This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: OUndEi213+Yc++A/OO71mWy/SzM6e3nEzGFsfgo3gqs= Subject key identifier: 33:24:72:1D:92:53:1B:1E:26:C2:62:68:7D:3A:A9:32:FC:3B:EF:BB Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0285 Signing time: Sun 07 Dec 2025 00:08:53 +0000 Manifest this update: Sun 07 Dec 2025 00:08:52 +0000 Manifest next update: Sun 14 Dec 2025 00:08:52 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: v2bQIXOWvQcGrt/UBRm+ZPpdJ+pLTGjjbtk7PHYmOuI=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: ENwpRdEuucpLR199wMX1ovh0yufktlvsonosnrFa6n4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: hpkK6ksOTaD7mDbT56x2zJ1eza3vKxeFROPXP1u/0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Dec 7 00:08:52 2025 GMT Not After : Dec 14 00:08:52 2025 GMT Subject: CN=6934c595-207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:6f:38:28:96:59:d8:20:ba:4b:65:a0:07: 89:36:06:1b:ed:0f:12:5b:65:f2:a2:8b:7a:7c:a1: d2:37:0b:96:12:32:43:54:25:0d:54:ca:b5:12:70: eb:c5:a3:77:a7:ab:66:4a:d8:2f:2b:9d:32:38:b7: 12:07:78:aa:47:33:e8:3e:64:8c:04:16:b4:b3:ce: 98:f7:02:f5:8e:06:a7:56:4e:af:f3:e5:6e:2c:0b: e3:70:12:53:a2:3e:8b:d8:3b:80:1c:5a:07:68:6a: eb:8d:0a:af:6c:d7:dc:4c:dc:c0:78:cc:76:1d:88: 7d:02:f8:b3:dd:1d:ce:5e:4d:b5:9a:09:dd:5d:15: 5c:e0:82:e1:4d:ab:7b:ec:67:69:fb:d9:73:3d:b4: a5:93:a8:38:a4:f9:96:19:70:52:c3:6a:fd:9a:f2: 61:f8:90:bf:8b:c3:ca:19:60:18:17:e3:c6:0c:ec: dc:11:08:a1:50:ee:da:c9:bd:40:43:e9:ea:39:d2: 04:f0:9b:68:73:5d:4d:8f:83:8b:1b:00:f6:0f:57: be:c1:35:85:4b:e7:da:ca:6b:56:90:f9:07:a0:53: 4e:b2:63:67:21:af:06:7e:5c:6f:6d:a5:db:96:0c: 08:33:ee:5a:f5:d3:71:23:01:82:18:04:e2:2d:84: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:24:72:1D:92:53:1B:1E:26:C2:62:68:7D:3A:A9:32:FC:3B:EF:BB X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d6:ce:59:19:5c:cf:79:2c:0f:ca:f3:e5:65:eb:a1:bf:56: 02:29:24:b1:7d:90:18:5c:fe:d2:54:58:e0:08:07:62:a6:c4: 37:9b:c5:70:ff:74:fe:59:f0:df:d6:ad:a3:6c:f6:1b:41:b6: a9:85:1b:3b:be:ea:cd:0f:8c:5a:89:8c:80:26:53:c9:24:fe: b9:5f:3e:69:da:07:07:c3:84:69:34:a6:ee:8c:59:5a:38:d5: f5:77:53:85:02:55:ae:ec:53:0d:2d:6d:df:f1:89:b6:2c:cb: bc:5e:6b:5c:c2:d2:90:8a:0a:df:de:2f:df:e3:9c:f2:5c:ed: 02:8f:f0:a6:4b:cf:0f:91:4f:26:7c:b0:b0:72:27:89:5e:45: 97:a1:c9:89:a8:84:d6:21:69:d7:f3:45:1b:65:ba:e1:d4:4d: 71:da:92:a5:5b:ff:d4:5d:1f:7f:c6:0f:70:05:39:d7:4d:99: 9f:80:83:03:36:6d:7c:a2:0d:89:ec:0a:b7:81:b9:7b:bc:4e: 3b:b8:0a:f9:6a:5f:40:91:b4:b6:b1:66:6c:9c:c9:11:39:d9: ee:f6:ff:3f:9d:03:93:f1:1c:c3:dc:85:e5:97:07:d9:8a:70: 91:54:98:90:dc:9e:ee:0d:63:c0:91:64:11:e7:fe:db:b4:60: 56:de:cd:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUxMjA3MDAwODUyWhcNMjUxMjE0MDAwODUyWjAYMRYwFAYD VQQDEw02OTM0YzU5NS0yMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3BvOCiWWdgguktloAeJNgYb7Q8SW2Xyoot6fKHSNwuWEjJDVCUNVMq1EnDr xaN3p6tmStgvK50yOLcSB3iqRzPoPmSMBBa0s86Y9wL1jganVk6v8+VuLAvjcBJT oj6L2DuAHFoHaGrrjQqvbNfcTNzAeMx2HYh9Aviz3R3OXk21mgndXRVc4ILhTat7 7Gdp+9lzPbSlk6g4pPmWGXBSw2r9mvJh+JC/i8PKGWAYF+PGDOzcEQihUO7ayb1A Q+nqOdIE8Jtoc11Nj4OLGwD2D1e+wTWFS+faymtWkPkHoFNOsmNnIa8GflxvbaXb lgwIM+5a9dNxIwGCGATiLYQa2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMkch2S UxseJsJiaH06qTL8O++7MB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh1s5ZGVzPeSwPyvPlZeuhv1YCKSSxfZAYXP7SVFjgCAdipsQ3m8Vw /3T+WfDf1q2jbPYbQbaphRs7vurND4xaiYyAJlPJJP65Xz5p2gcHw4RpNKbujFla ONX1d1OFAlWu7FMNLW3f8Ym2LMu8XmtcwtKQigrf3i/f45zyXO0Cj/CmS88PkU8m fLCwcieJXkWXocmJqITWIWnX80UbZbrh1E1x2pKlW//UXR9/xg9wBTnXTZmfgIMD Nm18og2J7Aq3gbl7vE47uAr5al9AkbS2sWZsnMkROdnu9v8/nQOT8RzD3IXllwfZ inCRVJiQ3J7uDWPAkWQR5/7btGBW3s0F -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:09 2025 by rpki-client