This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: lEt0EbrUZl53qJkjvEpCwz+b7oaRJeobD/otI47o7SA= Subject key identifier: 15:96:DF:56:65:94:1E:64:02:01:BB:F5:7A:FF:76:C9:90:75:F0:08 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 0736 Signing time: Sat 06 Dec 2025 20:49:41 +0000 Manifest this update: Sat 06 Dec 2025 20:49:41 +0000 Manifest next update: Sat 13 Dec 2025 20:49:41 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: qXeW6ncwyMhEKqD9pJGA/keEPlBI3OMcUod6J9IdClw=) 2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: KFUQZMe5qLV6EEHqsboBmZ+XKCmzmQL5IdQuKz2/1pM=) 3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: CBAyva7dqI+RQTwKgqBd2Ik2cx8Z7eAggotY6PPN4YM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Dec 6 20:49:41 2025 GMT Not After : Dec 13 20:49:41 2025 GMT Subject: CN=693496e5-85bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:9d:4b:03:eb:e1:e7:a9:85:8b:14:3b:aa: cc:4a:54:df:fb:8d:65:e9:f7:d7:fa:dc:8e:36:e6: ee:4a:48:c3:64:de:e0:09:7a:83:8b:e7:cf:e3:26: f5:ff:32:e6:99:f0:cf:b7:8e:2a:fb:5c:ee:c4:d2: 63:e5:d1:8b:57:f3:5e:7a:d4:5e:dc:95:08:c2:ee: da:3d:13:ad:f9:a4:c3:97:c7:46:a7:c8:51:de:98: 43:c7:e3:75:29:cf:4f:1d:50:58:40:6e:d1:b9:36: ed:7d:c1:bf:fc:6c:74:f5:b8:c5:c4:8c:eb:5d:7e: 40:84:23:17:fc:46:ee:b9:00:e3:f3:5c:a6:a5:0c: b4:1b:ca:4b:c1:e0:1b:d9:7c:a7:93:61:64:71:2a: 1e:fa:5a:df:46:c7:63:6f:04:12:60:fe:ba:46:6f: 0f:14:1f:3c:f8:e0:81:40:43:30:a4:b9:11:4c:e0: 36:bc:0c:4f:a7:0f:4a:27:db:93:4d:e7:91:cc:9d: 46:43:d4:4a:4f:65:ab:3f:91:06:7d:82:8f:e7:3b: eb:b4:b8:f3:62:6e:e3:47:2d:cd:e0:b5:14:cb:3c: 4a:8d:e0:a9:db:76:a5:cb:3c:38:13:46:1e:77:64: 48:81:57:2c:4e:aa:14:7a:4c:af:3e:71:a3:71:4a: 58:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:96:DF:56:65:94:1E:64:02:01:BB:F5:7A:FF:76:C9:90:75:F0:08 X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:99:cc:2f:0b:44:39:7d:0a:e5:07:62:bf:17:52:0d:0b:56: d1:fb:55:09:1d:78:54:30:d5:f0:ed:55:ed:4e:75:32:0d:fd: af:23:47:b4:ed:be:6d:14:f4:91:94:d4:63:93:16:09:62:6b: e2:21:83:eb:7e:e6:2f:45:f0:4c:42:11:9f:9b:6f:b2:f5:56: 32:f9:49:71:bb:79:6b:87:7d:63:87:14:ee:79:3b:c4:cd:dd: 65:9b:04:4d:5b:10:74:03:d8:cd:38:38:12:80:64:ac:59:07: ed:c8:26:d5:80:08:ec:43:2b:50:47:8b:1f:65:42:2a:12:c5: bd:d4:fe:ab:40:3a:0b:55:ff:62:a3:9f:8d:25:76:bc:dc:02: 3a:2a:2f:ce:76:69:01:73:5c:d8:84:0a:8c:06:ca:4f:de:b0: 2d:a8:8d:1a:52:91:98:49:53:70:70:bd:99:fd:65:8e:59:01: 9c:80:0b:73:6a:a8:07:47:ef:19:af:d9:ce:30:38:ca:ce:12: a3:bb:81:a6:13:2e:0d:f2:1d:7e:51:61:7a:bd:65:a7:d0:e9: 66:71:81:0d:ca:49:5b:c8:ed:88:89:aa:72:38:53:8b:84:0d: 1b:27:83:47:9e:78:57:87:33:b1:c4:6f:ad:53:49:b8:ea:7b: 27:46:69:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjUxMjA2MjA0OTQxWhcNMjUxMjEzMjA0OTQxWjAYMRYwFAYD VQQDEw02OTM0OTZlNS04NWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+ydSwPr4eephYsUO6rMSlTf+41l6ffX+tyONubuSkjDZN7gCXqDi+fP4yb1 /zLmmfDPt44q+1zuxNJj5dGLV/NeetRe3JUIwu7aPROt+aTDl8dGp8hR3phDx+N1 Kc9PHVBYQG7RuTbtfcG//Gx09bjFxIzrXX5AhCMX/EbuuQDj81ympQy0G8pLweAb 2Xynk2FkcSoe+lrfRsdjbwQSYP66Rm8PFB88+OCBQEMwpLkRTOA2vAxPpw9KJ9uT TeeRzJ1GQ9RKT2WrP5EGfYKP5zvrtLjzYm7jRy3N4LUUyzxKjeCp23alyzw4E0Ye d2RIgVcsTqoUekyvPnGjcUpYLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWW31Zl lB5kAgG79Xr/dsmQdfAIMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBomcwvC0Q5fQrlB2K/F1INC1bR+1UJHXhUMNXw7VXtTnUyDf2vI0e0 7b5tFPSRlNRjkxYJYmviIYPrfuYvRfBMQhGfm2+y9VYy+Ulxu3lrh31jhxTueTvE zd1lmwRNWxB0A9jNODgSgGSsWQftyCbVgAjsQytQR4sfZUIqEsW91P6rQDoLVf9i o5+NJXa83AI6Ki/OdmkBc1zYhAqMBspP3rAtqI0aUpGYSVNwcL2Z/WWOWQGcgAtz aqgHR+8Zr9nOMDjKzhKju4GmEy4N8h1+UWF6vWWn0OlmcYENyklbyO2IiapyOFOL hA0bJ4NHnnhXhzOxxG+tU0m46nsnRml5 -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:38 2025 by rpki-client