This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: NFOymcATuZN/gRXVLi14/xmQlDxMOEwbdA+G+WjbcS8= Subject key identifier: 2E:F5:90:DD:81:55:47:B2:CF:AA:7E:04:4D:3D:27:85:47:F9:09:C5 Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 0732 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 0714 Signing time: Sat 06 Dec 2025 20:32:11 +0000 Manifest this update: Sat 06 Dec 2025 20:32:10 +0000 Manifest next update: Sat 13 Dec 2025 20:32:10 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: TZoIKPldNeHtP/4gm3p50xd9v19OyQvaBCrdHC4c8M4=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: StZZUcpTqb1W1S9eXsQ5qcrkA/Ri8svuc1kgwSxho5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: Dec 6 20:32:10 2025 GMT Not After : Dec 13 20:32:10 2025 GMT Subject: CN=693492ca-138d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:ec:45:ba:c4:ac:9d:c5:50:ad:09:79:46: 4b:09:e2:22:1d:b2:0f:52:55:c7:83:2d:0c:62:ab: 78:7c:5e:33:f4:4d:1a:41:08:ff:a1:a5:b9:a1:83: 81:03:72:8a:03:e1:75:a6:6d:bd:6a:66:50:c5:c4: 2a:e5:29:d3:d6:4c:25:f6:f9:18:24:f5:08:20:28: 2c:ce:f7:05:a9:85:41:f1:95:7c:2d:67:29:cf:5c: 32:0a:0f:b2:ba:7a:9f:2e:86:46:9d:40:37:a8:3e: c7:df:29:ff:d1:c0:40:22:66:15:2a:56:5f:b7:15: 95:09:c6:60:7c:d3:06:14:e5:d2:a7:22:f1:c7:20: d2:63:c1:93:cb:50:c4:b9:2f:1c:0b:fd:2b:79:4c: 98:69:d7:8c:e7:78:c8:d5:26:79:98:a4:79:80:dd: 4d:51:56:5b:22:84:9b:bb:eb:2a:28:54:63:59:37: 42:5f:48:7e:90:58:75:e4:19:b9:89:1b:4e:88:80: 96:7b:b9:77:b9:df:e7:69:e5:c7:89:8c:02:91:00: fb:01:68:10:ab:9f:4a:05:d7:41:3b:cb:69:41:8a: ca:21:a5:30:d1:f1:cc:92:c9:1c:c7:89:dc:7e:7a: 22:ce:21:07:f0:d2:d0:41:d5:5c:86:05:7d:a1:72: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:90:DD:81:55:47:B2:CF:AA:7E:04:4D:3D:27:85:47:F9:09:C5 X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ac:68:3b:44:48:f4:50:81:8a:40:81:4f:95:85:a8:68:07: 90:e0:c1:36:c9:2d:31:2c:21:2b:0e:b5:48:c4:4c:c5:b2:1a: 10:bb:09:a4:96:ab:87:a6:ad:e1:cf:ff:a4:f8:55:51:02:66: d0:89:07:ac:f4:4f:44:7f:cd:33:f4:fb:ba:bf:18:50:95:41: d7:97:3b:3e:11:ff:7e:ce:5b:88:bb:da:ae:f2:80:42:f4:a0: 5c:f2:e4:7b:d7:ce:7a:79:06:4b:af:20:ca:a1:f1:a9:f5:de: 9b:8f:6b:e5:25:58:b8:67:7f:e9:2e:7a:c2:7d:32:1a:ab:fa: a8:e0:1a:97:48:1e:70:5f:3b:1c:ac:d0:a9:4d:18:21:17:8d: f3:bb:57:7d:b2:2a:d3:99:28:85:a6:57:39:71:b4:98:63:29: b7:f9:48:85:53:2b:f2:e3:f0:61:36:0f:aa:65:22:74:52:e6: 9b:c6:8e:f0:58:f6:19:bc:92:51:3d:9a:4b:f5:e4:34:52:23: 4a:68:1b:ea:36:66:9b:33:fa:31:01:99:21:2d:9d:37:77:ee: 77:eb:7b:84:e0:73:5a:e7:c8:26:b1:ac:0d:f9:87:87:21:74: d6:84:6b:c9:e0:f2:fb:4f:cd:a7:e4:a5:8b:7a:8c:a0:6b:1e: c7:68:31:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjUxMjA2MjAzMjEwWhcNMjUxMjEzMjAzMjEwWjAYMRYwFAYD VQQDEw02OTM0OTJjYS0xMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN3sRbrErJ3FUK0JeUZLCeIiHbIPUlXHgy0MYqt4fF4z9E0aQQj/oaW5oYOB A3KKA+F1pm29amZQxcQq5SnT1kwl9vkYJPUIICgszvcFqYVB8ZV8LWcpz1wyCg+y unqfLoZGnUA3qD7H3yn/0cBAImYVKlZftxWVCcZgfNMGFOXSpyLxxyDSY8GTy1DE uS8cC/0reUyYadeM53jI1SZ5mKR5gN1NUVZbIoSbu+sqKFRjWTdCX0h+kFh15Bm5 iRtOiICWe7l3ud/naeXHiYwCkQD7AWgQq59KBddBO8tpQYrKIaUw0fHMkskcx4nc fnoiziEH8NLQQdVchgV9oXKRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC71kN2B VUeyz6p+BE09J4VH+QnFMB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHrGg7REj0UIGKQIFPlYWoaAeQ4ME2yS0xLCErDrVIxEzFshoQuwmk lquHpq3hz/+k+FVRAmbQiQes9E9Ef80z9Pu6vxhQlUHXlzs+Ef9+zluIu9qu8oBC 9KBc8uR71856eQZLryDKofGp9d6bj2vlJVi4Z3/pLnrCfTIaq/qo4BqXSB5wXzsc rNCpTRghF43zu1d9sirTmSiFplc5cbSYYym3+UiFUyvy4/BhNg+qZSJ0Uuabxo7w WPYZvJJRPZpL9eQ0UiNKaBvqNmabM/oxAZkhLZ03d+5363uE4HNa58gmsawN+YeH IXTWhGvJ4PL7T82n5KWLeoygax7HaDHm -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:00 2025 by rpki-client