This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: mUqtfQmz80jYuVQe2eIHw3Ch4dbvS/Zc1Ik/g/gwh58= Subject key identifier: E1:6E:82:13:44:58:9C:64:5D:DE:87:3B:23:68:F3:D6:19:6A:1F:62 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 0D Signing time: Tue 02 Dec 2025 17:54:03 +0000 Manifest this update: Tue 02 Dec 2025 17:54:03 +0000 Manifest next update: Tue 09 Dec 2025 17:54:03 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: aBBCas8RdsHiqBhjVnm1WxbREA7QuiSqDrBVxCKMusI=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: ubVdeZPf6OneoRvNqezniKDm+qaCd4tbWJlkLoTSud4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 17:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Dec 2 17:54:03 2025 GMT Not After : Dec 9 17:54:03 2025 GMT Subject: CN=692f27bb-af55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:2f:c8:c6:bd:c6:91:fc:db:69:5f:73:71: bf:21:5b:58:2f:99:b8:6d:1d:72:df:d7:44:12:b7: 1c:32:c4:f0:2d:65:00:41:4e:58:b9:ca:ba:9c:c4: 7e:28:d9:46:b7:56:08:51:dc:fa:ae:70:ec:94:01: 84:a9:cd:90:a0:dc:2d:07:db:c8:d7:a7:68:6e:69: dd:6c:40:ee:4f:6e:42:31:d2:50:46:cd:9c:70:00: 03:16:18:96:ec:b6:61:c4:bf:b0:6d:6d:da:d8:c3: fc:61:90:fa:1f:f3:b2:86:4f:5f:be:96:25:aa:68: 98:08:1a:94:5a:e8:a8:e6:69:c5:6c:f7:a5:b6:a4: 50:9c:0b:ac:89:5b:73:db:0c:5e:a2:6d:01:17:14: ed:95:99:f0:e6:18:e0:da:c1:d6:fa:b2:2c:9b:f3: 4c:73:2f:4c:b9:6d:92:06:f7:a2:49:29:cc:5f:e9: d3:d0:38:8a:4a:3b:af:d6:9b:eb:c5:b7:a9:5e:0d: 8c:56:6f:46:a2:a2:be:78:aa:63:64:84:f9:4d:9c: c9:39:87:37:ea:50:5e:58:e7:c8:f9:93:e5:ef:af: 7f:13:e3:e2:58:1a:3a:e8:50:9b:73:f1:15:41:07: 0d:c9:af:da:4b:a7:85:6d:07:df:d9:70:68:6d:57: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6E:82:13:44:58:9C:64:5D:DE:87:3B:23:68:F3:D6:19:6A:1F:62 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:31:3e:51:3a:17:57:25:88:5b:00:04:60:32:34:fa:bd:6d: 9d:6c:38:d6:d6:2f:12:b6:c8:2a:47:cc:65:96:e0:a4:f0:24: aa:3f:bd:e5:c6:be:f8:bf:f8:49:50:4a:6c:86:d9:0a:b9:7c: b7:31:ba:18:e7:da:26:07:d9:82:88:2a:99:be:21:55:5c:9b: 88:18:f5:3d:b5:fd:df:c7:78:64:57:86:17:a0:93:8a:7f:ad: 82:7f:5f:d0:ec:b5:16:88:be:4e:bf:e2:6e:91:78:40:e4:ca: e2:e9:b6:a8:74:50:46:0d:f5:64:e6:dc:b1:d8:8b:ee:89:1b: c3:61:b7:ba:f9:75:17:40:ad:8d:25:1b:8c:ed:db:5b:92:ab: f6:f5:1e:fa:4b:66:30:d4:c4:14:9d:78:34:d8:66:d9:05:26: 5c:70:84:1b:52:5a:91:f2:1e:0c:e9:58:43:fe:1d:44:49:57: bb:fc:cb:28:a2:f2:4d:26:d6:17:53:4a:44:d3:20:2e:18:9a: 75:b8:45:07:d8:c8:5b:7f:05:03:42:c4:dd:51:69:99:a1:bc: 1f:f5:f7:49:21:df:25:d0:53:84:36:12:9d:eb:41:32:43:a0: 7b:38:7e:1d:27:4e:6f:c8:28:2b:ce:0e:ff:34:fb:68:d9:50: ca:df:f1:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNTEyMDIxNzU0MDNaFw0yNTEyMDkxNzU0MDNaMBgxFjAUBgNV BAMTDTY5MmYyN2JiLWFmNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS8y/Ixr3GkfzbaV9zcb8hW1gvmbhtHXLf10QStxwyxPAtZQBBTli5yrqcxH4o 2Ua3VghR3PqucOyUAYSpzZCg3C0H28jXp2huad1sQO5PbkIx0lBGzZxwAAMWGJbs tmHEv7BtbdrYw/xhkPof87KGT1++liWqaJgIGpRa6KjmacVs96W2pFCcC6yJW3Pb DF6ibQEXFO2VmfDmGODawdb6siyb80xzL0y5bZIG96JJKcxf6dPQOIpKO6/Wm+vF t6leDYxWb0aior54qmNkhPlNnMk5hzfqUF5Y58j5k+Xvr38T4+JYGjroUJtz8RVB Bw3Jr9pLp4VtB9/ZcGhtV/5RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4W6CE0RY nGRd3oc7I2jz1hlqH2IwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACoxPlE6F1cliFsABGAyNPq9bZ1sONbWLxK2yCpHzGWW4KTwJKo/veXG vvi/+ElQSmyG2Qq5fLcxuhjn2iYH2YKIKpm+IVVcm4gY9T21/d/HeGRXhhegk4p/ rYJ/X9DstRaIvk6/4m6ReEDkyuLptqh0UEYN9WTm3LHYi+6JG8Nht7r5dRdArY0l G4zt21uSq/b1HvpLZjDUxBSdeDTYZtkFJlxwhBtSWpHyHgzpWEP+HURJV7v8yyii 8k0m1hdTSkTTIC4YmnW4RQfYyFt/BQNCxN1RaZmhvB/190kh3yXQU4Q2Ep3rQTJD oHs4fh0nTm/IKCvODv80+2jZUMrf8aw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:20 2025 by rpki-client