This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: 38G+kcohN/x8TuswMi+nTWUae9vQw3VpaaBIjAvKUKA= Subject key identifier: F6:36:79:0E:2D:FE:D8:5E:74:52:40:DD:75:9B:D2:83:B4:2A:DB:D4 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0408 Signing time: Sat 06 Dec 2025 23:06:43 +0000 Manifest this update: Sat 06 Dec 2025 23:06:43 +0000 Manifest next update: Sat 13 Dec 2025 23:06:43 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: T8F9dmsYhvzbDL1RYjlxbQrx43yIhmZ+462GF5F7ekI=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Dec 6 23:06:43 2025 GMT Not After : Dec 13 23:06:43 2025 GMT Subject: CN=6934b703-6094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:39:60:7b:54:83:a1:f2:fa:49:15:3a:01: d5:06:66:f9:bc:0e:05:c9:2d:62:6b:f9:5d:7b:e4: b8:ed:06:f0:6c:f9:9c:ca:5e:60:e3:5e:fc:3c:59: 76:fe:b3:aa:3a:fc:2d:a3:dc:e0:47:40:12:34:81: df:4b:5d:90:94:bb:67:ce:80:ac:03:3e:1c:ea:98: c3:67:3c:11:50:15:dd:5f:e9:bd:cb:44:f4:bb:bf: 05:63:c4:3a:b8:e1:6a:78:47:6d:1a:2d:2a:bd:6f: 31:39:d5:48:5d:d1:21:ce:03:62:88:e6:22:fc:c9: d2:86:31:41:0f:e0:12:37:36:f5:36:0b:53:c7:c3: 58:03:ae:ea:d2:40:1c:bd:62:c1:9d:b4:86:32:d7: 92:84:04:6c:d4:3f:db:a1:18:70:3d:5f:05:9e:1f: a2:05:e1:37:11:c6:24:c3:3a:0a:66:9f:7a:11:cf: 22:6a:96:f4:1d:80:56:05:23:cf:6c:a3:91:ca:6d: 72:b1:38:f9:18:c9:97:61:83:03:40:e8:ad:e9:2d: 22:53:4f:03:7b:63:cb:44:d0:87:e9:ba:39:a1:f5: e6:60:73:d9:46:e1:c2:d5:a3:c9:01:5a:be:50:29: 67:0d:44:60:3b:d2:80:9d:e7:19:e9:ed:be:d0:55: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:36:79:0E:2D:FE:D8:5E:74:52:40:DD:75:9B:D2:83:B4:2A:DB:D4 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bf:53:f9:29:1c:b0:1d:cc:5f:3a:de:80:8a:4a:45:79:b6: 65:db:35:80:aa:3f:bf:a4:52:18:a4:5c:81:29:97:55:52:4d: b4:e3:96:61:d0:69:a5:46:2d:0e:75:d7:76:a3:58:4b:4a:fd: 56:12:07:c3:88:0a:ab:70:49:d7:50:67:91:0e:23:ef:87:51: 6d:ae:97:d8:03:14:c6:cc:e9:8c:42:18:03:e1:15:08:1d:97: 51:61:5e:85:a0:88:d2:b2:53:8d:7a:9b:61:61:94:7a:5a:f6: 10:a3:d1:ae:9e:70:7f:40:a4:fc:89:bc:3f:36:14:2e:a1:a4: 1b:eb:80:d5:dc:86:d4:42:83:c4:56:ef:c7:c1:38:c4:79:0c: 52:12:ed:be:e5:58:a8:e6:f5:15:14:3e:fb:fd:c7:83:10:f6: 9d:8c:91:99:30:d2:36:f1:fa:71:27:6a:3e:c5:f9:ed:37:ee: 13:f7:f7:af:0b:a7:61:10:60:58:77:86:1f:86:28:1f:a5:d9: dd:33:f1:a9:51:6d:11:b7:13:73:8b:1c:aa:08:10:41:00:d5: b1:bf:66:ce:72:19:03:0a:da:af:17:fb:a0:78:64:61:33:84: e0:4d:13:90:12:d1:b2:99:73:fc:6c:a7:87:b2:f0:9e:a2:3b: 49:39:f7:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUxMjA2MjMwNjQzWhcNMjUxMjEzMjMwNjQzWjAYMRYwFAYD VQQDEw02OTM0YjcwMy02MDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJc5YHtUg6Hy+kkVOgHVBmb5vA4FyS1ia/lde+S47QbwbPmcyl5g4178PFl2 /rOqOvwto9zgR0ASNIHfS12QlLtnzoCsAz4c6pjDZzwRUBXdX+m9y0T0u78FY8Q6 uOFqeEdtGi0qvW8xOdVIXdEhzgNiiOYi/MnShjFBD+ASNzb1NgtTx8NYA67q0kAc vWLBnbSGMteShARs1D/boRhwPV8Fnh+iBeE3EcYkwzoKZp96Ec8iapb0HYBWBSPP bKORym1ysTj5GMmXYYMDQOit6S0iU08De2PLRNCH6bo5ofXmYHPZRuHC1aPJAVq+ UClnDURgO9KAnecZ6e2+0FWFgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY2eQ4t /thedFJA3XWb0oO0KtvUMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8v1P5KRywHcxfOt6AikpFebZl2zWAqj+/pFIYpFyBKZdVUk2045Zh 0GmlRi0Oddd2o1hLSv1WEgfDiAqrcEnXUGeRDiPvh1FtrpfYAxTGzOmMQhgD4RUI HZdRYV6FoIjSslONepthYZR6WvYQo9GunnB/QKT8ibw/NhQuoaQb64DV3IbUQoPE Vu/HwTjEeQxSEu2+5Vio5vUVFD77/ceDEPadjJGZMNI28fpxJ2o+xfntN+4T9/ev C6dhEGBYd4YfhigfpdndM/GpUW0RtxNzixyqCBBBANWxv2bOchkDCtqvF/ugeGRh M4TgTROQEtGymXP8bKeHsvCeojtJOfdD -----END CERTIFICATE-----Generated at Sun Dec 7 12:52:03 2025 by rpki-client