This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft File: mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json) Hash identifier: CxYbSWYopLPA+kS31rxINpo6b03+NDxDcU7RCl6PFDA= Subject key identifier: 3E:A0:0D:D2:76:58:C6:87:4F:E9:90:7F:B8:D7:6F:AF:BC:10:A5:6F Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft Manifest number: AB Signing time: Wed 03 Dec 2025 04:29:04 +0000 Manifest this update: Wed 03 Dec 2025 04:29:04 +0000 Manifest next update: Wed 10 Dec 2025 04:29:04 +0000 Files and hashes: 1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: xPTfaYoZN7bTCnZoukVAwJ/yhdtjEB7i9Jilg6eHJRQ=) 2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: KWihNcpG2X05jp7tO5tq+4iVwxhJjazTb7GWdPZJklM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Validity Not Before: Dec 3 04:29:04 2025 GMT Not After : Dec 10 04:29:04 2025 GMT Subject: CN=692fbc90-981e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:15:c9:4f:d6:af:81:51:9d:c4:c8:8d:03: e9:98:66:cf:31:4a:00:b3:22:0a:e1:51:34:bb:13: f5:58:4a:3c:cf:c3:90:3b:79:c5:61:2b:68:5a:21: 04:41:2f:f9:0a:db:95:99:bb:d5:87:ef:78:3e:55: 96:d0:98:bf:0a:89:c7:5b:b1:0e:dd:46:9f:3b:12: 21:05:a6:99:43:94:4d:45:55:92:dc:9f:85:be:4b: ce:ac:92:ee:49:51:c8:c3:c7:e2:34:ec:0d:7f:8d: c5:88:d5:91:7e:21:e9:b7:de:0e:99:13:4f:8d:68: 13:18:af:2d:5f:91:2c:75:a2:9f:be:46:09:11:8b: 08:8f:50:02:f8:60:de:dc:75:09:e8:ca:98:44:1d: 95:aa:d0:10:ca:8c:cd:27:9f:56:bf:60:66:e2:81: e4:60:cf:59:60:6e:9f:e5:b0:35:ba:58:2f:f3:a5: f8:a2:9c:a5:4e:8f:86:2d:af:18:63:2e:e4:0e:3a: 17:82:08:4d:fd:dd:32:d7:78:21:b8:69:b8:56:3a: d3:29:58:4f:c2:59:8a:6e:3f:0d:a5:2f:df:2e:ce: f8:e1:be:e0:04:d1:ce:6e:90:1e:88:7e:37:e4:d1: 35:cd:26:8a:81:36:c7:1a:45:ff:12:f7:da:54:7b: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A0:0D:D2:76:58:C6:87:4F:E9:90:7F:B8:D7:6F:AF:BC:10:A5:6F X509v3 Authority Key Identifier: keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3c:ae:c4:d8:6f:fc:71:9e:95:b4:94:c7:8b:ba:c9:44:05: e5:bc:4e:5c:56:a8:32:6b:fd:19:5a:e0:2b:86:5d:15:2b:45: 53:44:a6:63:8b:bc:cf:d7:38:51:89:5c:76:30:ac:94:28:a6: 5b:7f:01:71:81:14:42:93:31:bc:ce:a8:e4:5f:84:1c:31:86: 97:42:b8:8b:fa:c8:be:1e:ac:d8:7b:c6:ae:f1:34:4d:42:ed: 2e:8d:98:0f:d5:07:f9:df:08:37:74:fa:de:6d:b0:41:65:91: 7d:2a:1b:42:b4:34:d8:0c:7f:41:35:c4:cd:a1:3e:d9:b5:e4: 30:e0:b0:64:52:fc:c1:ab:f2:35:69:a8:c4:cc:fa:ec:6c:89: ea:16:97:50:cb:02:7b:43:ff:0c:5f:fe:f1:49:cb:e0:d7:02: 65:4b:62:ce:4e:57:c4:59:9a:60:c5:95:29:96:ee:a9:ca:86: 64:fc:52:4e:2b:16:ca:d7:e8:a7:3b:c8:a1:cc:9e:be:fe:6f: 8f:d5:20:a9:52:65:5f:b4:d9:91:bc:68:ae:0d:77:a2:0e:23: a0:e9:83:4a:a5:de:43:86:39:82:fb:97:a3:8c:0a:21:26:14: b6:48:0e:5d:8e:75:73:b4:8d:f6:7e:5c:cb:f3:86:59:cd:fd: 22:09:15:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKDk4MENFNUJCRjJDRjM1RDYwQUUzQjA3MjE4QUI1Q0E5 MTAxNDJDOTAwHhcNMjUxMjAzMDQyOTA0WhcNMjUxMjEwMDQyOTA0WjAYMRYwFAYD VQQDEw02OTJmYmM5MC05ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMYVyU/Wr4FRncTIjQPpmGbPMUoAsyIK4VE0uxP1WEo8z8OQO3nFYStoWiEE QS/5CtuVmbvVh+94PlWW0Ji/ConHW7EO3UafOxIhBaaZQ5RNRVWS3J+FvkvOrJLu SVHIw8fiNOwNf43FiNWRfiHpt94OmRNPjWgTGK8tX5EsdaKfvkYJEYsIj1AC+GDe 3HUJ6MqYRB2VqtAQyozNJ59Wv2Bm4oHkYM9ZYG6f5bA1ulgv86X4opylTo+GLa8Y Yy7kDjoXgghN/d0y13ghuGm4VjrTKVhPwlmKbj8NpS/fLs744b7gBNHObpAeiH43 5NE1zSaKgTbHGkX/EvfaVHs7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6gDdJ2 WMaHT+mQf7jXb6+8EKVvMB8GA1UdIwQYMBaAFJgM5bvyzzXWCuOwchirXKkQFCyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS81RTlDNEJCMENC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi9tQXpsdV9MUE5kWUs0N0J5R0t0Y3FSQVVM SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Bemx1X0xQTmRZSzQ3QnlHS3RjcVJBVUxKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS81RTlDNEJCMENCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi9tQXpsdV9MUE5k WUs0N0J5R0t0Y3FSQVVMSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSPK7E2G/8cZ6VtJTHi7rJRAXlvE5cVqgya/0ZWuArhl0VK0VTRKZj i7zP1zhRiVx2MKyUKKZbfwFxgRRCkzG8zqjkX4QcMYaXQriL+si+HqzYe8au8TRN Qu0ujZgP1Qf53wg3dPrebbBBZZF9KhtCtDTYDH9BNcTNoT7ZteQw4LBkUvzBq/I1 aajEzPrsbInqFpdQywJ7Q/8MX/7xScvg1wJlS2LOTlfEWZpgxZUplu6pyoZk/FJO KxbK1+inO8ihzJ6+/m+P1SCpUmVftNmRvGiuDXeiDiOg6YNKpd5DhjmC+5ejjAoh JhS2SA5djnVztI32flzL84ZZzf0iCRW8 -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:52 2025 by rpki-client