This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: o8CYmutd7Lg7lxwkChs4zi89U7WwshfSyF4+D0NQ37s= Subject key identifier: D3:5F:6C:9B:4B:14:2D:AF:8B:15:DF:88:FE:A6:AA:38:C2:4F:27:47 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 01B0 Signing time: Wed 03 Dec 2025 01:48:46 +0000 Manifest this update: Wed 03 Dec 2025 01:48:46 +0000 Manifest next update: Wed 10 Dec 2025 01:48:46 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: zxr469Xsul0IztwOH09JPrwbyf+6K/qmAtknvLLFQFo=) 2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: v3dChgnA84SfDYgqRC2E+QVbu8keAWHj6W+tTQnPlbw=) 3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: 8qXcxCRSjyOP/oKs9vNyiIBs05KSJRouDgmhdgT6x8M=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: HG1f/f+5SFm8izuIB1/hs3U0LoMscjbV7+BezDm08/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Dec 3 01:48:46 2025 GMT Not After : Dec 10 01:48:46 2025 GMT Subject: CN=692f96fe-4f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:22:d9:3f:7f:11:91:99:78:83:91:89:f8: 2d:a5:3f:5f:11:4e:ed:5d:36:3f:77:cb:e5:1b:ca: 00:ff:4e:cf:a6:1c:fe:c8:eb:71:d4:3e:47:5e:25: bb:35:bd:6d:49:2c:4e:06:1b:c7:d3:e4:ac:74:8c: 6a:23:af:e6:8d:d7:7e:15:dd:bc:ef:35:fa:10:64: b3:f2:ca:c7:29:a4:1e:c7:fa:54:33:bf:5c:dc:42: 45:eb:f6:a9:59:b1:e9:2a:88:82:22:0d:a9:06:07: 7e:98:62:ef:31:a3:66:4e:96:98:48:a1:f2:fd:24: d5:11:cc:de:01:5a:8b:50:e9:5d:cf:1c:9f:da:ba: 3d:96:78:53:7f:d3:62:ab:b5:ec:bf:35:2f:16:7e: 70:d6:61:0e:e0:29:ed:28:7e:d3:bc:48:44:47:8e: 72:29:99:09:91:36:a6:ee:c6:4f:26:28:9e:f1:06: 9a:c3:94:5c:1d:dd:79:88:d0:e6:7d:d3:37:c7:89: bc:8d:3b:8e:79:46:b2:c7:af:f3:db:6b:85:d4:33: 09:a4:bc:2b:76:e3:c3:09:29:ea:bb:96:cd:95:f7: 51:0e:09:3d:17:c8:56:08:7e:6e:2d:9c:42:c2:44: 4f:ec:9f:6f:7d:44:65:58:6f:2b:17:a0:31:e5:8f: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5F:6C:9B:4B:14:2D:AF:8B:15:DF:88:FE:A6:AA:38:C2:4F:27:47 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:46:ad:1a:21:6f:d2:5c:99:e8:a5:fd:a5:9a:a8:fb:3d: af:0b:ae:71:81:91:96:c8:09:e7:64:f7:6d:9d:dc:99:2f:f6: 00:99:8a:fd:94:a8:08:ce:3f:81:76:24:4f:2e:ea:1f:d5:57: 46:24:37:4b:bf:f5:f4:56:ce:bb:dc:f4:df:17:b6:6e:6f:77: 9c:d3:f8:98:81:62:f2:bc:b8:f0:9c:62:cb:62:23:c9:66:68: 1b:ce:ae:dc:ce:0a:5c:54:4c:66:fd:a6:25:d9:c8:73:1a:9c: b9:42:0e:1e:6b:1b:3d:5b:d5:2b:96:5f:26:37:f9:ec:df:94: 4b:fa:1b:b7:f3:7d:1f:99:05:8e:c1:a2:33:b7:60:08:85:d6: 24:7c:a5:f1:31:db:c9:32:7a:89:d0:b8:57:76:8b:5b:25:5b: e2:18:43:ac:21:df:8b:7d:55:f4:d8:88:c4:7a:53:3d:f6:a0: 08:94:6f:69:de:c9:aa:f5:21:c1:9b:d8:a6:6e:cc:27:02:ca: cd:88:05:f2:68:23:72:3d:47:73:e5:70:a0:6f:e5:8f:8d:5a: 62:e4:a2:f5:ac:25:7c:34:3b:ed:16:bd:ec:e2:70:4a:6c:79: 3d:67:97:c8:44:8a:34:7a:c9:71:8e:7c:37:9d:1e:39:3f:4a: 41:d6:be:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUxMjAzMDE0ODQ2WhcNMjUxMjEwMDE0ODQ2WjAYMRYwFAYD VQQDEw02OTJmOTZmZS00ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu8i2T9/EZGZeIORifgtpT9fEU7tXTY/d8vlG8oA/07Pphz+yOtx1D5HXiW7 Nb1tSSxOBhvH0+SsdIxqI6/mjdd+Fd287zX6EGSz8srHKaQex/pUM79c3EJF6/ap WbHpKoiCIg2pBgd+mGLvMaNmTpaYSKHy/STVEczeAVqLUOldzxyf2ro9lnhTf9Ni q7XsvzUvFn5w1mEO4CntKH7TvEhER45yKZkJkTam7sZPJiie8Qaaw5RcHd15iNDm fdM3x4m8jTuOeUayx6/z22uF1DMJpLwrduPDCSnqu5bNlfdRDgk9F8hWCH5uLZxC wkRP7J9vfURlWG8rF6Ax5Y8GKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNfbJtL FC2vixXfiP6mqjjCTydHMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHEEatGiFv0lyZ6KX9pZqo+z2vC65xgZGWyAnnZPdtndyZL/YAmYr9 lKgIzj+BdiRPLuof1VdGJDdLv/X0Vs673PTfF7Zub3ec0/iYgWLyvLjwnGLLYiPJ Zmgbzq7czgpcVExm/aYl2chzGpy5Qg4eaxs9W9Urll8mN/ns35RL+hu3830fmQWO waIzt2AIhdYkfKXxMdvJMnqJ0LhXdotbJVviGEOsId+LfVX02IjEelM99qAIlG9p 3smq9SHBm9imbswnAsrNiAXyaCNyPUdz5XCgb+WPjVpi5KL1rCV8NDvtFr3s4nBK bHk9Z5fIRIo0eslxjnw3nR45P0pB1r7u -----END CERTIFICATE-----Generated at Thu Dec 4 09:53:08 2025 by rpki-client