This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: Ww4fsotLN7y1YPODPt8YJynV63ixvaSnLYna5PrWXi0= Subject key identifier: F1:A1:09:D5:D2:D8:1C:59:DC:2D:39:17:EB:16:98:40:00:F4:97:0B Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 01AE Signing time: Tue 09 Dec 2025 01:22:31 +0000 Manifest this update: Tue 09 Dec 2025 01:22:31 +0000 Manifest next update: Tue 16 Dec 2025 01:22:31 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: wkbckhLm68NHg+rCiVETnDuTqSC/qVpLk88tbIChVGc=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 01:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Dec 9 01:22:31 2025 GMT Not After : Dec 16 01:22:31 2025 GMT Subject: CN=693779d7-a48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:57:19:47:bb:4c:06:48:f6:23:d9:78:e0: 0e:2d:f2:e2:1f:c9:b7:89:a6:b0:44:4a:c7:6d:e5: ec:68:f8:87:2f:42:1e:cb:64:46:4e:a9:e7:b5:4c: 87:40:1e:d2:57:06:26:24:05:59:8f:43:7e:89:e8: 50:90:56:a6:1a:9c:ef:78:fc:93:ad:c0:b0:d6:d9: 38:50:34:47:0b:02:02:ac:53:87:88:11:15:dd:5e: ff:fb:a7:4f:01:eb:92:b5:2e:0d:94:a4:3d:44:9c: f9:66:2c:00:01:c8:9c:4b:c0:17:cf:f0:f3:cd:cb: 31:9d:f9:1d:c1:1e:21:ad:53:61:ff:d1:65:56:50: ab:98:cf:47:5f:b1:7c:77:2d:a7:af:7a:b8:3f:38: 5c:60:87:f1:2d:ea:9f:9a:81:4b:d5:a4:98:82:cb: 92:e0:71:e7:86:29:d4:1e:0c:af:27:bd:f7:4d:2e: 21:e0:d7:7a:62:10:f4:c8:21:9f:70:08:38:d1:63: cc:fb:f2:c6:68:d2:fd:6f:84:33:03:e2:cd:1b:3c: 1e:7e:1b:f0:43:11:c5:de:3f:68:bd:87:67:6b:62: 7e:1c:28:2f:88:39:c4:40:55:3a:e6:4d:69:38:75: a5:41:35:a5:c8:68:b3:69:7f:b8:5e:b7:8e:1d:80: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A1:09:D5:D2:D8:1C:59:DC:2D:39:17:EB:16:98:40:00:F4:97:0B X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8b:44:16:a3:39:36:6e:41:68:4d:6c:aa:8a:ac:d4:0b:5a: 47:dd:2f:cf:f2:1d:d7:aa:ba:35:2b:b3:11:b8:7b:83:c7:e8: a2:3d:6e:e0:5f:42:a8:70:d4:19:79:f9:cb:a6:5d:78:bd:6a: bd:7c:e1:9b:2d:07:df:96:3b:07:ed:c3:85:22:0b:b6:cd:53: 87:67:15:52:03:1f:dc:f0:cf:64:76:c1:ea:20:fa:9b:a7:c0: c5:cd:49:19:a9:cf:85:cd:ab:38:21:ff:bd:64:ac:29:fe:03: bd:09:84:37:a0:0b:89:6f:e3:84:ab:46:77:11:cd:00:ad:1e: 93:ad:e0:55:05:06:02:a4:e8:59:d7:9c:a5:0c:45:51:c6:31: bf:bc:55:93:b9:5c:23:45:61:73:9c:03:01:95:b2:a7:d3:37: c7:18:3d:20:50:00:d3:7f:b0:05:8b:11:7b:03:73:fd:1b:32: 31:13:6c:67:59:a1:c1:5d:62:7e:1a:2e:00:0a:67:77:79:da: c7:42:1d:f2:65:31:9c:c2:bb:10:10:9d:20:76:91:96:96:ee: f5:7f:f7:51:3f:ef:0f:6f:d7:f9:49:15:3f:0e:a4:ed:9b:a4: ba:20:30:93:50:e2:be:a3:e3:6b:b8:72:ca:10:0f:4a:43:23: 2b:f8:34:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjUxMjA5MDEyMjMxWhcNMjUxMjE2MDEyMjMxWjAYMRYwFAYD VQQDEw02OTM3NzlkNy1hNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGRXGUe7TAZI9iPZeOAOLfLiH8m3iaawRErHbeXsaPiHL0Iey2RGTqnntUyH QB7SVwYmJAVZj0N+iehQkFamGpzvePyTrcCw1tk4UDRHCwICrFOHiBEV3V7/+6dP AeuStS4NlKQ9RJz5ZiwAAcicS8AXz/DzzcsxnfkdwR4hrVNh/9FlVlCrmM9HX7F8 dy2nr3q4PzhcYIfxLeqfmoFL1aSYgsuS4HHnhinUHgyvJ733TS4h4Nd6YhD0yCGf cAg40WPM+/LGaNL9b4QzA+LNGzwefhvwQxHF3j9ovYdna2J+HCgviDnEQFU65k1p OHWlQTWlyGizaX+4XreOHYDH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGhCdXS 2BxZ3C05F+sWmEAA9JcLMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZi0QWozk2bkFoTWyqiqzUC1pH3S/P8h3Xqro1K7MRuHuDx+iiPW7g X0KocNQZefnLpl14vWq9fOGbLQffljsH7cOFIgu2zVOHZxVSAx/c8M9kdsHqIPqb p8DFzUkZqc+Fzas4If+9ZKwp/gO9CYQ3oAuJb+OEq0Z3Ec0ArR6TreBVBQYCpOhZ 15ylDEVRxjG/vFWTuVwjRWFznAMBlbKn0zfHGD0gUADTf7AFixF7A3P9GzIxE2xn WaHBXWJ+Gi4ACmd3edrHQh3yZTGcwrsQEJ0gdpGWlu71f/dRP+8Pb9f5SRU/DqTt m6S6IDCTUOK+o+NruHLKEA9KQyMr+DQ0 -----END CERTIFICATE-----Generated at Wed Dec 10 04:19:38 2025 by rpki-client