This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: HYqVhvQXOp6VL1ySh2qv056TD170tMK1iOnD4AdGyVk= Subject key identifier: 50:89:B2:27:98:E3:82:4B:BF:A9:59:11:80:22:82:B7:1F:DA:9C:5C Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: 0A Signing time: Thu 27 Nov 2025 01:41:08 +0000 Manifest this update: Thu 27 Nov 2025 01:41:08 +0000 Manifest next update: Thu 04 Dec 2025 01:41:08 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: gZVcmjMS0G0TgiXspEBRW0SbubOq1C3ZVItPbexFoEU=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: APCWlv9KWNhsYVPgkQls3QyyU6JAY4toh5J0PYVgq2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 01:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Nov 27 01:41:08 2025 GMT Not After : Dec 4 01:41:08 2025 GMT Subject: CN=6927ac34-d9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:9a:fb:a7:75:21:ff:44:de:a9:91:db:d7: 21:d1:88:70:71:4b:27:73:61:ec:32:aa:f6:c5:af: cb:81:ec:bc:29:0c:f5:9c:22:8b:b5:cf:4f:22:d9: 31:dc:68:e0:c2:14:15:21:4e:18:ad:fc:27:67:03: 13:f9:bd:fb:34:37:ef:40:19:3f:68:88:77:8a:e2: d7:46:d1:fb:40:d6:b0:ce:ce:cf:d5:36:c6:ba:4f: 1a:7b:81:15:c9:5c:39:6e:dc:6d:0f:c6:b0:ae:64: 5a:ad:fa:49:3a:78:e9:17:5f:64:e2:17:b4:94:55: fd:8e:fd:ac:a7:05:c1:1f:84:a6:f3:9a:92:bb:05: a8:11:43:af:3a:e4:d5:e9:09:65:46:e0:50:06:7b: 1b:9c:fb:93:4e:50:08:09:33:50:00:a2:67:be:53: bf:7c:98:57:6a:c4:f3:e3:4e:ed:e6:24:ee:60:26: ee:71:2b:bf:a5:be:cf:00:c0:c7:5b:eb:95:35:aa: f8:80:fa:1b:67:50:06:31:99:2e:68:4e:44:c0:5a: 5d:43:f1:f0:54:7e:85:7c:fe:54:c8:72:2d:e9:ae: c5:73:aa:53:7a:b6:e2:74:70:ba:51:d9:9b:79:5c: f7:d5:ba:72:d0:7e:aa:c9:66:bf:45:fb:46:39:9f: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:B2:27:98:E3:82:4B:BF:A9:59:11:80:22:82:B7:1F:DA:9C:5C X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9c:f4:0e:f6:7a:97:10:7e:96:20:40:05:30:84:68:bb:52: d1:c7:ba:cb:4b:74:eb:c3:ac:42:98:f8:fe:2a:b6:68:d5:70: 04:61:3d:84:10:38:ab:83:49:88:fd:62:d2:a7:3f:19:30:3c: be:16:53:ae:ca:81:80:f2:a9:80:a0:57:e6:ac:a4:c6:cb:c7: d3:59:aa:b3:c0:f0:70:11:de:ef:12:c1:a8:31:6c:02:b4:51: 3a:56:a3:f0:f4:39:0b:5d:1a:a7:fd:6f:2d:70:d2:7c:df:cc: 95:72:0b:97:f3:25:b6:6a:fe:74:e5:31:de:6c:c8:31:e2:c4: 78:0b:ad:bd:4e:bb:36:37:38:a3:5e:ab:92:de:d7:61:5e:7f: 3c:72:a1:42:36:8c:96:97:b3:07:69:fb:32:60:d9:b4:23:cc: 20:e1:cc:90:6a:84:c7:fe:38:e0:f1:11:d7:c1:2b:0c:f3:d1: 75:f8:80:1e:d8:1e:a6:1b:ce:9d:2f:cf:c8:e8:ee:7e:e9:90: d9:2b:b4:94:51:e7:8c:5c:f4:cb:79:87:5e:90:e9:ef:29:31: 17:8e:64:57:cf:87:cc:8b:b1:38:30:b8:e6:08:b2:e2:1e:db: d4:39:7b:87:40:c9:62:b9:21:dd:2a:e3:5e:53:99:96:bb:43: 4f:72:cd:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3NENDRkJCNTE4 NzgzRDk2MDAeFw0yNTExMjcwMTQxMDhaFw0yNTEyMDQwMTQxMDhaMBgxFjAUBgNV BAMTDTY5MjdhYzM0LWQ5ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8bZr7p3Uh/0TeqZHb1yHRiHBxSydzYewyqvbFr8uB7LwpDPWcIou1z08i2THc aODCFBUhThit/CdnAxP5vfs0N+9AGT9oiHeK4tdG0ftA1rDOzs/VNsa6Txp7gRXJ XDlu3G0PxrCuZFqt+kk6eOkXX2TiF7SUVf2O/aynBcEfhKbzmpK7BagRQ6865NXp CWVG4FAGexuc+5NOUAgJM1AAome+U798mFdqxPPjTu3mJO5gJu5xK7+lvs8AwMdb 65U1qviA+htnUAYxmS5oTkTAWl1D8fBUfoV8/lTIci3prsVzqlN6tuJ0cLpR2Zt5 XPfVunLQfqrJZr9F+0Y5n7QlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUImyJ5jj gku/qVkRgCKCtx/anFwwHwYDVR0jBBgwFoAU0WaBZz8RihAOwgFHTM+7UYeD2WAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTgyL0IzN0I3ODRBQkU5 RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJX QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMFdhQlp6OFJpaEFPd2dGSFRNLTdVWWVEMldBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTgyL0IzN0I3ODRBQkU5RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhB T3dnRkhUTS03VVllRDJXQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2c9A72epcQfpYgQAUwhGi7UtHHustLdOvDrEKY+P4qtmjVcARhPYQQ OKuDSYj9YtKnPxkwPL4WU67KgYDyqYCgV+aspMbLx9NZqrPA8HAR3u8SwagxbAK0 UTpWo/D0OQtdGqf9by1w0nzfzJVyC5fzJbZq/nTlMd5syDHixHgLrb1OuzY3OKNe q5Le12FefzxyoUI2jJaXswdp+zJg2bQjzCDhzJBqhMf+OODxEdfBKwzz0XX4gB7Y HqYbzp0vz8jo7n7pkNkrtJRR54xc9Mt5h16Q6e8pMReOZFfPh8yLsTgwuOYIsuIe 29Q5e4dAyWK5Id0q415TmZa7Q09yzdg= -----END CERTIFICATE-----Generated at Fri Nov 28 05:40:13 2025 by rpki-client