This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json) Hash identifier: WJaymG7xZilFDk3vs/lH6W7EnNpj18P1lrzA9vvs52U= Subject key identifier: 07:A1:DA:28:27:5D:B6:85:0E:F7:00:F2:FE:89:94:23:90:B0:18:73 Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft Manifest number: 0B7F Signing time: Thu 04 Dec 2025 18:25:14 +0000 Manifest this update: Thu 04 Dec 2025 18:25:14 +0000 Manifest next update: Thu 11 Dec 2025 18:25:14 +0000 Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: 0BO/kix+7ZPQU90g7ZKV0vAcmZXURPnOQEOT5+eritM=) 2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: 3BW+6nymo9tOkRv2HmgjHdbdXck1fJ3/WU7dqQPErF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Validity Not Before: Dec 4 18:25:14 2025 GMT Not After : Dec 11 18:25:14 2025 GMT Subject: CN=6931d20a-b0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:d4:bc:3b:d5:9d:5a:21:66:55:e9:28:4f: 57:e0:14:ef:ec:29:7b:de:56:97:32:f0:90:72:94: 92:33:6d:e2:c1:d1:95:dd:0b:2c:91:ff:c1:fc:84: 09:2c:5e:d5:df:38:79:99:04:9c:c9:48:14:4e:cd: 13:29:11:41:00:3f:84:b3:8b:f3:59:f7:67:8e:2b: 82:76:f3:22:68:9a:48:93:0a:29:db:4e:df:2f:93: c0:0d:41:a5:96:73:e4:e1:ea:6c:b2:00:69:be:18: c2:23:77:98:4a:d8:1e:ba:57:e2:96:80:0d:66:57: 37:02:93:86:72:78:f0:f6:0d:47:09:93:a5:6a:8b: 7d:56:68:ec:ed:a9:d5:91:a8:7e:9b:f1:8b:4a:0c: 54:83:d9:a8:c0:22:bf:ff:d6:60:fa:77:4b:f2:b5: ab:b9:e9:03:9b:cf:aa:4c:3b:ed:de:b8:99:ca:81: bb:3a:ca:75:f5:c2:51:9c:b3:ad:e7:d0:ea:b3:fe: 9d:9e:fa:83:b3:12:82:47:31:a6:56:01:e9:7f:76: 6e:b7:20:48:a9:6a:56:63:3d:b2:c9:34:e6:bc:18: 09:92:4c:e1:6f:79:1c:d9:92:83:58:5f:e5:b4:b1: ad:f7:b0:8e:b4:f2:f0:25:33:c6:73:20:63:84:85: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A1:DA:28:27:5D:B6:85:0E:F7:00:F2:FE:89:94:23:90:B0:18:73 X509v3 Authority Key Identifier: keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:70:c7:21:77:82:91:8e:93:e9:0a:85:cd:8a:4a:d1:13: 62:90:ec:bc:e9:87:7b:42:4e:bc:9d:89:a8:86:52:fc:73:07: 82:00:30:96:00:87:2f:31:24:df:b0:ee:ab:6f:52:35:7b:d8: 79:fc:48:99:29:f2:8e:ed:cd:c2:f7:78:b3:db:79:5e:d0:e1: 34:11:db:5f:5c:26:6e:06:05:4a:8d:7d:95:5f:e2:be:9a:b1: 7e:4c:55:e0:6a:27:83:b6:53:65:4c:87:5e:13:a6:67:d2:be: 1e:dd:4f:91:c7:0d:62:18:5a:f4:3a:f0:e0:39:50:72:b1:ba: aa:b8:2e:d1:31:72:09:a8:7b:72:22:9c:14:aa:6a:2c:5a:43: 78:31:09:9f:52:ad:c3:46:0b:97:6a:3f:37:d4:3c:df:91:b9: 5f:d7:1e:10:52:14:a4:15:e6:3f:37:70:03:57:7c:1c:74:9e: 86:70:50:cd:1c:90:68:30:6d:25:48:24:e8:05:38:1c:7d:25: 5b:4a:30:c3:53:ac:e8:14:77:b8:cb:46:03:e1:7d:79:a6:50: fe:cd:7c:70:44:52:c0:19:21:5d:b9:fc:1a:0f:8a:2c:65:ac: a2:e0:23:26:d2:ce:68:57:25:1b:32:4a:ed:3d:51:24:61:48: 3f:db:a5:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF MTQ3NUVDOTAwHhcNMjUxMjA0MTgyNTE0WhcNMjUxMjExMTgyNTE0WjAYMRYwFAYD VQQDEw02OTMxZDIwYS1iMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyfUvDvVnVohZlXpKE9X4BTv7Cl73laXMvCQcpSSM23iwdGV3Qsskf/B/IQJ LF7V3zh5mQScyUgUTs0TKRFBAD+Es4vzWfdnjiuCdvMiaJpIkwop207fL5PADUGl lnPk4epssgBpvhjCI3eYStgeulfiloANZlc3ApOGcnjw9g1HCZOlaot9Vmjs7anV kah+m/GLSgxUg9mowCK//9Zg+ndL8rWruekDm8+qTDvt3riZyoG7Osp19cJRnLOt 59Dqs/6dnvqDsxKCRzGmVgHpf3ZutyBIqWpWYz2yyTTmvBgJkkzhb3kc2ZKDWF/l tLGt97COtPLwJTPGcyBjhIWSEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeh2ign XbaFDvcA8v6JlCOQsBhzMB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdEQi9COTUxRTI4QzNEQ0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBo cm5FeGR3NTdIYVBoUjE3SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd5XDHIXeCkY6T6QqFzYpK0RNikOy86Yd7Qk68nYmohlL8cweCADCW AIcvMSTfsO6rb1I1e9h5/EiZKfKO7c3C93iz23le0OE0EdtfXCZuBgVKjX2VX+K+ mrF+TFXgaieDtlNlTIdeE6Zn0r4e3U+Rxw1iGFr0OvDgOVBysbqquC7RMXIJqHty IpwUqmosWkN4MQmfUq3DRguXaj831Dzfkblf1x4QUhSkFeY/N3ADV3wcdJ6GcFDN HJBoMG0lSCToBTgcfSVbSjDDU6zoFHe4y0YD4X15plD+zXxwRFLAGSFdufwaD4os Zayi4CMm0s5oVyUbMkrtPVEkYUg/26UJ -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:47 2025 by rpki-client