This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: 83mV2prSrpE+/pi9CDBZ0Ko3d5V3dGS3sET6x8WEY78= Subject key identifier: 9C:FE:AD:0F:67:F0:A7:0C:D9:3B:F6:06:22:C7:A9:DC:DD:1A:10:FD Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: F3 Signing time: Wed 03 Dec 2025 03:46:04 +0000 Manifest this update: Wed 03 Dec 2025 03:46:04 +0000 Manifest next update: Wed 10 Dec 2025 03:46:04 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: jm8b9yfoSbXi/2cU2h3M4ERBqRMQVhYpFhH5JheIrc8=) 2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: 2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=) 3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: 8BNbqhDSj5zwZRpetUourvgFN3LcAIxoiLxOQgq3beM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Dec 3 03:46:04 2025 GMT Not After : Dec 10 03:46:04 2025 GMT Subject: CN=692fb27c-48c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:8b:34:2b:8f:30:1e:cf:d9:2f:7d:09:84: d1:1b:6b:f7:30:fc:7d:aa:b9:8c:7b:b8:47:62:85: 1f:2b:3d:d3:50:33:00:96:7e:64:65:3b:5a:04:f2: 4b:ea:ea:03:82:32:d0:67:50:2f:ac:c0:25:01:d5: 57:09:74:35:03:a5:4b:f8:d1:36:8c:4a:fc:71:a4: 7f:3c:0e:0c:e2:72:6a:76:c9:fd:a7:53:fc:ff:6e: 9e:e0:64:80:e2:20:57:e2:79:40:79:21:9b:23:3f: 8b:98:bd:97:3a:73:0f:29:9a:53:52:19:01:07:a1: ec:ab:49:b7:a8:b8:93:fb:6c:bc:b6:54:4f:41:3e: c9:0d:31:e0:31:22:16:9e:9d:4f:5a:7f:e7:f6:1f: d4:13:9e:7a:95:04:55:ba:4a:b6:13:93:fd:a7:83: 82:fb:7d:00:d5:27:f7:10:3c:82:e2:03:c9:0a:6e: 65:fd:af:46:5d:b1:1a:86:d9:02:11:28:45:7f:10: 0d:23:ac:09:21:cd:33:14:80:b8:d6:2b:e9:06:ef: 9e:45:57:e5:69:af:73:25:97:94:a7:64:89:cc:ab: f0:a8:58:12:3e:8d:00:12:9e:e9:79:3c:2b:e5:dc: 13:b8:35:b8:e1:79:3f:4d:0d:77:fb:7a:0d:36:7a: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:AD:0F:67:F0:A7:0C:D9:3B:F6:06:22:C7:A9:DC:DD:1A:10:FD X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:15:5d:07:59:6a:2e:48:59:d8:14:d4:a5:dd:6d:97:ef: 4b:82:8d:87:b2:bd:b0:f3:01:13:a7:57:0b:2e:52:d8:76:d5: 0d:d8:22:55:b5:bd:58:ea:ab:45:09:ac:ba:3b:08:3e:ca:de: f5:f6:58:d3:c7:14:b1:06:af:23:59:3c:57:b4:cb:5b:a3:94: a8:97:d4:09:ab:72:69:66:52:dd:5e:a5:35:fb:3d:27:e2:8c: d4:dd:db:18:a6:6d:4f:87:5e:d2:8e:7f:75:85:61:0e:32:e2: 5e:16:2f:d7:1f:2d:15:75:61:1f:a2:92:0d:87:e5:9c:f6:d6: 15:66:db:9d:06:f6:db:51:30:fa:36:9a:6a:22:30:dd:88:1d: 3f:79:3d:64:84:35:43:8b:84:46:27:6b:86:01:9c:a2:89:43: 84:63:3b:0f:c1:6a:3e:a3:1b:1a:3d:64:1b:b3:70:cf:28:35: 22:2e:16:2a:e2:09:9b:ca:9a:d9:b0:e0:eb:39:90:37:c6:a2: 27:36:81:ec:1f:9c:34:d1:99:b1:a3:64:0b:a6:72:8a:67:39: c0:58:ab:ac:54:f8:ff:6e:c2:09:1d:2c:8f:5c:ae:a4:ee:95: c3:dc:ed:dc:03:14:eb:49:bf:d1:ec:ae:3d:0e:c2:52:0f:a7: f7:f0:11:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUxMjAzMDM0NjA0WhcNMjUxMjEwMDM0NjA0WjAYMRYwFAYD VQQDEw02OTJmYjI3Yy00OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7CLNCuPMB7P2S99CYTRG2v3MPx9qrmMe7hHYoUfKz3TUDMAln5kZTtaBPJL 6uoDgjLQZ1AvrMAlAdVXCXQ1A6VL+NE2jEr8caR/PA4M4nJqdsn9p1P8/26e4GSA 4iBX4nlAeSGbIz+LmL2XOnMPKZpTUhkBB6Hsq0m3qLiT+2y8tlRPQT7JDTHgMSIW np1PWn/n9h/UE556lQRVukq2E5P9p4OC+30A1Sf3EDyC4gPJCm5l/a9GXbEahtkC EShFfxANI6wJIc0zFIC41ivpBu+eRVflaa9zJZeUp2SJzKvwqFgSPo0AEp7peTwr 5dwTuDW44Xk/TQ13+3oNNnqQ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz+rQ9n 8KcM2Tv2BiLHqdzdGhD9MB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqghVdB1lqLkhZ2BTUpd1tl+9Lgo2Hsr2w8wETp1cLLlLYdtUN2CJV tb1Y6qtFCay6Owg+yt719ljTxxSxBq8jWTxXtMtbo5Sol9QJq3JpZlLdXqU1+z0n 4ozU3dsYpm1Ph17Sjn91hWEOMuJeFi/XHy0VdWEfopINh+Wc9tYVZtudBvbbUTD6 NppqIjDdiB0/eT1khDVDi4RGJ2uGAZyiiUOEYzsPwWo+oxsaPWQbs3DPKDUiLhYq 4gmbyprZsODrOZA3xqInNoHsH5w00Zmxo2QLpnKKZznAWKusVPj/bsIJHSyPXK6k 7pXD3O3cAxTrSb/R7K49DsJSD6f38BF1 -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:50 2025 by rpki-client