This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: 2Vif7dsojmOjSRmsy5P1ugR2XzbzGLSu3yipwOJ8Uu8= Subject key identifier: A4:82:1E:79:2D:07:65:D8:D4:F5:87:B7:16:4D:14:76:86:1B:8E:E7 Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 230B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 22FC Signing time: Sat 06 Dec 2025 15:35:05 +0000 Manifest this update: Sat 06 Dec 2025 15:35:05 +0000 Manifest next update: Sat 13 Dec 2025 15:35:05 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: WYy4W3OL9ki1DNFEQYeFD4L6xxRKRLxUfOpykSyK2NY=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8971 (0x230b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: Dec 6 15:35:05 2025 GMT Not After : Dec 13 15:35:05 2025 GMT Subject: CN=69344d29-e31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:b0:ef:30:70:f4:50:04:b5:3b:cb:fd:d1: 3a:9d:aa:71:b3:da:b2:de:67:68:4d:f3:52:86:0d: 14:6d:53:bc:9c:4e:7c:c1:bb:29:a6:a8:4a:ba:68: ed:38:8a:c6:6f:59:ab:14:ea:0c:3e:0f:e4:38:b9: 94:d5:8f:00:36:4a:44:32:7c:e4:71:7e:30:4f:a3: d8:19:0d:e7:d2:d0:ad:a1:fa:cd:ba:d4:86:60:25: d3:cb:23:07:cd:b5:0b:c7:a8:7c:45:d9:7a:a5:e0: dc:83:bb:99:76:1e:95:9b:90:32:46:b6:18:85:06: b4:0b:2c:62:c9:4f:8e:36:56:35:97:91:28:4f:c8: 27:92:d7:4b:5b:c0:40:aa:cb:90:e2:fb:12:ec:33: 24:c8:e1:18:db:3c:21:a3:8f:5a:ed:e3:3c:c1:c6: 6d:e7:2d:d3:3b:b5:5e:c7:41:f5:7d:2f:e2:13:2f: e9:f0:6d:31:9b:11:4c:e9:95:ff:79:01:5e:31:87: ef:e9:7f:51:13:55:2f:82:76:12:ca:e0:eb:8f:dc: 69:aa:ee:0c:6f:90:11:8c:8a:6d:d5:21:ae:69:d9: 98:0e:dc:03:54:07:64:9e:2f:a3:ba:a5:37:ae:a8: 5a:50:77:24:33:d5:a9:52:ce:22:38:01:e9:ef:f3: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:82:1E:79:2D:07:65:D8:D4:F5:87:B7:16:4D:14:76:86:1B:8E:E7 X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:55:60:9d:fc:1d:82:0a:10:85:30:ce:b9:c1:9e:bc:22:73: e2:7c:a3:0f:ef:2f:2d:2e:64:a8:87:0f:49:8f:c2:cc:81:ba: 29:09:b0:14:eb:e7:be:39:0b:d8:e9:ea:bd:69:93:b9:54:33: a0:eb:56:c1:6e:92:3b:46:a3:ce:a3:09:62:41:65:68:aa:3e: 2e:de:8c:5c:40:72:b6:e8:5d:4f:50:93:21:9c:7e:8e:e1:87: 82:a5:a7:4c:ae:ee:70:74:f4:78:f5:11:e5:75:15:96:1e:19: 0f:ef:3b:89:3e:19:a4:9f:e6:4b:e4:f6:c6:70:a9:68:3e:35: 13:e1:c9:ea:08:e5:23:1c:8c:6f:6a:e9:0c:44:77:f0:f8:0f: 3b:31:8d:e4:57:a6:a1:d5:cf:9f:5b:04:ed:94:f7:0c:91:fe: e4:67:0f:76:74:ee:0a:0d:b9:39:f6:2a:3d:18:17:e4:cf:80: 0f:3f:10:8a:f5:c2:f2:9a:ac:ab:c6:57:9e:2a:b4:1e:32:e3: a0:c3:51:22:5d:f0:0e:d7:09:01:fd:4b:51:4c:95:7e:7a:8f: 39:d2:e9:11:4e:3b:76:eb:8b:f5:30:1a:ee:b8:66:26:73:d0: 23:84:65:25:56:0c:d1:15:c9:dd:24:47:b8:09:58:70:a1:a0: 07:00:9c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjUxMjA2MTUzNTA1WhcNMjUxMjEzMTUzNTA1WjAYMRYwFAYD VQQDEw02OTM0NGQyOS1lMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAmw7zBw9FAEtTvL/dE6napxs9qy3mdoTfNShg0UbVO8nE58wbsppqhKumjt OIrGb1mrFOoMPg/kOLmU1Y8ANkpEMnzkcX4wT6PYGQ3n0tCtofrNutSGYCXTyyMH zbULx6h8Rdl6peDcg7uZdh6Vm5AyRrYYhQa0CyxiyU+ONlY1l5EoT8gnktdLW8BA qsuQ4vsS7DMkyOEY2zwho49a7eM8wcZt5y3TO7Vex0H1fS/iEy/p8G0xmxFM6ZX/ eQFeMYfv6X9RE1UvgnYSyuDrj9xpqu4Mb5ARjIpt1SGuadmYDtwDVAdkni+juqU3 rqhaUHckM9WpUs4iOAHp7/OejwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSCHnkt B2XY1PWHtxZNFHaGG47nMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4VWCd/B2CChCFMM65wZ68InPifKMP7y8tLmSohw9Jj8LMgbopCbAU 6+e+OQvY6eq9aZO5VDOg61bBbpI7RqPOowliQWVoqj4u3oxcQHK26F1PUJMhnH6O 4YeCpadMru5wdPR49RHldRWWHhkP7zuJPhmkn+ZL5PbGcKloPjUT4cnqCOUjHIxv aukMRHfw+A87MY3kV6ah1c+fWwTtlPcMkf7kZw92dO4KDbk59io9GBfkz4APPxCK 9cLymqyrxleeKrQeMuOgw1EiXfAO1wkB/UtRTJV+eo850ukRTjt264v1MBruuGYm c9AjhGUlVgzRFcndJEe4CVhwoaAHAJxA -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:22 2025 by rpki-client