This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft File: 57mHJeEOcOr07UTLjZz8LtAndII.mft (raw, json) Hash identifier: tTfMXqMRicSe1/oz1PP4amKYQde801DXjjAhg8XZJ7w= Subject key identifier: DE:BA:E1:E0:C9:1F:3B:D1:C9:6C:8F:08:BE:19:E3:7C:C4:3E:15:50 Authority key identifier: E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82 Certificate issuer: /CN=A91764C1/serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft Manifest number: 34 Signing time: Fri 05 Dec 2025 05:22:22 +0000 Manifest this update: Fri 05 Dec 2025 05:22:21 +0000 Manifest next update: Fri 12 Dec 2025 05:22:21 +0000 Files and hashes: 1: 57mHJeEOcOr07UTLjZz8LtAndII.crl (hash: d1j5/8Vp3i0r65jH1705YXBp/n99rd0C5ds7naYrHg4=) 2: 23A61F1A817011F08F821330C4F9AE02.roa (hash: U4f2TL1Nw6yGEyt2KKgu1w2UDLlsV+V95Sx4GlFACCI=) 3: 23278196817011F08F821330C4F9AE02.roa (hash: btm1G8nH7QUpRKAM7Nxi0i1txeAyqNXfCuUm0WkFHdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764C1, serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482 Validity Not Before: Dec 5 05:22:21 2025 GMT Not After : Dec 12 05:22:21 2025 GMT Subject: CN=69326c0e-1160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:32:a7:ba:04:48:65:ca:d0:72:39:39:ac: 7b:49:ee:d3:7e:af:5e:76:40:91:21:20:d1:a1:49: b1:c4:ed:1c:dc:de:2d:be:52:b5:1d:1d:82:0e:bb: 60:6d:32:c2:3c:84:ab:39:af:34:ac:6c:51:8c:d1: 0f:06:de:c8:2a:f0:99:6e:60:c4:22:37:45:59:3f: 3f:d9:37:6d:cb:e5:90:b2:5b:e9:69:f3:65:10:00: 5c:71:d6:1e:da:ef:9e:0f:de:50:42:bc:0b:4b:70: 19:13:f3:6f:09:51:58:f6:b0:3a:89:38:09:1f:a6: aa:bf:71:75:6e:3c:98:d7:12:2a:89:9e:df:04:7b: a7:2c:8e:35:c6:7c:de:de:60:b5:96:52:0d:fc:5e: eb:18:43:2f:45:2e:d4:8d:b8:b0:f6:c5:68:cd:79: 8b:ae:f7:c3:a7:ae:7a:84:4b:ec:e1:68:25:48:87: d6:05:0a:6d:ff:b2:58:10:2c:1a:13:8a:c7:cd:9c: 3a:72:97:74:a3:cf:6c:d4:25:4a:c0:5b:34:35:00: 43:33:05:95:59:28:c9:e5:c8:2d:72:62:ee:f6:37: 02:40:df:f2:90:b2:3f:67:7e:7d:b0:ad:b8:cc:c2: 1a:f7:88:2c:41:a3:8d:86:5f:6e:f3:ff:4c:f1:e5: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:E1:E0:C9:1F:3B:D1:C9:6C:8F:08:BE:19:E3:7C:C4:3E:15:50 X509v3 Authority Key Identifier: keyid:E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5e:ec:3b:f2:58:b9:dd:4b:ee:4b:15:68:94:ff:49:33:d0: 90:4f:29:83:6a:bf:ff:5a:45:cd:53:b6:0b:9f:65:39:4f:85: d0:43:d2:44:5d:1b:08:d3:0e:0a:31:a4:c2:63:5b:df:41:50: 47:45:40:26:b7:34:74:6c:c5:70:5e:27:30:8a:05:5f:9f:80: 53:c5:1b:7c:46:4e:f4:f3:34:e2:25:66:91:b4:cb:43:83:4b: dd:eb:44:10:85:7b:4a:07:f6:02:52:c5:c7:4e:2a:de:5a:cf: 75:ed:0c:08:a3:5e:73:4b:9b:4a:25:35:17:00:b0:28:7b:5d: 62:af:50:4d:15:43:8b:7a:6b:d5:c0:ce:c0:a9:ea:56:45:f3: d9:ac:3f:7c:8f:5b:c4:21:d8:03:37:e9:5b:ef:37:e3:fb:af: 24:10:25:f8:f1:d6:73:ec:90:27:47:c3:70:f9:97:c5:e1:49: 3a:8f:45:04:87:4d:b3:81:c2:a7:a0:9b:e0:76:b4:4c:d5:f2: b5:38:08:7b:01:6e:91:09:7c:d7:e8:6d:79:a3:07:60:4c:f6: c5:67:a8:11:cf:cd:15:36:12:31:c3:7d:a5:9d:5a:ad:c3:a2: fb:ad:5a:32:4a:73:e8:74:f9:66:9e:39:2e:76:d6:84:d4:49: 1e:21:af:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjRDMTExMC8GA1UEBRMoRTdCOTg3MjVFMTBFNzBFQUY0RUQ0NENCOEQ5Q0ZDMkVE MDI3NzQ4MjAeFw0yNTEyMDUwNTIyMjFaFw0yNTEyMTIwNTIyMjFaMBgxFjAUBgNV BAMTDTY5MzI2YzBlLTExNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBDTKnugRIZcrQcjk5rHtJ7tN+r152QJEhINGhSbHE7Rzc3i2+UrUdHYIOu2Bt MsI8hKs5rzSsbFGM0Q8G3sgq8JluYMQiN0VZPz/ZN23L5ZCyW+lp82UQAFxx1h7a 754P3lBCvAtLcBkT828JUVj2sDqJOAkfpqq/cXVuPJjXEiqJnt8Ee6csjjXGfN7e YLWWUg38XusYQy9FLtSNuLD2xWjNeYuu98OnrnqES+zhaCVIh9YFCm3/slgQLBoT isfNnDpyl3Sjz2zUJUrAWzQ1AEMzBZVZKMnlyC1yYu72NwJA3/KQsj9nfn2wrbjM whr3iCxBo42GX27z/0zx5b6VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3rrh4Mkf O9HJbI8IvhnjfMQ+FVAwHwYDVR0jBBgwFoAU57mHJeEOcOr07UTLjZz8LtAndIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NEMxLzc0MzA5MTc4ODE2 RjExRjBCMEE5NDMyRUM0RjlBRTAyLzU3bUhKZUVPY09yMDdVVExqWno4THRBbmRJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTdtSEplRU9jT3IwN1VUTGpaejhMdEFuZElJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 NEMxLzc0MzA5MTc4ODE2RjExRjBCMEE5NDMyRUM0RjlBRTAyLzU3bUhKZUVPY09y MDdVVExqWno4THRBbmRJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9e7DvyWLndS+5LFWiU/0kz0JBPKYNqv/9aRc1TtgufZTlPhdBD0kRd GwjTDgoxpMJjW99BUEdFQCa3NHRsxXBeJzCKBV+fgFPFG3xGTvTzNOIlZpG0y0OD S93rRBCFe0oH9gJSxcdOKt5az3XtDAijXnNLm0olNRcAsCh7XWKvUE0VQ4t6a9XA zsCp6lZF89msP3yPW8Qh2AM36VvvN+P7ryQQJfjx1nPskCdHw3D5l8XhSTqPRQSH TbOBwqegm+B2tEzV8rU4CHsBbpEJfNfobXmjB2BM9sVnqBHPzRU2EjHDfaWdWq3D ovutWjJKc+h0+WaeOS521oTUSR4hr9Y= -----END CERTIFICATE-----Generated at Fri Dec 5 20:10:27 2025 by rpki-client