This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: iNr1T6XznyjogdpsrvPJRgkm3TlHeYWaB0DU38bVzf4= Subject key identifier: 1B:64:B7:8C:1B:D6:ED:8C:EF:8A:CC:AD:39:6E:C5:B8:FC:15:D7:EE Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0C16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0C0F Signing time: Thu 04 Dec 2025 18:11:37 +0000 Manifest this update: Thu 04 Dec 2025 18:11:37 +0000 Manifest next update: Thu 11 Dec 2025 18:11:37 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: AjPI7PEyl7wqj6Lvk29zOXXYUv0IfUJbnV3gK1m95ec=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: Jvoa2wjsCRH9WrHhsgTUNGCatVDEZjWYoT6a8W58UDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3094 (0xc16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Dec 4 18:11:37 2025 GMT Not After : Dec 11 18:11:37 2025 GMT Subject: CN=6931ced9-31e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:cb:f0:58:3e:d7:7e:74:c9:9c:78:5f:92: 2a:5e:0f:56:39:d2:f3:18:61:56:5f:3d:04:a0:bc: 69:5a:72:db:08:20:75:b0:35:0f:50:4d:89:d9:c3: e3:96:d9:2b:08:2c:49:bc:0d:d5:0e:bf:09:3c:54: 85:83:01:f0:50:a5:08:61:30:cf:c5:04:af:ee:38: 7d:41:d9:72:68:47:69:1b:68:5d:8c:72:65:53:13: bb:ab:bc:c1:55:1b:80:32:05:76:9e:8b:ef:76:ef: 4e:4b:4e:7f:5b:fa:91:b9:fe:a6:ed:e1:8b:ef:4a: bb:3a:bc:e8:8d:0d:e9:8c:67:78:78:ef:c5:fc:b5: 24:0a:de:9b:0c:d4:34:00:87:d8:79:46:8a:63:95: 23:25:99:e4:11:e6:7b:31:81:0b:05:a6:69:52:a5: cf:ab:a8:23:79:b7:66:e9:c9:bc:b6:b2:23:be:20: 75:3e:e1:d6:7d:15:4f:83:93:9e:ce:b7:d2:03:f3: 30:33:17:3c:c0:f0:f8:f5:25:ec:6f:2d:f7:9d:ac: 08:c4:6b:29:c2:19:f9:c7:84:e0:11:f6:ae:43:67: 8c:8f:b0:93:c1:75:08:4f:f6:3f:95:b1:cc:ab:60: cc:fb:a8:95:a3:a3:60:51:11:12:3d:c5:80:7e:91: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:64:B7:8C:1B:D6:ED:8C:EF:8A:CC:AD:39:6E:C5:B8:FC:15:D7:EE X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:33:be:aa:ce:ec:37:69:11:07:62:89:10:3d:eb:5c:ba: 4c:8b:50:b1:e6:87:b4:cb:c0:66:c6:b0:3c:09:e5:76:9c:d9: 02:5a:ae:5f:93:fe:8f:53:61:e2:86:26:c3:a1:28:0c:ed:46: f4:a4:6a:5a:a7:ff:cb:02:4d:d5:44:98:07:d0:7e:cc:9c:71: cd:05:7e:19:23:d6:ab:1e:83:97:2b:ce:25:a5:c3:9a:68:25: 7c:e1:3f:0e:8a:a9:a8:6c:54:88:73:29:b5:07:02:3a:ac:ef: 91:6b:70:e3:73:96:43:62:d6:55:73:fb:f8:0f:1f:41:db:09: 41:06:ab:f4:d2:9b:91:a1:8f:1d:cc:da:16:a4:6c:62:d6:d7: 2f:a4:f1:bb:21:95:c2:df:d4:d2:de:d7:46:f5:e8:91:75:74: da:2b:2d:e1:45:61:e0:16:73:0c:07:75:a2:d1:b6:55:f5:67: ba:66:b9:f5:c7:ff:4b:a4:c4:2f:2d:0e:51:f7:1f:91:41:3d: 16:0b:ab:96:c8:4a:75:a7:ca:89:ee:8c:28:8a:4a:48:42:87: 99:83:c8:ab:2f:6a:b5:45:01:34:8a:d5:d2:96:4b:6c:2f:46: f2:67:bd:2b:7e:5f:c5:94:41:5c:11:68:50:fd:ff:77:0b:8d: d8:fc:23:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUxMjA0MTgxMTM3WhcNMjUxMjExMTgxMTM3WjAYMRYwFAYD VQQDEw02OTMxY2VkOS0zMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVHL8Fg+1350yZx4X5IqXg9WOdLzGGFWXz0EoLxpWnLbCCB1sDUPUE2J2cPj ltkrCCxJvA3VDr8JPFSFgwHwUKUIYTDPxQSv7jh9QdlyaEdpG2hdjHJlUxO7q7zB VRuAMgV2novvdu9OS05/W/qRuf6m7eGL70q7OrzojQ3pjGd4eO/F/LUkCt6bDNQ0 AIfYeUaKY5UjJZnkEeZ7MYELBaZpUqXPq6gjebdm6cm8trIjviB1PuHWfRVPg5Oe zrfSA/MwMxc8wPD49SXsby33nawIxGspwhn5x4TgEfauQ2eMj7CTwXUIT/Y/lbHM q2DM+6iVo6NgURESPcWAfpGR3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtkt4wb 1u2M74rMrTluxbj8FdfuMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPaDO+qs7sN2kRB2KJED3rXLpMi1Cx5oe0y8BmxrA8CeV2nNkCWq5f k/6PU2HihibDoSgM7Ub0pGpap//LAk3VRJgH0H7MnHHNBX4ZI9arHoOXK84lpcOa aCV84T8OiqmobFSIcym1BwI6rO+Ra3Djc5ZDYtZVc/v4Dx9B2wlBBqv00puRoY8d zNoWpGxi1tcvpPG7IZXC39TS3tdG9eiRdXTaKy3hRWHgFnMMB3Wi0bZV9We6Zrn1 x/9LpMQvLQ5R9x+RQT0WC6uWyEp1p8qJ7owoikpIQoeZg8irL2q1RQE0itXSlkts L0byZ70rfl/FlEFcEWhQ/f93C43Y/CNF -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:13 2025 by rpki-client