This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: bL9SeDpAgSy4huU62FpFHHQZUpzb++mF7l0gLXGg7H4= Subject key identifier: 71:A8:44:7D:F8:B2:52:D0:D8:E4:36:C3:98:00:F5:52:50:4D:A7:DF Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 01BF Signing time: Sun 07 Dec 2025 01:35:48 +0000 Manifest this update: Sun 07 Dec 2025 01:35:47 +0000 Manifest next update: Sun 14 Dec 2025 01:35:47 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: le3sOKTbnIfNNWDFa8xrOpHPsopoTT8K6GUeMLZCQUg=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: d0hrWabvEDExci5t6WU7rsD4gdFR7O4tRXZR37UM1GQ=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: UyfMMb1+MxfY9sz24UI+SyQxwGOXE8nJHXlCf8yhy2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Dec 7 01:35:47 2025 GMT Not After : Dec 14 01:35:47 2025 GMT Subject: CN=6934d9f3-797f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:00:ea:96:ad:3b:19:77:db:83:d7:bc:ca: f5:d2:03:09:e9:63:b1:ff:dd:af:a6:e8:77:90:c6: c7:27:18:52:03:af:5b:3b:f1:36:e7:68:7b:50:7a: c3:57:01:d0:4c:8f:ef:c0:b5:06:cc:e6:0c:3a:25: ff:3c:6d:20:08:84:ed:fa:bd:c5:3c:72:79:2b:1f: d8:6b:88:99:07:48:f7:b8:a9:29:6d:43:da:d5:f7: 02:df:74:bf:4a:76:36:34:0f:9f:56:62:c9:6c:75: a8:6f:1e:91:ba:7c:fb:55:8a:d3:0b:ea:29:ea:b3: 3d:66:da:c6:a3:65:42:ab:f2:33:f8:e1:75:a7:04: 60:34:fd:bc:52:e7:f8:8d:15:d3:46:c4:49:c3:98: 4d:a0:2f:a3:a0:10:59:2e:90:70:1f:1f:39:35:ff: 44:56:0e:ed:d8:2e:c8:8d:5a:cc:b2:32:1d:2b:3c: 6a:68:15:15:73:59:1e:46:46:61:bc:4b:d5:05:b1: c7:a2:84:e1:d6:67:7f:9b:91:ba:39:b9:c0:86:7a: 2d:1c:6b:a0:b7:e9:38:f1:35:02:ee:ed:7e:4b:9b: 12:3f:5a:f8:e7:3e:e5:01:3a:ce:28:f3:e3:6b:55: c0:8e:c9:f3:ab:49:a0:a7:e8:9a:d5:88:18:2a:d9: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A8:44:7D:F8:B2:52:D0:D8:E4:36:C3:98:00:F5:52:50:4D:A7:DF X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e0:87:4b:81:a8:91:8b:37:fb:30:a4:3e:37:1c:79:df:73: 5f:3b:3c:87:26:35:04:1e:af:8f:0c:89:be:f9:8c:e1:ea:de: aa:4e:32:f4:a8:e4:34:36:ba:89:1d:e0:3d:46:5d:68:33:27: 15:ee:9b:cc:19:d5:e6:17:c4:b4:c6:6a:ac:f5:c0:3b:1e:9e: 70:d0:0c:28:10:fd:f2:27:16:24:a5:57:fe:30:db:f9:30:67: 5a:88:df:4d:3c:df:4b:c8:de:ff:3c:40:0e:e3:04:02:34:c2: 2b:13:47:cf:9c:63:a1:9e:9e:85:ea:86:a6:19:8e:36:ed:0c: eb:d2:5c:dc:dc:cd:40:c8:33:09:d4:b8:aa:80:53:c5:ed:e3: 95:3d:16:68:3f:88:9a:45:fd:10:d3:a0:ed:46:2d:62:ef:7a: 58:c4:96:38:18:ae:6d:4f:65:38:19:de:42:94:34:8c:ef:19: 7c:85:74:ab:29:44:f4:69:32:1d:3a:f4:65:48:29:3f:f1:52: 4c:0e:8a:da:87:43:b9:06:12:73:5c:b9:82:6f:35:bc:c7:96: 98:f8:f6:8e:8a:0d:52:2b:b6:cd:4c:cd:86:aa:9f:9f:76:f4: f4:09:ae:23:91:58:0b:0e:b9:d6:9b:ec:ba:f6:43:55:22:cb: ed:be:ad:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUxMjA3MDEzNTQ3WhcNMjUxMjE0MDEzNTQ3WjAYMRYwFAYD VQQDEw02OTM0ZDlmMy03OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1oA6patOxl324PXvMr10gMJ6WOx/92vpuh3kMbHJxhSA69bO/E252h7UHrD VwHQTI/vwLUGzOYMOiX/PG0gCITt+r3FPHJ5Kx/Ya4iZB0j3uKkpbUPa1fcC33S/ SnY2NA+fVmLJbHWobx6Runz7VYrTC+op6rM9ZtrGo2VCq/Iz+OF1pwRgNP28Uuf4 jRXTRsRJw5hNoC+joBBZLpBwHx85Nf9EVg7t2C7IjVrMsjIdKzxqaBUVc1keRkZh vEvVBbHHooTh1md/m5G6ObnAhnotHGugt+k48TUC7u1+S5sSP1r45z7lATrOKPPj a1XAjsnzq0mgp+ia1YgYKtkw7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGoRH34 slLQ2OQ2w5gA9VJQTaffMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4IdLgaiRizf7MKQ+Nxx533NfOzyHJjUEHq+PDIm++Yzh6t6qTjL0 qOQ0NrqJHeA9Rl1oMycV7pvMGdXmF8S0xmqs9cA7Hp5w0AwoEP3yJxYkpVf+MNv5 MGdaiN9NPN9LyN7/PEAO4wQCNMIrE0fPnGOhnp6F6oamGY427Qzr0lzc3M1AyDMJ 1LiqgFPF7eOVPRZoP4iaRf0Q06DtRi1i73pYxJY4GK5tT2U4Gd5ClDSM7xl8hXSr KUT0aTIdOvRlSCk/8VJMDorah0O5BhJzXLmCbzW8x5aY+PaOig1SK7bNTM2Gqp+f dvT0Ca4jkVgLDrnWm+y69kNVIsvtvq18 -----END CERTIFICATE-----Generated at Mon Dec 8 18:13:17 2025 by rpki-client