This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json) Hash identifier: uO0DaUyk+yVfyAZYTLukU1dCsvu1lzKOOI8xYFSHrzk= Subject key identifier: 5C:4F:D9:C1:C5:A6:75:A9:26:1D:15:B7:A8:2C:54:B8:D2:52:51:58 Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft Manifest number: A6 Signing time: Fri 05 Dec 2025 04:25:43 +0000 Manifest this update: Fri 05 Dec 2025 04:25:42 +0000 Manifest next update: Fri 12 Dec 2025 04:25:42 +0000 Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: Ij2D9kMymaNAc3oi79upTL33rPS4H0E4JIuzK+qTZ2c=) 2: 000A7CE25A5911F0948C6D20C4F9AE02.roa (hash: GWfp52D5q+ZWDIE0kYIw+TpLPvEGwRDdK6mh7QUL+8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Validity Not Before: Dec 5 04:25:42 2025 GMT Not After : Dec 12 04:25:42 2025 GMT Subject: CN=69325ec6-af16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ad:1b:c6:5b:0c:26:42:f8:ae:eb:c1:16:14: 76:18:f4:a3:fe:c9:4e:b9:a2:b8:ab:56:67:bc:12: cb:fd:0e:ef:f9:ac:fa:aa:f1:f1:f3:f6:5c:1b:4d: 54:37:53:8a:36:16:ee:b7:9c:18:3e:4e:b1:62:e7: cb:7c:41:20:79:ef:a4:b0:b8:ef:d9:7a:b2:76:2c: 63:10:b5:c5:38:3c:10:c6:2a:5e:19:c4:fc:4b:09: 1a:77:37:1b:0e:3b:04:b0:d9:f7:bc:94:02:21:53: 8b:91:8b:61:2c:4e:42:7b:b5:01:5a:8a:d3:20:08: 55:18:9a:13:be:a1:e3:39:19:81:06:c2:6c:65:5b: f1:8b:5e:c5:45:51:d1:0a:ba:d2:f9:2a:fd:05:6f: 01:ed:ed:32:d3:9e:87:5b:72:d3:49:f7:fa:eb:0e: 25:6d:3e:f0:2d:25:1f:12:75:a4:66:8d:78:ea:66: 0e:2c:30:31:4a:6b:51:0d:c1:31:66:0c:58:68:c2: 14:f0:3b:18:2c:32:78:af:0f:d5:16:4e:df:7b:61: f7:7a:15:0b:15:e2:29:a0:aa:ae:1f:47:0a:07:d9: 05:de:5d:0c:67:ca:40:db:b8:60:ab:39:4f:b6:bd: 1f:c0:a4:d3:d4:9b:f8:36:15:2e:98:ba:db:70:43: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4F:D9:C1:C5:A6:75:A9:26:1D:15:B7:A8:2C:54:B8:D2:52:51:58 X509v3 Authority Key Identifier: keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:52:64:94:f7:81:d0:3b:e2:63:1f:3c:a8:8a:0d:62:d9:3e: 07:16:41:4c:2e:e6:16:4e:75:d7:9f:0a:8c:62:2a:a4:10:24: 1f:91:9c:88:eb:16:82:43:09:28:6a:f7:2a:d0:6b:10:19:b0: 3a:58:db:b8:12:b0:7b:8d:2a:c6:a0:f6:a2:d4:39:33:01:04: 50:05:2d:a2:0d:38:99:0e:af:4f:e4:87:ab:16:05:ac:d4:d3: df:ad:7c:ea:36:f0:47:d0:11:76:50:8c:47:f8:02:c2:62:1d: e8:bb:0d:41:5b:36:cd:d3:96:94:52:f8:d8:49:b2:c3:b4:d7: 8e:de:bc:15:13:f1:7c:af:4b:01:b9:33:72:b7:45:8c:ca:ba: 70:4b:8c:37:7e:34:37:88:34:24:81:2c:48:44:ce:12:9a:99: 89:47:6b:d7:38:46:35:5a:1f:fd:5e:ea:be:af:d6:40:ec:e4: e6:d9:49:0b:bc:8b:33:a2:66:c2:ed:c4:f4:37:d9:35:52:25: cc:5b:dc:f3:98:d7:e7:06:a7:e5:4f:5c:e1:31:a2:e7:25:59: 21:40:e4:ba:47:94:6a:cc:09:60:6d:05:83:09:79:8f:b6:da: c9:a2:8c:28:35:85:08:de:93:1b:04:eb:d2:30:cc:c7:9d:26: 73:d6:73:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJDODkxMTAvBgNVBAUTKEIxNzRBM0Q0QkE5QjQ3NkUyQjMxRTQ3QzcyQTI5OEQw NDREOTg3ODUwHhcNMjUxMjA1MDQyNTQyWhcNMjUxMjEyMDQyNTQyWjAYMRYwFAYD VQQDEw02OTMyNWVjNi1hZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7q0bxlsMJkL4ruvBFhR2GPSj/slOuaK4q1ZnvBLL/Q7v+az6qvHx8/ZcG01U N1OKNhbut5wYPk6xYufLfEEgee+ksLjv2XqydixjELXFODwQxipeGcT8Swkadzcb DjsEsNn3vJQCIVOLkYthLE5Ce7UBWorTIAhVGJoTvqHjORmBBsJsZVvxi17FRVHR CrrS+Sr9BW8B7e0y056HW3LTSff66w4lbT7wLSUfEnWkZo146mYOLDAxSmtRDcEx ZgxYaMIU8DsYLDJ4rw/VFk7fe2H3ehULFeIpoKquH0cKB9kF3l0MZ8pA27hgqzlP tr0fwKTT1Jv4NhUumLrbcEMo5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxP2cHF pnWpJh0Vt6gsVLjSUlFYMB8GA1UdIwQYMBaAFLF0o9S6m0duKzHkfHKimNBE2YeF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkM4OS85RTcyNjJCRUVG Q0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIyNHJNZVI4Y3FLWTBFVFpo NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkM4OS85RTcyNjJCRUVGQ0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIy NHJNZVI4Y3FLWTBFVFpoNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlUmSU94HQO+JjHzyoig1i2T4HFkFMLuYWTnXXnwqMYiqkECQfkZyI 6xaCQwkoavcq0GsQGbA6WNu4ErB7jSrGoPai1DkzAQRQBS2iDTiZDq9P5IerFgWs 1NPfrXzqNvBH0BF2UIxH+ALCYh3ouw1BWzbN05aUUvjYSbLDtNeO3rwVE/F8r0sB uTNyt0WMyrpwS4w3fjQ3iDQkgSxIRM4SmpmJR2vXOEY1Wh/9Xuq+r9ZA7OTm2UkL vIszombC7cT0N9k1UiXMW9zzmNfnBqflT1zhMaLnJVkhQOS6R5RqzAlgbQWDCXmP ttrJoowoNYUI3pMbBOvSMMzHnSZz1nNl -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:50 2025 by rpki-client