:b0:b1:65:93:ba:ce:13:bf:81:d3:87:b7:89:26:d5:24:45: ed:c2:51:86:8d:d4:79:90:01:25:26:9c:ea:8b:ec:95:f5:2d: 32:83:ee:46:9c:68:ac:1f:94:fa:73:b1:c8:17:53:e5:b2:4a: b8:32:76:c6:8d:32:47:18:69:cb:e6:ea:29:8b:7c:e2:b3:36: e2:c3:b5:82:24:2d:dd:0d:ef:e0:1f:1a:f7:2f:bf:b8:b7:7c: c5:46:77:ad:53:dc:2a:40:58:4c:1c:a6:80:2e:fe:e0:ad:42: 4e:ad:97:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUxMjA0MTkwMDAyWhcNMjUxMjExMTkwMDAyWjAYMRYwFAYD VQQDEw02OTMxZGEzMi05MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOhQC151WIKt+lxCUxTYPFrGfHw8ByIP4JqUWnOhl4fepyhnfAtWTGqIdtte LE5jv5A1xI1O0Z6NhsHkAHce1FuX3BDS+CFff7nvdWr12Zv9CKvlcAp+2R3KgXT6 9q+n0mEkd0Oe1fXDp0eUcBXa9la+rSSApJB6VMUuVIHS4PpknWmCPYGUPoCEaLBp 6Ndi+Egs1LV1Oz5NDr8xMtINEXwTHr0VbrvaA8PuJWLrvPaIr0Z/MUOAEuEd7enC D7+HSrHkU/ExZuNNN61isbFG6wy3PNU0wsJ9N9u8SEkqc9I1ck9HzDVIdl5DkEN1 tlSu3lD9OC31rZ8xDwa1vcpNSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd36eZP mMU5qDpXeD21ylMwjuaqMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPeeD/+g8XGQf3lLJAvyvzP1s8OzAGwbTzJACau2Eu7mc5ouKgZexg U3xebxYNlREg55BFFsi+DyJGBIPKN0fPKx5hgPZiRILHzqNgdmcszJno/bghSoen GWzlTR62BXN9m1dLexQuiL4BhQdXxUb9/+aDVKckawTgRW0klDWtHfUWVWO+zcMR 2yd9KvHBlzSXsLFlk7rOE7+B04e3iSbVJEXtwlGGjdR5kAElJpzqi+yV9S0yg+5G nGisH5T6c7HIF1Plskq4MnbGjTJHGGnL5uopi3ziszbiw7WCJC3dDe/gHxr3L7+4 t3zFRnetU9wqQFhMHKaALv7grUJOrZc7 -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:40 2025 by rpki-client