This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: LlLfccZsWCYQL7Xkpyo9E/d8+ibr1NkhNcl9N011ZBk= Subject key identifier: 7D:D6:66:BE:8D:76:A7:70:20:D0:40:09:AE:94:09:9F:46:F6:16:76 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CFE Signing time: Thu 18 Dec 2025 17:51:22 +0000 Manifest this update: Thu 18 Dec 2025 17:51:22 +0000 Manifest next update: Thu 25 Dec 2025 17:51:22 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: fFj18WSSsXIvE4thBrqmWdcZ2XDXD1dDZPYcu0FmH28=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: 7aBlRGKjzxRqNTE4/k88lfJou1zQvjo1o2zcrm10Xw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Dec 18 17:51:22 2025 GMT Not After : Dec 25 17:51:22 2025 GMT Subject: CN=69443f1a-5c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:52:20:0f:79:f9:00:91:94:4b:c9:d5:9b:9e: 59:51:b0:9a:dc:e2:5f:c5:db:22:e3:f5:00:56:01: b8:04:65:5d:1b:a6:f6:18:f9:48:6f:be:43:9d:39: 47:37:29:e6:44:5e:c2:8c:15:9b:e1:dd:7f:bf:d6: 9f:95:05:84:be:a8:b7:e9:e5:bc:ba:da:d8:e4:50: aa:f0:df:4b:09:96:44:8b:aa:bd:1b:d8:b4:1a:57: 03:c6:c6:91:13:cd:cf:b0:e1:d6:16:e6:49:ca:f8: 03:22:8f:c2:a1:67:30:b0:f2:34:53:25:7e:34:76: ab:28:58:a1:84:23:14:77:f1:49:bb:52:7d:6c:73: 24:ed:be:c8:bf:cc:02:d9:1e:fb:16:75:7c:6c:7d: 59:f6:4d:0d:5e:91:c8:d1:6a:03:ea:d2:bf:75:0b: 72:0b:98:01:b6:47:45:b7:47:40:46:1c:c7:1d:1a: 2f:bf:8a:b4:4f:bb:df:f6:47:3a:79:e8:30:e0:c2: 50:b1:32:2c:26:b5:72:11:fa:8c:fc:92:17:40:a1: bd:35:6e:b1:4a:77:ee:b7:8e:7d:6c:ef:08:1c:bd: 12:b1:01:74:ec:3e:d5:09:f0:7b:06:8a:b1:7c:d8: b7:ea:cb:b8:82:62:31:6f:94:a2:6f:52:15:26:d0: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:66:BE:8D:76:A7:70:20:D0:40:09:AE:94:09:9F:46:F6:16:76 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fe:56:4c:e8:6d:a0:89:b7:68:e3:69:c3:48:05:8f:1e:f5: e3:29:12:a7:b7:21:e8:c3:d2:05:10:80:57:c4:37:82:2c:78: 3d:e2:21:96:f0:f0:de:a6:7c:0d:02:9c:34:5e:9d:64:1b:a9: 30:f7:89:7b:74:03:ef:5e:5e:c2:29:6a:d6:18:bc:46:e1:b3: 17:03:da:e3:1d:36:f8:86:94:75:8e:13:87:51:eb:b8:9f:cc: 09:52:ff:c7:15:42:de:65:f5:45:96:4a:a0:cd:c7:ba:a2:a8: 04:1d:bb:c5:aa:63:bb:42:67:9d:13:75:68:ef:38:8d:9b:d4: d8:1b:73:a0:e2:1d:86:08:46:45:01:f1:63:37:eb:fe:7e:fe: b8:92:aa:70:45:69:7c:03:71:81:2d:e5:48:1f:4c:08:ec:ac: d6:9f:ff:8a:4a:be:73:53:d7:73:f5:9d:13:55:12:27:f5:97: 3b:86:20:60:58:38:ce:80:73:61:7c:c7:c1:37:f0:8d:35:36: 00:bd:16:16:01:14:15:39:dc:59:0c:d3:53:f7:1e:f8:bc:51: 69:80:45:57:e6:ee:b0:ba:32:9d:40:bf:c2:98:39:49:ba:d1: 18:88:14:78:b3:ec:7f:b4:3c:c5:33:be:a0:6e:2c:76:82:f3: 6e:55:9d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUxMjE4MTc1MTIyWhcNMjUxMjI1MTc1MTIyWjAYMRYwFAYD VQQDDA02OTQ0M2YxYS01YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VIgD3n5AJGUS8nVm55ZUbCa3OJfxdsi4/UAVgG4BGVdG6b2GPlIb75DnTlH NynmRF7CjBWb4d1/v9aflQWEvqi36eW8utrY5FCq8N9LCZZEi6q9G9i0GlcDxsaR E83PsOHWFuZJyvgDIo/CoWcwsPI0UyV+NHarKFihhCMUd/FJu1J9bHMk7b7Iv8wC 2R77FnV8bH1Z9k0NXpHI0WoD6tK/dQtyC5gBtkdFt0dARhzHHRovv4q0T7vf9kc6 eegw4MJQsTIsJrVyEfqM/JIXQKG9NW6xSnfut459bO8IHL0SsQF07D7VCfB7Boqx fNi36su4gmIxb5Sib1IVJtDf+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3WZr6N dqdwINBACa6UCZ9G9hZ2MB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO/lZM6G2gibdo42nDSAWPHvXjKRKntyHow9IFEIBXxDeCLHg94iGW 8PDepnwNApw0Xp1kG6kw94l7dAPvXl7CKWrWGLxG4bMXA9rjHTb4hpR1jhOHUeu4 n8wJUv/HFULeZfVFlkqgzce6oqgEHbvFqmO7QmedE3Vo7ziNm9TYG3Og4h2GCEZF AfFjN+v+fv64kqpwRWl8A3GBLeVIH0wI7KzWn/+KSr5zU9dz9Z0TVRIn9Zc7hiBg WDjOgHNhfMfBN/CNNTYAvRYWARQVOdxZDNNT9x74vFFpgEVX5u6wujKdQL/CmDlJ utEYiBR4s+x/tDzFM76gbix2gvNuVZ3R -----END CERTIFICATE-----Generated at Fri Dec 19 08:00:32 2025 by rpki-client