This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: 4RE3V1iNUBVJ2iR48JmAzzAOQnz7FIie0/PjcdKsxYs= Subject key identifier: 21:7B:F8:E2:46:A2:20:27:A3:86:E3:88:EC:F6:6E:B4:E7:4C:75:D8 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 19 Signing time: Wed 03 Dec 2025 06:00:10 +0000 Manifest this update: Wed 03 Dec 2025 06:00:10 +0000 Manifest next update: Wed 10 Dec 2025 06:00:10 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: Kx55dta5ufMjYkGeWkWxyzPry+79WcmjSRVKFpeElO4=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Dec 3 06:00:10 2025 GMT Not After : Dec 10 06:00:10 2025 GMT Subject: CN=692fd1ea-64c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:12:d6:9d:94:6b:51:11:5f:02:48:57:87: 61:19:f4:fd:98:0d:3c:0f:89:08:95:70:ae:31:61: 95:f2:94:c8:18:62:25:83:c6:99:a8:a1:fe:03:65: cb:5e:5e:ae:61:b0:c7:67:c5:9c:e3:19:eb:1e:bf: 75:9d:75:87:68:fd:bf:45:1d:c1:c0:ac:88:a6:3f: b9:e3:09:2a:8c:c7:d3:78:3a:1d:ac:29:0b:bc:a8: ad:c7:1e:0b:d2:c7:7d:8c:3a:8a:b6:99:10:5e:29: 1d:72:38:1d:09:73:df:08:d9:e5:1e:e0:80:98:f7: 85:b8:be:af:36:9b:aa:ef:40:ee:72:88:c5:f3:f1: 65:45:fd:7c:12:c7:b7:f9:41:0a:13:9c:10:86:bc: 92:9b:5c:eb:46:87:c2:13:25:11:b2:19:1a:f4:6c: ed:e0:80:e6:a1:89:b0:9e:82:a9:74:d0:d0:b0:98: f5:74:e2:eb:a6:65:c5:73:fe:b5:09:c8:15:0e:9a: 6f:c8:72:5a:a7:08:9c:c7:2e:88:0e:80:5a:05:46: 4d:a1:ab:56:58:3d:6e:eb:b5:fb:0f:72:0f:71:30: 42:4b:6c:d7:b3:00:68:ce:14:80:5a:14:84:01:8b: ad:71:43:02:4d:fe:e5:cd:4a:af:d0:f6:09:a7:00: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:F8:E2:46:A2:20:27:A3:86:E3:88:EC:F6:6E:B4:E7:4C:75:D8 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:4b:e3:b9:c9:2f:ac:a9:e9:a5:87:8b:88:29:a5:52:08:bc: b2:70:6a:f6:ca:fb:f3:cd:9b:46:79:1d:bc:41:a2:6f:6c:cb: f5:a4:47:95:c6:a6:5b:85:fe:c2:62:17:aa:fd:b4:bf:50:b7: 87:55:32:69:59:41:f9:43:b2:f3:83:f0:fb:fc:91:25:31:7c: fa:80:7c:51:8c:8c:5d:95:87:20:5b:2b:45:4c:31:94:92:2c: 7c:df:d2:6a:27:18:4d:40:82:d3:23:67:63:4f:bb:69:2c:8c: 72:4b:06:cf:16:cf:20:cc:03:ea:a8:eb:77:d1:7b:77:95:6b: 9b:11:7a:00:32:2b:49:ef:8d:01:73:77:f4:c1:b9:19:ad:bc: 31:08:8a:d8:78:bf:4f:71:40:eb:56:c8:1b:37:e4:70:0e:3d: 4e:52:33:fa:ed:bd:20:08:d4:a2:df:db:b0:87:f1:be:9a:96: 44:3f:f7:75:a2:0e:f6:cf:b2:7e:c6:47:10:8a:d0:73:49:97: 1d:56:c2:6a:d4:58:d6:1f:d9:8e:ba:d2:15:14:1a:26:13:14: 06:e0:cb:fe:ad:0d:cf:63:32:de:8d:19:c8:b3:00:24:74:39: 2d:1a:18:95:c3:1e:5b:84:5c:60:ad:11:51:44:0d:ff:d5:52: 3e:0b:a6:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNTEyMDMwNjAwMTBaFw0yNTEyMTAwNjAwMTBaMBgxFjAUBgNV BAMTDTY5MmZkMWVhLTY0YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7XxLWnZRrURFfAkhXh2EZ9P2YDTwPiQiVcK4xYZXylMgYYiWDxpmoof4DZcte Xq5hsMdnxZzjGesev3WddYdo/b9FHcHArIimP7njCSqMx9N4Oh2sKQu8qK3HHgvS x32MOoq2mRBeKR1yOB0Jc98I2eUe4ICY94W4vq82m6rvQO5yiMXz8WVF/XwSx7f5 QQoTnBCGvJKbXOtGh8ITJRGyGRr0bO3ggOahibCegql00NCwmPV04uumZcVz/rUJ yBUOmm/IclqnCJzHLogOgFoFRk2hq1ZYPW7rtfsPcg9xMEJLbNezAGjOFIBaFIQB i61xQwJN/uXNSq/Q9gmnACM1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIXv44kai ICejhuOI7PZutOdMddgwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHlL47nJL6yp6aWHi4gppVIIvLJwavbK+/PNm0Z5HbxBom9sy/WkR5XG pluF/sJiF6r9tL9Qt4dVMmlZQflDsvOD8Pv8kSUxfPqAfFGMjF2VhyBbK0VMMZSS LHzf0monGE1AgtMjZ2NPu2ksjHJLBs8WzyDMA+qo63fRe3eVa5sRegAyK0nvjQFz d/TBuRmtvDEIith4v09xQOtWyBs35HAOPU5SM/rtvSAI1KLf27CH8b6alkQ/93Wi DvbPsn7GRxCK0HNJlx1WwmrUWNYf2Y660hUUGiYTFAbgy/6tDc9jMt6NGcizACR0 OS0aGJXDHluEXGCtEVFEDf/VUj4Lptc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:51 2025 by rpki-client