This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json) Hash identifier: 50P/9Pv2hKOgV93EEMHcoRzlzvGbKjNbkR+vlQB7PNE= Subject key identifier: 07:BB:15:72:14:6A:6E:04:75:FA:68:74:34:1E:47:E9:09:D3:E6:51 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 0A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft Manifest number: 0A21 Signing time: Sat 06 Dec 2025 19:01:22 +0000 Manifest this update: Sat 06 Dec 2025 19:01:21 +0000 Manifest next update: Sat 13 Dec 2025 19:01:21 +0000 Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: 56Zp2aWn9DtkVPKJftGbgk42EXSx524cVo4gmGh9KV4=) 2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: OT+54b9b887njSEqmuExUbEj0TJJUhjKtfKkhce9QUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: Dec 6 19:01:21 2025 GMT Not After : Dec 13 19:01:21 2025 GMT Subject: CN=69347d82-afcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:37:09:c3:f7:a2:55:56:c3:c3:a5:4c:1a: a4:0a:76:5f:bd:89:24:87:ab:97:75:bc:fc:a9:a2: eb:a8:c5:ce:16:4a:6c:ad:5a:52:fe:20:f6:27:c1: a9:0f:13:f8:cb:9f:b8:75:77:ef:8f:ad:7f:4e:44: fc:ba:2e:cc:1a:86:ab:af:3d:d4:ba:4a:3a:9b:6a: fa:58:34:50:27:d7:e3:09:27:19:59:4c:aa:fb:e3: b3:66:55:14:ab:5e:d3:98:5a:59:94:0a:d7:85:a0: c4:99:13:3f:05:4e:86:e4:01:4c:a7:14:06:c4:69: a9:f4:8b:4f:8d:82:01:c1:90:68:b3:99:3e:67:2e: 59:cb:5a:b6:62:0c:29:c2:95:d9:cb:25:21:c5:af: b9:21:50:fd:43:1d:e7:3e:b5:97:14:c9:62:7f:b2: 41:ea:44:f3:6e:a1:5e:bf:4d:db:a8:f1:6e:ca:0c: 85:fa:54:1c:8c:7b:a5:10:42:a7:67:8a:01:45:22: 99:22:d4:67:45:77:90:0b:2d:5f:cf:1a:d3:52:e8: 72:cc:fc:9b:1e:c4:54:ba:de:e9:c1:67:00:26:9d: c8:20:47:37:c2:ef:aa:45:ab:92:83:9e:8d:cc:61: 45:71:9b:b3:00:68:5a:7c:88:d8:fb:e4:3a:71:3b: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:15:72:14:6A:6E:04:75:FA:68:74:34:1E:47:E9:09:D3:E6:51 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5f:6d:09:67:05:bf:d9:6d:0c:82:94:fe:a6:67:ce:99:c2: 96:14:79:dc:d8:67:34:99:40:27:f7:91:53:1b:a2:fb:ec:e5: f8:9d:d4:7b:3f:af:88:34:fe:9b:5e:43:4e:2c:a1:59:76:fc: 11:5b:e7:57:50:73:9e:63:57:77:87:4d:c4:23:17:55:05:63: 9b:c1:cd:83:68:c2:97:f4:bc:b0:19:c9:ec:60:85:d7:20:ff: f1:c3:cb:bc:d3:d8:cf:77:b8:1e:b9:24:3f:55:04:7b:55:9d: e9:fe:72:76:5a:77:35:b4:35:ef:49:9b:ca:f1:24:97:b2:ab: 0d:ff:81:9a:0e:55:e4:06:52:84:24:29:1d:04:ff:c0:37:0e: 9d:e1:e2:b7:29:5f:b8:84:ea:67:20:6b:78:30:02:a3:81:78: e4:b2:09:99:13:cf:e7:40:77:2e:76:d3:0b:a7:e9:ed:8d:5b: de:45:a2:9c:22:b2:aa:38:98:19:01:c5:a6:4e:9e:3a:5b:cc: 28:22:be:31:98:cb:b7:c1:6a:ff:b9:7f:a5:f0:e9:6e:5b:8a: 24:5f:57:b5:1e:30:60:3b:cc:22:95:88:f5:5c:ad:79:7d:f6: 9e:b1:3d:2a:ac:94:73:df:40:99:5d:27:c0:62:cb:44:2b:f7: e8:73:98:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjUxMjA2MTkwMTIxWhcNMjUxMjEzMTkwMTIxWjAYMRYwFAYD VQQDEw02OTM0N2Q4Mi1hZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bo3CcP3olVWw8OlTBqkCnZfvYkkh6uXdbz8qaLrqMXOFkpsrVpS/iD2J8Gp DxP4y5+4dXfvj61/TkT8ui7MGoarrz3Uuko6m2r6WDRQJ9fjCScZWUyq++OzZlUU q17TmFpZlArXhaDEmRM/BU6G5AFMpxQGxGmp9ItPjYIBwZBos5k+Zy5Zy1q2Ygwp wpXZyyUhxa+5IVD9Qx3nPrWXFMlif7JB6kTzbqFev03bqPFuygyF+lQcjHulEEKn Z4oBRSKZItRnRXeQCy1fzxrTUuhyzPybHsRUut7pwWcAJp3IIEc3wu+qRauSg56N zGFFcZuzAGhafIjY++Q6cTvTUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe7FXIU am4EdfpodDQeR+kJ0+ZRMB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H OUJkZS1zYzBTVXJic0ZlMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiX20JZwW/2W0MgpT+pmfOmcKWFHnc2Gc0mUAn95FTG6L77OX4ndR7 P6+INP6bXkNOLKFZdvwRW+dXUHOeY1d3h03EIxdVBWObwc2DaMKX9LywGcnsYIXX IP/xw8u809jPd7geuSQ/VQR7VZ3p/nJ2Wnc1tDXvSZvK8SSXsqsN/4GaDlXkBlKE JCkdBP/ANw6d4eK3KV+4hOpnIGt4MAKjgXjksgmZE8/nQHcudtMLp+ntjVveRaKc IrKqOJgZAcWmTp46W8woIr4xmMu3wWr/uX+l8OluW4okX1e1HjBgO8wilYj1XK15 ffaesT0qrJRz30CZXSfAYstEK/foc5jk -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:52 2025 by rpki-client