This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: bJTlDshc6wegKro163dPkLhGi0E9qVKtryd3DOpepA8= Subject key identifier: D2:A1:C0:FD:AF:DE:11:C3:80:02:A2:75:8D:9D:02:84:CF:54:66:55 Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0FAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0FA4 Signing time: Thu 04 Dec 2025 17:06:28 +0000 Manifest this update: Thu 04 Dec 2025 17:06:28 +0000 Manifest next update: Thu 11 Dec 2025 17:06:28 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: seaevB6f40kPgD7TvdZBseZOLur6dA92n2o4P6ekjOE=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: pq5+H8QeR9KAWVSI+cw+pkg68tHfepgn1G46rJN6KyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4014 (0xfae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Dec 4 17:06:28 2025 GMT Not After : Dec 11 17:06:28 2025 GMT Subject: CN=6931bf94-ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:57:af:84:79:da:3f:dc:e7:e6:17:89:2e: 75:15:d2:56:72:5a:5d:af:ad:b4:73:d6:5e:10:63: 90:4b:86:53:86:9d:0b:dc:05:1b:54:78:15:dc:db: e2:4a:de:27:9f:57:62:f6:fd:6e:24:42:f2:f9:77: 27:c2:71:f3:29:74:8c:69:f1:e1:e9:a9:d8:5d:ef: 47:05:8f:42:86:6b:d7:c5:a4:f1:03:b9:7f:58:5b: c3:ee:75:f0:fa:61:07:11:be:ef:1b:1b:7d:d7:d6: 27:ce:e2:12:85:04:43:b1:76:fe:a8:7b:5d:68:29: 3c:a6:f6:4a:12:e0:b2:2d:f8:8c:d4:65:8b:f0:13: 66:10:a0:50:85:69:2e:75:50:b0:48:f9:db:04:6b: 48:e0:19:c0:34:86:b2:e4:a4:47:6c:30:55:a4:1a: f6:fa:d7:eb:1f:a6:56:fb:44:38:72:b0:44:13:1a: 5b:1f:5c:46:6f:6b:84:24:ad:72:07:82:73:88:0a: a5:24:a2:3b:d5:b9:ac:20:22:05:e2:da:88:d5:a7: 00:3f:fd:ae:68:be:20:a0:68:84:29:b4:8a:c5:b4: dc:a2:db:a8:f2:8a:0c:5c:dd:4d:3c:6f:30:88:3b: 3f:b0:61:cb:40:1f:dc:12:ee:dd:e6:6c:f7:16:8b: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A1:C0:FD:AF:DE:11:C3:80:02:A2:75:8D:9D:02:84:CF:54:66:55 X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:43:34:13:92:52:26:d5:bc:85:0f:c6:43:cf:20:27:4c: 88:25:b9:75:18:04:c0:54:b0:f7:e5:8f:25:0a:37:a7:be:7f: 21:ea:cb:ed:bb:7c:86:8b:d5:e0:ca:92:48:47:da:7b:dd:05: cd:17:3f:a6:56:93:a7:62:69:ae:00:88:69:d3:51:e6:9e:0f: 3c:0b:48:89:85:86:28:ea:b2:47:d6:40:b5:3d:e7:f4:56:09: d7:20:09:3a:c6:00:2d:b6:a3:ac:9d:75:18:c0:af:8b:4d:cd: 2b:bd:a5:cd:4c:a1:97:c4:0e:2a:e8:d5:02:57:95:99:cc:90: f7:29:5d:b6:f3:88:90:84:71:e9:b3:2f:01:32:61:e8:77:07: 02:33:79:8e:e8:1e:e4:9e:46:34:e5:51:87:c8:43:ac:a3:38: 26:e5:14:9c:ec:26:9c:56:21:1f:3b:6b:4f:7e:66:5e:ba:d8: 61:cd:67:75:47:dc:a7:d2:18:31:f4:aa:a2:32:09:09:74:18: 8d:47:13:39:5d:57:0a:a0:a9:c6:80:8e:95:94:b6:d7:bb:39: 8c:60:15:b8:91:07:32:24:75:dd:cf:6d:2d:22:1d:2a:5d:c6: 65:11:4d:c6:52:65:5e:93:86:df:82:17:67:ac:ca:16:e5:0b: 3f:6a:ef:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUxMjA0MTcwNjI4WhcNMjUxMjExMTcwNjI4WjAYMRYwFAYD VQQDEw02OTMxYmY5NC1hYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoJXr4R52j/c5+YXiS51FdJWclpdr620c9ZeEGOQS4ZThp0L3AUbVHgV3Nvi St4nn1di9v1uJELy+XcnwnHzKXSMafHh6anYXe9HBY9ChmvXxaTxA7l/WFvD7nXw +mEHEb7vGxt919YnzuIShQRDsXb+qHtdaCk8pvZKEuCyLfiM1GWL8BNmEKBQhWku dVCwSPnbBGtI4BnANIay5KRHbDBVpBr2+tfrH6ZW+0Q4crBEExpbH1xGb2uEJK1y B4JziAqlJKI71bmsICIF4tqI1acAP/2uaL4goGiEKbSKxbTcotuo8ooMXN1NPG8w iDs/sGHLQB/cEu7d5mz3Fos3uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKhwP2v 3hHDgAKidY2dAoTPVGZVMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR3EM0E5JSJtW8hQ/GQ88gJ0yIJbl1GATAVLD35Y8lCjenvn8h6svt u3yGi9XgypJIR9p73QXNFz+mVpOnYmmuAIhp01Hmng88C0iJhYYo6rJH1kC1Pef0 VgnXIAk6xgAttqOsnXUYwK+LTc0rvaXNTKGXxA4q6NUCV5WZzJD3KV2284iQhHHp sy8BMmHodwcCM3mO6B7knkY05VGHyEOsozgm5RSc7CacViEfO2tPfmZeuthhzWd1 R9yn0hgx9KqiMgkJdBiNRxM5XVcKoKnGgI6VlLbXuzmMYBW4kQcyJHXdz20tIh0q XcZlEU3GUmVek4bfghdnrMoW5Qs/au9D -----END CERTIFICATE-----Generated at Sat Dec 6 16:21:28 2025 by rpki-client