This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: /4mBOZUkp3tujg0cMLEDt1fuFTxcNb4V2uTRk5EtIG0= Subject key identifier: 28:DF:5C:96:87:17:C3:F6:25:C7:D1:6A:D6:8C:B2:E5:27:5F:98:59 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 060D Signing time: Sat 06 Dec 2025 21:46:00 +0000 Manifest this update: Sat 06 Dec 2025 21:45:59 +0000 Manifest next update: Sat 13 Dec 2025 21:45:59 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: UXq5Dy7grNOs5PsfIUWwLS070eWLsw6dgY1I9TJTZF8=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Dec 6 21:45:59 2025 GMT Not After : Dec 13 21:45:59 2025 GMT Subject: CN=6934a418-c1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:35:24:e1:dd:a8:30:64:64:7e:ae:89:5f: fa:b5:0f:b5:0e:c4:0c:3e:86:55:86:d6:02:81:5f: 3c:81:1f:c5:a9:e0:b3:be:7d:bd:79:46:ad:fc:37: b2:2f:d5:ee:a3:e6:44:7a:3c:49:13:14:e5:93:cc: c2:bd:4d:72:ca:af:08:2c:74:7a:c1:84:43:45:d0: ef:4f:09:95:fb:05:4f:ea:46:c5:59:4a:23:9c:01: a2:8a:a2:1a:36:d0:c9:06:78:51:41:ad:bb:8b:00: 5c:2e:6f:ab:66:b5:bd:c1:41:7c:57:dd:ec:70:53: 33:ae:4a:07:50:9e:ac:d0:fd:e6:a7:a6:74:17:88: 7b:d0:8d:1c:3e:e6:0b:81:a1:43:72:fc:c6:4c:94: ae:db:74:29:0f:46:e4:d0:41:26:24:7f:08:86:c5: fb:4d:0f:51:7f:e5:a8:b3:70:24:27:fd:c5:16:d9: e3:f0:e8:92:5a:a2:78:06:6f:d9:47:4b:90:0c:df: 4f:48:df:ca:4d:73:9f:a6:22:8a:43:c3:16:79:bb: 03:4f:18:08:db:79:66:6a:dc:b8:0b:3b:60:92:f2: 86:32:65:03:74:e9:aa:32:e0:11:e7:e1:68:f5:88: 50:6f:70:78:02:16:2d:82:b9:43:dc:9d:76:e1:f8: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DF:5C:96:87:17:C3:F6:25:C7:D1:6A:D6:8C:B2:E5:27:5F:98:59 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:93:6d:24:af:ae:bb:fc:54:6e:b2:0c:ec:bc:18:1e:c7:ce: e2:87:8e:38:aa:e0:db:04:ca:83:0c:05:cc:61:51:65:09:29: 5e:7f:d9:d5:18:c2:0c:d6:e3:57:da:b1:ca:89:f2:87:db:ea: e3:2a:c8:2b:3c:2c:08:ad:b0:e0:b8:d8:ae:96:ec:8d:f6:63: e0:a7:49:a2:0d:d6:e7:8e:67:2c:77:73:2a:69:10:5e:c4:ae: 99:ef:2b:f6:a6:f7:2a:f3:87:4d:af:90:4a:de:7e:be:fa:d5: 88:2e:be:6e:ac:9c:a5:53:8b:91:14:60:38:9a:1a:3f:bd:92: f2:66:64:7c:a5:26:24:9d:e0:a3:54:47:9f:20:8b:9f:44:62: 83:3c:00:b5:4c:b0:64:29:17:4a:d5:09:9b:54:10:10:50:fe: 1b:37:8d:96:cf:48:b2:0d:02:64:06:c1:9a:26:32:60:ac:08: 24:92:2f:3e:13:84:98:fc:c5:36:de:e4:7b:85:e8:87:95:88: 99:ff:2c:e1:f5:ac:20:a2:7c:57:df:23:ce:6f:5b:b4:03:ce: 59:44:05:43:38:b8:2e:f0:ce:80:a3:95:f6:55:31:be:c9:58: c3:87:66:80:1f:63:4c:8b:a9:7b:95:4e:f2:45:85:4b:b2:e0: 5a:a0:d0:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUxMjA2MjE0NTU5WhcNMjUxMjEzMjE0NTU5WjAYMRYwFAYD VQQDEw02OTM0YTQxOC1jMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2G81JOHdqDBkZH6uiV/6tQ+1DsQMPoZVhtYCgV88gR/FqeCzvn29eUat/Dey L9Xuo+ZEejxJExTlk8zCvU1yyq8ILHR6wYRDRdDvTwmV+wVP6kbFWUojnAGiiqIa NtDJBnhRQa27iwBcLm+rZrW9wUF8V93scFMzrkoHUJ6s0P3mp6Z0F4h70I0cPuYL gaFDcvzGTJSu23QpD0bk0EEmJH8IhsX7TQ9Rf+Wos3AkJ/3FFtnj8OiSWqJ4Bm/Z R0uQDN9PSN/KTXOfpiKKQ8MWebsDTxgI23lmaty4CztgkvKGMmUDdOmqMuAR5+Fo 9YhQb3B4AhYtgrlD3J124fhtawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjfXJaH F8P2JcfRataMsuUnX5hZMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCek20kr667/FRusgzsvBgex87ih444quDbBMqDDAXMYVFlCSlef9nV GMIM1uNX2rHKifKH2+rjKsgrPCwIrbDguNiuluyN9mPgp0miDdbnjmcsd3MqaRBe xK6Z7yv2pvcq84dNr5BK3n6++tWILr5urJylU4uRFGA4mho/vZLyZmR8pSYkneCj VEefIIufRGKDPAC1TLBkKRdK1QmbVBAQUP4bN42Wz0iyDQJkBsGaJjJgrAgkki8+ E4SY/MU23uR7heiHlYiZ/yzh9awgonxX3yPOb1u0A85ZRAVDOLgu8M6Ao5X2VTG+ yVjDh2aAH2NMi6l7lU7yRYVLsuBaoNAr -----END CERTIFICATE-----Generated at Mon Dec 8 06:23:17 2025 by rpki-client