This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: Asg6Htalw6FscCaxTIVQ+Q2S99zSYGggGJQHFRpfmNg= Subject key identifier: C8:77:1E:1B:44:1D:82:7A:BF:41:C2:15:54:14:C4:F6:93:94:DB:2F Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0C88 Signing time: Thu 04 Dec 2025 17:53:53 +0000 Manifest this update: Thu 04 Dec 2025 17:53:52 +0000 Manifest next update: Thu 11 Dec 2025 17:53:52 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: T5XVTrAslliJaXCXxpDNmNl/FsAXSmXnHjO7erL+Oqo=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Dec 4 17:53:52 2025 GMT Not After : Dec 11 17:53:52 2025 GMT Subject: CN=6931cab1-ca5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:88:c1:6c:2f:04:60:f5:af:d8:ab:6e:d2:2c: 69:ca:c2:ff:11:d6:c4:45:87:10:fb:a5:a9:55:04: bc:bc:f3:c7:4b:cf:68:5d:b7:8d:77:ff:be:5e:8e: f0:d2:36:dd:66:ff:8a:0e:9c:34:e3:3c:91:37:bb: e4:df:63:80:74:a0:68:62:07:49:3e:89:bb:24:26: 43:66:d1:5f:36:d8:41:40:1e:7e:07:bf:81:7e:0e: ca:73:fe:c2:2f:10:2d:45:4b:a7:3f:e1:2d:17:b7: 7b:ed:c5:2b:81:7d:9d:99:00:ba:a5:53:ff:b5:4e: ad:64:dc:e4:1f:69:88:a2:f9:b9:09:51:46:e5:56: 9d:32:35:84:c5:02:9f:2d:ee:4b:94:c9:dd:24:0d: 14:1a:67:7f:44:56:78:2f:ed:d5:57:65:f8:8e:31: 4d:54:81:bf:37:fb:f7:4d:f9:e2:54:ab:4f:5b:50: 28:d2:9f:6c:fe:71:0b:b9:1a:8f:42:84:30:36:1e: 47:07:3b:e8:4e:df:23:ec:70:14:d1:be:f6:6f:b5: 42:de:c4:59:91:f0:35:e3:d7:8b:2f:9f:fa:0d:77: ac:12:13:b2:ac:2c:7b:1c:dc:a7:af:72:ec:c1:68: f2:fb:aa:02:a5:7d:d5:a1:86:d7:aa:4b:98:f2:1c: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:1E:1B:44:1D:82:7A:BF:41:C2:15:54:14:C4:F6:93:94:DB:2F X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9e:8a:0d:67:a9:98:35:32:25:db:59:72:25:40:bb:8a:36: 0a:fb:13:1b:59:0c:1d:b9:cd:fb:23:11:bf:ae:8f:d5:f0:b4: 44:45:10:14:00:42:2c:45:74:27:13:6f:1c:9b:a4:14:69:ca: 82:0b:c6:0a:21:8b:6c:35:44:5d:ff:e1:1a:d0:3b:3f:85:88: b7:1d:24:46:ab:b2:07:a3:f1:40:87:02:07:c7:4d:ae:90:76: 5b:09:48:0f:dd:a8:6c:48:70:2d:8a:03:67:c8:a9:c2:dd:bc: e7:90:75:bc:64:3b:f8:60:ac:7b:bb:f4:bd:b9:a9:c6:03:dc: 04:67:d0:74:12:f0:0c:fb:48:5f:40:7a:ad:0d:da:e2:dc:63: 44:16:7b:a7:c4:90:22:2c:a1:96:d9:98:db:fe:b9:95:1a:58: a2:1a:c5:37:9c:6b:31:8e:72:22:82:31:7f:4d:de:e8:d5:d3: 25:a1:41:68:ee:b6:7c:81:46:3d:b8:0d:44:50:8c:3f:ac:82: 15:be:af:70:cc:0c:cf:16:ad:f6:5b:b3:22:41:6c:7f:55:f8: e1:26:06:e7:21:88:48:14:9c:11:9b:1b:f3:11:ae:65:19:5a: 35:11:0b:18:69:97:81:e4:cc:bf:bd:a9:47:61:50:4e:6b:f0: 9a:42:40:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUxMjA0MTc1MzUyWhcNMjUxMjExMTc1MzUyWjAYMRYwFAYD VQQDEw02OTMxY2FiMS1jYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YjBbC8EYPWv2Ktu0ixpysL/EdbERYcQ+6WpVQS8vPPHS89oXbeNd/++Xo7w 0jbdZv+KDpw04zyRN7vk32OAdKBoYgdJPom7JCZDZtFfNthBQB5+B7+Bfg7Kc/7C LxAtRUunP+EtF7d77cUrgX2dmQC6pVP/tU6tZNzkH2mIovm5CVFG5VadMjWExQKf Le5LlMndJA0UGmd/RFZ4L+3VV2X4jjFNVIG/N/v3TfniVKtPW1Ao0p9s/nELuRqP QoQwNh5HBzvoTt8j7HAU0b72b7VC3sRZkfA149eLL5/6DXesEhOyrCx7HNynr3Ls wWjy+6oCpX3VoYbXqkuY8hxSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh3HhtE HYJ6v0HCFVQUxPaTlNsvMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOnooNZ6mYNTIl21lyJUC7ijYK+xMbWQwduc37IxG/ro/V8LRERRAU AEIsRXQnE28cm6QUacqCC8YKIYtsNURd/+Ea0Ds/hYi3HSRGq7IHo/FAhwIHx02u kHZbCUgP3ahsSHAtigNnyKnC3bznkHW8ZDv4YKx7u/S9uanGA9wEZ9B0EvAM+0hf QHqtDdri3GNEFnunxJAiLKGW2Zjb/rmVGliiGsU3nGsxjnIigjF/Td7o1dMloUFo 7rZ8gUY9uA1EUIw/rIIVvq9wzAzPFq32W7MiQWx/VfjhJgbnIYhIFJwRmxvzEa5l GVo1EQsYaZeB5My/valHYVBOa/CaQkAB -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:05 2025 by rpki-client