This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: 4bYi5rM0PFFoePou9rSerILD882rEdnWSaqZbknGHec= Subject key identifier: 68:47:9A:E7:66:26:37:1E:08:92:F8:94:6C:A9:94:22:42:1B:13:CE Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13FB Signing time: Wed 10 Dec 2025 16:27:34 +0000 Manifest this update: Wed 10 Dec 2025 16:27:33 +0000 Manifest next update: Wed 17 Dec 2025 16:27:33 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: a9/RsB3DH6NS0G+SMypZaAsqZjt8TsA8vK0jdSt5Nd0=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: nHJYnVN764I+a01wg+TzZ5hfwKIk6KrVw4NGUGzTSaE=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: HUiyLswpuxKdbNSVPaGfLSYEn6DWoC29PelmwIAjJ5Y=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: OqEEQNcYyBCDgQL1llF0AYlCqLNvN3uXPMeNJtc0cyI=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: PEQx20rXW3wWd56B/SVjtbMpJcwzQ8D6MiDi0J0Jbek=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: lBRDtES/HZOfboWNM5sziaPImTLADmv7HDwM0/uuCvk=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: Flu+OB6NSXTr2/DICAFpHEHutk0iqrBQ5kD9GJPbb90=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: V1iSNQB8ve6x07QbL++7FcG93VsgUWiOli7wIFWtTZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 16:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5208 (0x1458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Dec 10 16:27:33 2025 GMT Not After : Dec 17 16:27:33 2025 GMT Subject: CN=69399f76-7558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:1e:21:40:3d:8a:84:de:2d:dd:58:15:f4: c2:bd:27:42:33:5d:a2:fb:f2:34:be:e6:29:78:d0: 95:dc:61:5e:6d:6a:00:98:e0:28:15:c4:e4:ad:bd: aa:ab:a2:b0:f6:75:b2:b4:f0:29:3f:94:86:86:c8: ac:33:80:d9:53:13:e1:54:2a:b0:38:67:cb:bb:82: ff:ad:88:d2:a5:d3:d4:b7:a7:90:56:21:d4:db:b0: 27:58:e6:39:2b:6d:ea:d8:34:04:bd:cf:48:4c:99: 14:3d:cd:f5:9e:21:30:d9:a7:9c:72:25:75:2c:d2: 57:78:75:d3:04:c3:96:d6:1c:ae:48:d2:5a:9e:50: 89:a5:0c:79:c8:a2:8b:8b:71:2f:f5:90:b8:0e:80: 68:87:47:26:71:b0:8d:4e:a3:10:4d:b9:52:bb:81: b8:35:d5:a7:1e:e6:8b:9b:69:f9:ba:75:ef:13:50: 93:45:58:c2:62:31:b1:a5:09:6c:c0:ba:4e:42:b0: 8d:fe:7e:07:0b:51:92:cd:e4:38:10:83:d6:12:35: 0e:5d:9b:b5:9f:c8:85:45:cb:cf:af:55:64:39:d1: 45:09:44:c5:e3:3c:b9:2a:1d:cc:97:59:72:e0:b8: f8:cb:d7:97:cd:55:f7:81:49:c9:73:58:c5:d5:52: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:9A:E7:66:26:37:1E:08:92:F8:94:6C:A9:94:22:42:1B:13:CE X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e9:cd:1f:c9:76:80:7b:da:70:94:4c:af:0c:92:c2:57:4e: a3:28:62:3e:db:db:07:4f:fb:44:22:04:93:81:a3:7e:f8:8f: f4:63:0a:fb:c6:b3:52:a2:ea:4f:7e:2f:50:99:fa:55:d1:6a: 2a:6a:dd:a9:c8:ba:26:54:5e:1f:45:64:fa:30:c2:ea:c2:d5: 30:3f:37:23:55:33:bb:38:0e:95:07:82:6e:7c:69:fc:78:1c: 3e:2d:0e:87:18:1a:93:e8:27:43:cc:6a:3e:fd:6d:86:f9:86: cd:cc:02:ab:dd:7a:1e:11:eb:62:7c:fc:53:bf:5e:a9:b9:64: 5f:91:87:2b:50:4b:68:1d:39:88:42:7f:2a:7d:cb:e8:77:04: 20:37:43:ca:4b:d3:cc:12:68:ac:fa:2f:3e:73:cd:d5:56:03: 45:36:dd:bb:71:22:72:48:23:6f:e2:f1:83:27:26:d8:57:df: 48:6c:17:30:e2:87:f4:15:8e:f0:e5:b9:b3:5e:93:be:40:fa: 88:44:be:bb:dc:60:14:67:61:d7:4a:45:b0:48:dd:ee:ca:e2: 81:6e:66:04:25:05:e9:e5:90:ec:fe:4a:50:8e:b9:fc:88:a6: 46:c8:11:47:3c:a2:08:f3:e6:2a:06:2e:63:32:cc:36:1f:2a: c7:58:46:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUxMjEwMTYyNzMzWhcNMjUxMjE3MTYyNzMzWjAYMRYwFAYD VQQDEw02OTM5OWY3Ni03NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfgeIUA9ioTeLd1YFfTCvSdCM12i+/I0vuYpeNCV3GFebWoAmOAoFcTkrb2q q6Kw9nWytPApP5SGhsisM4DZUxPhVCqwOGfLu4L/rYjSpdPUt6eQViHU27AnWOY5 K23q2DQEvc9ITJkUPc31niEw2aecciV1LNJXeHXTBMOW1hyuSNJanlCJpQx5yKKL i3Ev9ZC4DoBoh0cmcbCNTqMQTblSu4G4NdWnHuaLm2n5unXvE1CTRVjCYjGxpQls wLpOQrCN/n4HC1GSzeQ4EIPWEjUOXZu1n8iFRcvPr1VkOdFFCUTF4zy5Kh3Ml1ly 4Lj4y9eXzVX3gUnJc1jF1VKCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhHmudm JjceCJL4lGyplCJCGxPOMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB66c0fyXaAe9pwlEyvDJLCV06jKGI+29sHT/tEIgSTgaN++I/0Ywr7 xrNSoupPfi9QmfpV0Woqat2pyLomVF4fRWT6MMLqwtUwPzcjVTO7OA6VB4JufGn8 eBw+LQ6HGBqT6CdDzGo+/W2G+YbNzAKr3XoeEetifPxTv16puWRfkYcrUEtoHTmI Qn8qfcvodwQgN0PKS9PMEmis+i8+c83VVgNFNt27cSJySCNv4vGDJybYV99IbBcw 4of0FY7w5bmzXpO+QPqIRL673GAUZ2HXSkWwSN3uyuKBbmYEJQXp5ZDs/kpQjrn8 iKZGyBFHPKII8+YqBi5jMsw2HyrHWEaY -----END CERTIFICATE-----Generated at Fri Dec 12 03:13:37 2025 by rpki-client