This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json) Hash identifier: NnKqk810kTL6mJPuiwbzyqVqxzKAsDbMPkIhifpLt/o= Subject key identifier: DB:47:2B:C2:0D:07:CD:5B:87:76:15:4A:AF:95:20:00:B0:7C:65:83 Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft Manifest number: DF Signing time: Tue 09 Dec 2025 03:30:00 +0000 Manifest this update: Tue 09 Dec 2025 03:29:59 +0000 Manifest next update: Tue 16 Dec 2025 03:29:59 +0000 Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: oTmEVOFHgUy3t8agKmEjcCdqQxFIJn5Rk9+g/UkBDgk=) 2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: ixXRZThyiUJlWWXX4WI6OIN3Tk/BSwCDV1QUbHQKE44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 03:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Validity Not Before: Dec 9 03:29:59 2025 GMT Not After : Dec 16 03:29:59 2025 GMT Subject: CN=693797b7-11f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a9:83:bb:c4:b5:11:54:b4:17:23:e6:7f:f9: 02:e6:37:2d:ca:5c:26:46:ff:a6:27:b3:33:62:88: c6:45:cb:c4:b2:bc:c7:94:60:11:a4:0a:90:bc:74: 88:53:b6:0b:e0:ba:e2:23:a8:87:9a:4f:b7:b7:6c: 32:79:36:04:21:84:e6:1c:b8:9d:53:ee:03:19:ee: 04:a3:eb:73:f5:15:a9:28:a5:56:59:27:11:91:c7: fc:6a:57:d0:dc:a2:a3:6a:d5:fa:cb:f0:90:e0:5c: c3:dd:e4:62:2f:ca:c5:f0:84:bb:4e:96:65:a8:1d: c6:af:14:b7:2a:55:42:df:93:b2:52:fa:95:71:3b: ce:0c:ff:cd:69:91:70:e2:73:13:e2:d1:7c:c6:d7: 74:d7:ff:92:a2:23:98:3a:cb:69:63:fd:4f:dc:18: cc:f6:89:3b:e8:be:b1:f8:11:92:c6:9e:94:79:44: 9e:26:fb:77:64:08:fe:32:95:c8:55:00:e6:31:31: 48:68:4c:b4:57:97:a1:6c:bf:4a:0b:a8:61:8e:d8: e5:a3:6b:63:a0:cf:ae:ec:5d:d0:12:08:c2:27:50: b1:ed:2c:07:9a:e7:a3:8f:4f:88:a2:9e:16:87:e4: ae:2e:68:bc:a2:ee:76:40:43:e3:84:5c:0b:cd:cd: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:47:2B:C2:0D:07:CD:5B:87:76:15:4A:AF:95:20:00:B0:7C:65:83 X509v3 Authority Key Identifier: keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f7:8c:02:d1:c5:b5:05:9a:7b:89:00:9b:b3:82:04:c7:30: 50:a5:7f:ec:13:d6:2c:0a:e7:6c:eb:48:ff:97:11:38:87:95: d3:38:9c:a5:44:6e:cb:fe:88:48:6a:e0:60:98:bb:a3:ba:53: e3:57:1a:65:2b:1b:e1:68:ce:77:04:ec:bf:0f:92:85:be:b7: 89:ef:96:fc:e1:b2:80:b1:8f:39:a4:c2:ab:68:27:cb:61:66: 67:a8:3e:13:98:82:a9:d9:62:1d:a3:b9:5d:b2:5b:89:8c:ca: 0f:ef:2c:ff:aa:4e:08:59:92:d7:94:4b:e8:30:64:e6:86:e6: fd:7e:3a:91:27:ea:07:f1:66:63:c3:e7:81:ce:8c:9a:b3:f2: ef:22:ee:46:15:80:53:b6:78:ea:f8:f8:9f:5d:fb:16:d8:e7: e0:1f:f1:a7:5f:2d:2b:c1:84:96:58:50:50:25:1c:09:2b:88: 31:0c:13:53:cf:06:91:a3:8e:16:49:e8:bb:52:45:8e:22:2f: 04:20:ac:3c:4c:09:4a:70:f7:1f:4b:9a:26:12:02:99:43:87: d2:d8:07:31:6a:00:ae:94:fe:88:a9:11:9b:3c:67:97:38:6b: 10:3d:31:18:d5:43:3a:47:81:42:7b:c5:ce:6c:38:e2:9e:6d: 46:87:91:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1 QkVENTY2RTUwHhcNMjUxMjA5MDMyOTU5WhcNMjUxMjE2MDMyOTU5WjAYMRYwFAYD VQQDEw02OTM3OTdiNy0xMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qmDu8S1EVS0FyPmf/kC5jctylwmRv+mJ7MzYojGRcvEsrzHlGARpAqQvHSI U7YL4LriI6iHmk+3t2wyeTYEIYTmHLidU+4DGe4Eo+tz9RWpKKVWWScRkcf8alfQ 3KKjatX6y/CQ4FzD3eRiL8rF8IS7TpZlqB3GrxS3KlVC35OyUvqVcTvODP/NaZFw 4nMT4tF8xtd01/+SoiOYOstpY/1P3BjM9ok76L6x+BGSxp6UeUSeJvt3ZAj+MpXI VQDmMTFIaEy0V5ehbL9KC6hhjtjlo2tjoM+u7F3QEgjCJ1Cx7SwHmuejj0+Iop4W h+SuLmi8ou52QEPjhFwLzc0sSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtHK8IN B81bh3YVSq+VIACwfGWDMB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1 WXczQjhXclVpWjFiN1ZadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp94wC0cW1BZp7iQCbs4IExzBQpX/sE9YsCuds60j/lxE4h5XTOJyl RG7L/ohIauBgmLujulPjVxplKxvhaM53BOy/D5KFvreJ75b84bKAsY85pMKraCfL YWZnqD4TmIKp2WIdo7ldsluJjMoP7yz/qk4IWZLXlEvoMGTmhub9fjqRJ+oH8WZj w+eBzoyas/LvIu5GFYBTtnjq+PifXfsW2OfgH/GnXy0rwYSWWFBQJRwJK4gxDBNT zwaRo44WSei7UkWOIi8EIKw8TAlKcPcfS5omEgKZQ4fS2AcxagCulP6IqRGbPGeX OGsQPTEY1UM6R4FCe8XObDjinm1Gh5Gb -----END CERTIFICATE-----Generated at Thu Dec 11 03:56:12 2025 by rpki-client