This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: U7OO+8sD5LL7Hj5B/eAwV8PPVli3SDMccmou0Y6f3CE= Subject key identifier: 5E:8F:7F:D4:3C:EE:A8:03:85:0C:7B:30:39:24:65:B2:FF:56:2F:B6 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0CA2 Signing time: Sat 06 Dec 2025 17:49:37 +0000 Manifest this update: Sat 06 Dec 2025 17:49:37 +0000 Manifest next update: Sat 13 Dec 2025 17:49:37 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: GOhQF4iPdSmUmHCG753ZbkN+cBNi23faBP+m337DK1s=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: HGkfh3dEEIqv+3vFhSnMi2VsaDRfK/TUjKt6kaMeksE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Dec 6 17:49:37 2025 GMT Not After : Dec 13 17:49:37 2025 GMT Subject: CN=69346cb1-27cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:fd:02:21:82:22:12:d5:f8:a6:ac:66:b1: 98:05:45:3e:11:5a:b2:2e:a7:cb:da:35:b3:f8:48: a7:09:5a:83:16:92:60:99:e8:a5:5f:22:d1:71:81: 62:60:44:0d:71:a4:fb:82:ec:eb:5d:f5:39:b7:a7: b6:80:27:cc:54:cf:1b:c1:03:f0:81:03:71:f4:2a: fc:e9:39:f6:fc:8d:c9:23:a9:af:36:b8:b6:c4:fd: 45:ca:e7:98:11:27:95:52:fa:29:ec:c9:48:b3:e2: df:af:ac:ba:8d:04:e2:66:2f:dd:c2:35:28:0b:ba: 89:9e:41:ab:1e:25:c1:e0:ea:cd:45:87:7d:20:3d: 75:01:22:04:f1:80:77:ea:00:68:2a:65:fb:92:d0: ef:cb:a3:98:25:62:76:a2:e8:6c:b0:13:64:bc:70: cb:81:7e:dd:a5:06:47:a8:e8:9e:ac:5f:29:92:d4: 67:06:fc:7d:38:54:ff:8d:16:e5:dd:4c:96:d4:4f: 6b:be:e7:b0:c3:44:30:80:4b:13:cd:12:18:f4:58: 62:73:71:4b:34:da:d6:76:21:cd:10:d4:3c:df:1b: f9:ae:2e:00:36:32:ec:32:3f:5a:f6:4c:17:a7:f2: 50:94:5e:bb:d9:69:dd:77:02:54:76:3a:a7:29:53: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:7F:D4:3C:EE:A8:03:85:0C:7B:30:39:24:65:B2:FF:56:2F:B6 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:71:e8:9a:0b:3d:7d:ec:97:3b:8a:8f:fa:19:83:55:c0:83: d5:af:fc:53:ce:b1:ed:e6:70:c6:07:e7:73:ae:44:8a:2a:2c: ae:36:ff:79:41:02:e7:9c:ea:ac:5c:1a:08:30:3f:32:98:6b: 95:a4:ce:70:ae:ac:28:18:48:e1:ce:7c:af:22:02:2e:5e:7e: d2:5c:c9:71:4e:cc:da:0b:13:2b:c6:b3:d4:93:78:98:73:66: a5:04:8b:bb:70:a9:51:9a:ff:b8:b7:92:64:01:a2:af:e1:42: 6b:88:05:f9:09:64:96:f8:15:09:88:6a:c4:df:03:ad:3e:fc: 28:5e:ee:a1:1d:d5:c4:41:0c:ad:d7:40:da:f0:93:b6:b4:18: 40:db:16:91:12:99:19:5e:2d:0c:0e:35:9d:d6:d5:72:82:4a: 1d:54:f9:a4:de:cd:10:e3:d9:0f:04:2e:02:09:87:c6:e7:5b: af:31:37:c8:fb:05:63:c0:c1:3e:b3:d1:66:36:29:9c:99:b6: ad:62:a7:0b:db:00:5d:ad:36:eb:0b:d1:bb:8b:be:62:a8:4f: cb:e2:fa:df:70:cf:55:73:0c:cd:64:e8:68:1a:07:0f:bb:33: b9:b8:9c:cd:10:a2:7c:85:f0:d5:fc:ce:06:32:ce:57:15:1b: 09:84:3b:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUxMjA2MTc0OTM3WhcNMjUxMjEzMTc0OTM3WjAYMRYwFAYD VQQDEw02OTM0NmNiMS0yN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0b9AiGCIhLV+KasZrGYBUU+EVqyLqfL2jWz+EinCVqDFpJgmeilXyLRcYFi YEQNcaT7guzrXfU5t6e2gCfMVM8bwQPwgQNx9Cr86Tn2/I3JI6mvNri2xP1FyueY ESeVUvop7MlIs+Lfr6y6jQTiZi/dwjUoC7qJnkGrHiXB4OrNRYd9ID11ASIE8YB3 6gBoKmX7ktDvy6OYJWJ2ouhssBNkvHDLgX7dpQZHqOierF8pktRnBvx9OFT/jRbl 3UyW1E9rvueww0QwgEsTzRIY9Fhic3FLNNrWdiHNENQ83xv5ri4ANjLsMj9a9kwX p/JQlF672WnddwJUdjqnKVNlowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6Pf9Q8 7qgDhQx7MDkkZbL/Vi+2MB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARceiaCz197Jc7io/6GYNVwIPVr/xTzrHt5nDGB+dzrkSKKiyuNv95 QQLnnOqsXBoIMD8ymGuVpM5wrqwoGEjhznyvIgIuXn7SXMlxTszaCxMrxrPUk3iY c2alBIu7cKlRmv+4t5JkAaKv4UJriAX5CWSW+BUJiGrE3wOtPvwoXu6hHdXEQQyt 10Da8JO2tBhA2xaREpkZXi0MDjWd1tVygkodVPmk3s0Q49kPBC4CCYfG51uvMTfI +wVjwME+s9FmNimcmbatYqcL2wBdrTbrC9G7i75iqE/L4vrfcM9VcwzNZOhoGgcP uzO5uJzNEKJ8hfDV/M4GMs5XFRsJhDuy -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:01 2025 by rpki-client