This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: ncivgO8FU64skwp82eOUml9l1e/pDaOGveUaD97iCXg= Subject key identifier: 1C:40:AF:80:9D:19:1A:4D:DC:97:6B:4B:0A:3C:DD:F7:08:36:05:83 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 0143 Signing time: Sun 07 Dec 2025 02:50:34 +0000 Manifest this update: Sun 07 Dec 2025 02:50:34 +0000 Manifest next update: Sun 14 Dec 2025 02:50:34 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: V/2GdZPUt2KcJPSgsKUY+HSaIe+yAX09+6UqRQMjiTc=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: v7IuFE0BzPTXRSJLbaCUBczf3498SLFTOxfRoorPtF0=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: fRP3NJ69rLlQTm+x/tKrEfvNNM+dik3rM5J3rzquHdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Dec 7 02:50:34 2025 GMT Not After : Dec 14 02:50:34 2025 GMT Subject: CN=6934eb7a-57d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:bb:7b:83:e6:0e:e5:14:7a:65:8e:60:98: 6e:ff:19:48:ad:cd:68:d9:ec:49:35:41:11:83:f4: 00:24:29:9d:17:f8:de:b2:4f:92:04:54:54:fa:3c: 24:ca:9b:d5:19:08:4e:30:8b:51:29:84:b6:6e:09: fe:eb:dc:1c:11:e7:f2:8e:48:69:11:97:9d:8c:d1: 22:17:f6:9c:1e:49:8b:94:30:f3:01:9f:0d:6e:0f: 87:55:9f:4a:88:1c:ce:99:61:f3:f1:56:0d:7a:db: ef:f9:4a:00:6b:f4:e2:9d:54:66:3c:5e:57:f4:5d: 2c:5f:3f:0f:b0:73:8c:19:83:af:71:df:93:5a:e9: b5:79:74:b7:bc:9d:bb:c1:3f:7b:a3:4f:ab:50:77: 81:d2:31:b0:b4:bf:e7:8c:6e:40:ca:9c:83:00:9e: 7e:69:6e:91:da:d0:db:27:c0:bb:e2:f2:03:9d:ed: 08:18:a2:56:4f:70:ea:af:31:96:6a:a3:9a:d8:92: df:48:f3:26:4c:1d:cf:e2:85:f2:2e:08:24:af:34: 11:9e:a2:c9:6a:80:12:b0:0b:d8:74:9a:52:70:be: 97:bb:bb:1a:a6:b2:76:f4:7f:d6:bd:07:a2:f4:d2: fe:e6:50:d0:d6:a0:c8:22:b0:a7:77:eb:2b:7b:ee: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:40:AF:80:9D:19:1A:4D:DC:97:6B:4B:0A:3C:DD:F7:08:36:05:83 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:06:f2:55:2a:5f:8c:d3:b8:7a:0d:b3:36:a9:8e:45:35:b5: 37:43:cd:97:52:eb:b2:ee:f6:13:03:01:c1:15:da:14:0a:b5: 77:04:6d:1b:62:26:53:a8:82:d0:61:94:81:99:d6:f5:f4:dd: c8:9f:3a:fc:63:a5:28:d5:43:57:a6:9c:33:ef:21:47:b6:73: 00:69:8d:21:3e:de:05:f2:76:55:35:a8:ff:e9:fe:08:cc:c2: 89:2d:59:73:ed:1b:d7:18:a6:b4:3a:9c:87:02:aa:9f:d3:a8: 99:ef:d0:4c:5b:c4:b3:15:2a:e8:71:c6:b4:5e:3b:9c:a9:36: 19:86:46:31:f0:da:74:ea:0d:7c:54:bb:fc:1d:ab:17:bd:51: 96:6d:e3:2c:e2:38:b2:ed:25:7e:29:26:a8:6f:4a:06:00:a0: de:e2:09:25:4b:44:91:4d:8a:3b:8e:9b:29:a4:49:8f:4b:3d: 45:64:cb:57:63:8f:b4:5f:7e:24:4f:9a:77:58:c5:0b:c3:3d: c8:f5:39:c8:a6:45:f0:45:8f:56:47:99:fe:9d:1b:42:db:38: 55:cf:31:d3:e5:2c:8b:5d:42:31:99:85:62:5a:1f:a6:fa:9e: 3a:94:a2:47:f9:29:8f:95:c3:eb:8a:7f:2f:39:7d:e7:a7:c4: 54:ce:f5:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUxMjA3MDI1MDM0WhcNMjUxMjE0MDI1MDM0WjAYMRYwFAYD VQQDEw02OTM0ZWI3YS01N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iK7e4PmDuUUemWOYJhu/xlIrc1o2exJNUERg/QAJCmdF/jesk+SBFRU+jwk ypvVGQhOMItRKYS2bgn+69wcEefyjkhpEZedjNEiF/acHkmLlDDzAZ8Nbg+HVZ9K iBzOmWHz8VYNetvv+UoAa/TinVRmPF5X9F0sXz8PsHOMGYOvcd+TWum1eXS3vJ27 wT97o0+rUHeB0jGwtL/njG5AypyDAJ5+aW6R2tDbJ8C74vIDne0IGKJWT3DqrzGW aqOa2JLfSPMmTB3P4oXyLggkrzQRnqLJaoASsAvYdJpScL6Xu7saprJ29H/WvQei 9NL+5lDQ1qDIIrCnd+sre+5m2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxAr4Cd GRpN3JdrSwo83fcINgWDMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9BvJVKl+M07h6DbM2qY5FNbU3Q82XUuuy7vYTAwHBFdoUCrV3BG0b YiZTqILQYZSBmdb19N3Inzr8Y6Uo1UNXppwz7yFHtnMAaY0hPt4F8nZVNaj/6f4I zMKJLVlz7RvXGKa0OpyHAqqf06iZ79BMW8SzFSrocca0XjucqTYZhkYx8Np06g18 VLv8HasXvVGWbeMs4jiy7SV+KSaob0oGAKDe4gklS0SRTYo7jpsppEmPSz1FZMtX Y4+0X34kT5p3WMULwz3I9TnIpkXwRY9WR5n+nRtC2zhVzzHT5SyLXUIxmYViWh+m +p46lKJH+SmPlcPrin8vOX3np8RUzvWp -----END CERTIFICATE-----Generated at Mon Dec 8 06:23:15 2025 by rpki-client