This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: 1zAL2EsKnxt62LttIP1mNj2D90VqpC916k2rY796zs8= Subject key identifier: C7:80:20:4B:EA:25:79:04:54:60:3B:89:70:94:88:6F:20:07:0A:91 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 34F0 Signing time: Wed 26 Nov 2025 15:08:13 +0000 Manifest this update: Wed 26 Nov 2025 15:08:12 +0000 Manifest next update: Wed 03 Dec 2025 15:08:12 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: WoPeTk+FkizVM1hGqZE69aMX06m7NQrnl2VGF5VrnXQ=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Dec 2025 15:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13573 (0x3505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Nov 26 15:08:12 2025 GMT Not After : Dec 3 15:08:12 2025 GMT Subject: CN=692717dd-4b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:ff:6d:6d:07:7e:41:02:9d:7c:e6:cc:22: 96:35:1b:c3:0b:cd:01:62:d0:1f:e9:48:bd:11:8e: 8f:ee:ee:78:f3:41:7a:2e:27:19:4c:b4:1e:a9:3e: 55:20:b4:ba:6b:c6:13:2d:0f:b6:55:0a:cd:2e:6e: f7:e3:62:ed:cb:0d:a8:76:e9:c2:a4:66:a5:27:15: ac:ff:45:64:9b:8a:2b:bd:cc:ae:a4:e2:4c:dd:8e: 34:24:13:11:ac:36:1d:e7:26:16:d4:f6:f6:9e:9c: c5:70:38:2c:8f:41:1f:b2:74:6b:18:1a:da:2b:8b: fb:26:8d:1d:f1:af:59:49:79:3b:a8:60:a0:3a:66: 42:86:80:65:13:d3:0f:d6:b2:7c:fa:66:38:69:03: 5b:13:7e:5e:49:14:09:6a:08:dd:24:b1:a6:26:43: ec:3c:be:8e:32:db:a4:c5:d7:08:08:97:6a:c5:f1: f9:a0:7d:36:73:55:16:b3:e1:6b:f6:2e:41:89:56: ec:31:62:71:96:36:bd:d6:dc:24:f0:70:a9:8e:f2: 46:86:8a:b4:b7:b0:e2:9c:79:5c:4d:f8:42:45:6e: 9c:d1:c0:28:73:3b:d7:cd:84:53:5b:63:1a:bf:c2: c1:15:5c:05:a6:fe:83:a7:76:de:5b:5d:ef:5b:2a: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:80:20:4B:EA:25:79:04:54:60:3B:89:70:94:88:6F:20:07:0A:91 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:a9:a7:4f:6a:ac:47:33:e1:07:89:c7:f9:0d:c9:ad:66:44: 6d:0b:bb:48:92:e9:c7:cc:91:3a:53:d0:29:27:10:ba:6d:3c: 5e:70:b8:e7:1d:7a:2c:5d:3a:57:34:a2:0f:be:04:e5:ae:b5: 4a:e7:da:6b:df:bd:46:78:0c:4c:84:8f:33:ad:13:a6:3c:64: c7:ee:8d:4e:f5:ec:3c:ce:42:ca:df:61:4c:19:69:d8:21:e0: e0:c0:f8:18:59:98:26:7f:bb:08:a3:fd:b7:95:8a:be:1e:49: b9:a0:57:fc:a3:ab:3b:94:df:64:f7:e8:ad:82:2d:a7:0c:6a: 4a:20:1b:95:29:ab:ff:b7:93:ff:33:81:1c:cb:bb:66:44:7c: e4:ea:1f:ae:d9:bd:4f:6f:5f:95:67:0b:11:af:c8:99:5b:83: da:75:0a:a5:d8:6d:60:fc:08:5a:f5:39:58:05:59:8f:c5:bc: f9:01:c0:b1:c7:e5:8f:aa:bf:97:c1:7b:4d:da:11:60:3e:5a: 80:cf:d6:1a:75:7a:df:03:93:a1:3e:9c:42:63:ba:cf:87:df: 89:6e:2c:a6:55:90:61:45:bc:5f:3a:78:81:1f:5e:b9:23:10: c7:3e:43:30:2e:ff:ea:46:a0:dc:43:fd:51:99:c2:ff:2a:81: a2:09:71:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUxMTI2MTUwODEyWhcNMjUxMjAzMTUwODEyWjAYMRYwFAYD VQQDEw02OTI3MTdkZC00YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsX/bW0HfkECnXzmzCKWNRvDC80BYtAf6Ui9EY6P7u5480F6LicZTLQeqT5V ILS6a8YTLQ+2VQrNLm7342Ltyw2odunCpGalJxWs/0Vkm4orvcyupOJM3Y40JBMR rDYd5yYW1Pb2npzFcDgsj0EfsnRrGBraK4v7Jo0d8a9ZSXk7qGCgOmZChoBlE9MP 1rJ8+mY4aQNbE35eSRQJagjdJLGmJkPsPL6OMtukxdcICJdqxfH5oH02c1UWs+Fr 9i5BiVbsMWJxlja91twk8HCpjvJGhoq0t7DinHlcTfhCRW6c0cAoczvXzYRTW2Ma v8LBFVwFpv6Dp3beW13vWyrpSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeAIEvq JXkEVGA7iXCUiG8gBwqRMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTqadPaqxHM+EHicf5DcmtZkRtC7tIkunHzJE6U9ApJxC6bTxecLjn HXosXTpXNKIPvgTlrrVK59pr371GeAxMhI8zrROmPGTH7o1O9ew8zkLK32FMGWnY IeDgwPgYWZgmf7sIo/23lYq+Hkm5oFf8o6s7lN9k9+itgi2nDGpKIBuVKav/t5P/ M4Ecy7tmRHzk6h+u2b1Pb1+VZwsRr8iZW4PadQql2G1g/Aha9TlYBVmPxbz5AcCx x+WPqr+XwXtN2hFgPlqAz9YadXrfA5OhPpxCY7rPh9+JbiymVZBhRbxfOniBH165 IxDHPkMwLv/qRqDcQ/1RmcL/KoGiCXEv -----END CERTIFICATE-----Generated at Fri Nov 28 05:43:11 2025 by rpki-client