This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: hvP+603r6XRaEi8Cf9yZBVCpXRsTWQD79EaQ5P9O74M= Subject key identifier: B6:6F:27:9D:45:3D:F3:0C:B6:CF:2A:5E:A1:5D:80:0D:52:A6:A0:3C Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0DDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0DD5 Signing time: Thu 04 Dec 2025 17:24:06 +0000 Manifest this update: Thu 04 Dec 2025 17:24:05 +0000 Manifest next update: Thu 11 Dec 2025 17:24:05 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: bZoWNBb7DTiawVc3XOBAlOAUDmvMX89WCspYLiO7euo=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: Kl+qHWqwPNXr+jNBmlZ54bsne4TIDTa38/cYe+iBa+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Dec 4 17:24:05 2025 GMT Not After : Dec 11 17:24:05 2025 GMT Subject: CN=6931c3b5-de49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:ce:15:24:07:7b:a4:51:fc:15:f7:eb:22: a1:98:89:eb:65:d2:1d:d3:b9:aa:f9:4f:fc:19:2c: a8:60:3a:11:4b:9e:5b:c2:19:51:4f:8e:6b:27:0b: 73:74:8d:e5:24:ec:d3:dd:06:97:3b:7a:75:39:67: f9:0e:d9:f1:58:cd:9c:e9:aa:9a:70:e3:f1:de:4f: 43:df:67:41:85:4e:9d:e4:8d:56:da:95:14:3e:d7: 1b:bc:c4:ad:51:bd:07:11:01:95:7e:60:9b:a1:57: 3f:f4:5d:87:bc:da:1d:92:0f:f8:6f:ae:b1:3a:5e: 55:f0:52:0c:e4:dc:19:d1:3f:2a:65:55:01:1b:71: 37:56:af:f1:1b:f4:55:26:c8:68:84:b3:70:9c:14: 9f:5b:9d:9c:b4:eb:4e:e6:4a:5c:20:50:54:d6:d7: df:f1:c4:f3:48:f7:02:cb:10:90:12:85:ac:1e:5d: b4:43:50:ed:9a:58:12:dc:77:6a:b3:75:b8:a2:82: 6b:8f:f3:d2:7e:62:4b:a3:73:b5:0e:34:af:69:2c: b8:c1:f2:68:b9:30:f7:d1:9f:71:74:d2:60:ed:f7: 11:ac:0a:40:b0:74:c2:b1:ff:4b:ea:c9:39:fc:fb: 05:95:8e:79:16:42:4f:2b:26:b5:56:80:8c:ba:08: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:27:9D:45:3D:F3:0C:B6:CF:2A:5E:A1:5D:80:0D:52:A6:A0:3C X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ce:0c:67:29:78:b7:a1:35:fe:d4:de:49:bc:b3:a4:58:04: 1f:8a:98:5b:e6:f7:90:e8:6c:be:0f:59:3f:da:b5:fe:c3:1d: df:84:f9:4f:bc:9c:a2:09:99:50:77:81:84:39:9c:20:54:75: 37:3a:44:4d:de:94:40:c4:1e:aa:56:46:6b:ee:a9:6e:f7:8b: 74:34:76:10:64:34:07:8b:4b:84:ed:8d:88:7d:6b:08:96:d9: f0:0b:f1:01:29:fb:b3:6c:e9:5b:c4:b3:ab:0b:1c:f4:41:bf: e2:19:e6:dd:6f:6f:5c:db:99:82:00:c9:a8:05:19:c8:ce:7e: aa:4c:93:22:d8:a5:1e:6d:6b:50:f7:50:7f:dd:a4:43:70:08: cd:24:f1:06:6e:2d:24:9e:95:b8:08:ed:50:e8:ef:16:fe:41: 66:ef:c2:49:a7:6c:fe:82:0a:a3:79:c9:72:58:03:ea:1d:d3: ac:1d:ac:01:90:b7:95:9e:76:b3:7e:ac:4c:2b:96:c6:0d:2a: 3e:de:33:cd:c5:39:d6:ab:9e:6e:7c:ca:55:39:09:20:79:13: 6b:fd:7b:cf:a7:ea:13:fc:8f:d2:6a:a0:bc:bb:b0:7b:7d:be: 09:0f:73:1d:46:79:ea:6e:28:dd:ce:68:5f:7a:ef:33:a9:69: 45:be:56:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUxMjA0MTcyNDA1WhcNMjUxMjExMTcyNDA1WjAYMRYwFAYD VQQDEw02OTMxYzNiNS1kZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt3OFSQHe6RR/BX36yKhmInrZdId07mq+U/8GSyoYDoRS55bwhlRT45rJwtz dI3lJOzT3QaXO3p1OWf5DtnxWM2c6aqacOPx3k9D32dBhU6d5I1W2pUUPtcbvMSt Ub0HEQGVfmCboVc/9F2HvNodkg/4b66xOl5V8FIM5NwZ0T8qZVUBG3E3Vq/xG/RV JshohLNwnBSfW52ctOtO5kpcIFBU1tff8cTzSPcCyxCQEoWsHl20Q1DtmlgS3Hdq s3W4ooJrj/PSfmJLo3O1DjSvaSy4wfJouTD30Z9xdNJg7fcRrApAsHTCsf9L6sk5 /PsFlY55FkJPKya1VoCMugiIYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZvJ51F PfMMts8qXqFdgA1SpqA8MB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQzgxnKXi3oTX+1N5JvLOkWAQfiphb5veQ6Gy+D1k/2rX+wx3fhPlP vJyiCZlQd4GEOZwgVHU3OkRN3pRAxB6qVkZr7qlu94t0NHYQZDQHi0uE7Y2IfWsI ltnwC/EBKfuzbOlbxLOrCxz0Qb/iGebdb29c25mCAMmoBRnIzn6qTJMi2KUebWtQ 91B/3aRDcAjNJPEGbi0knpW4CO1Q6O8W/kFm78JJp2z+ggqjeclyWAPqHdOsHawB kLeVnnazfqxMK5bGDSo+3jPNxTnWq55ufMpVOQkgeRNr/XvPp+oT/I/SaqC8u7B7 fb4JD3MdRnnqbijdzmhfeu8zqWlFvlZ3 -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:03 2025 by rpki-client