This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: 0L0sYvPDmJLuzpYupwhkeLdO8CjJ7M793PniHnHmXaU= Subject key identifier: 13:59:00:06:2F:BC:10:47:3B:3C:20:0D:7B:16:35:39:6F:D2:52:7A Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 08EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07F1 Signing time: Mon 08 Dec 2025 21:02:17 +0000 Manifest this update: Mon 08 Dec 2025 21:02:16 +0000 Manifest next update: Mon 15 Dec 2025 21:02:16 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: pRraSiHkBAwtzLCKxk0B3qEz9AITl8rY8wL2n/sPXG0=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: XMlKN3xoWR211awSFj7o4wXNUVPU6g4tGLZ46VoBBkc=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: w9Ld0KkWk+HSLE94pTgnMmO75l3YO/TEPXrwE1OHV3U=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: wM1mmKNlwwEGHyhB8WEo2P8zb520cmuZMxNTLioe/2U=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: /m3np215OehHUCdDTNchzJpCWnkgfvYQ66txJ67HLU4=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: 80Bbu5vAr9GzJbHLW7ykwoxorF8FcLcIQYcqc83u1us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Dec 8 21:02:16 2025 GMT Not After : Dec 15 21:02:16 2025 GMT Subject: CN=69373cd8-4ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:cb:fd:8a:cf:79:9f:94:70:e2:ab:ac:44: b2:49:91:c9:f8:1d:c4:2c:a8:28:37:50:08:f4:36: 75:49:1e:a7:66:21:fe:8a:71:41:54:67:5d:f6:1a: 8d:58:3a:2a:e1:6c:ca:0b:61:35:40:a9:a7:1e:aa: 77:15:e2:ae:64:39:77:09:9a:40:f6:57:38:ad:a2: aa:1f:23:01:9b:72:98:1e:93:6f:d6:16:0a:c9:ec: 04:e9:d9:8e:7b:1f:d3:f4:78:4a:fa:a5:a0:bc:ed: 17:4f:d4:9a:0c:88:01:ae:c7:38:93:cc:0d:ac:1b: 4e:a5:7a:57:a0:ba:ab:dc:75:60:d8:0d:a9:3d:0d: bf:3d:40:60:87:7c:64:d6:81:c0:84:67:ac:eb:59: 19:29:58:bf:91:be:42:e5:5f:ba:a3:e9:b7:d5:be: 13:ee:a7:dd:73:3c:c2:16:fe:c8:cc:2b:49:00:4c: d3:43:ce:0b:d9:3d:dd:6f:e7:7d:aa:3e:b4:da:1a: 8c:54:8b:ec:2c:98:9f:a9:69:2d:f0:d4:70:0c:da: f4:71:05:1d:58:1a:03:8a:83:75:de:ed:5d:40:4e: 43:1d:1c:88:3c:c2:9c:7f:da:94:32:4c:cb:64:41: b7:db:e6:86:7c:da:8f:e7:5c:d5:d4:49:8e:90:e4: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:59:00:06:2F:BC:10:47:3B:3C:20:0D:7B:16:35:39:6F:D2:52:7A X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a5:8e:cd:06:83:2e:9f:f0:7e:d4:fe:ae:78:78:97:2a:cf: 3f:91:d6:0b:6a:59:42:60:a9:f1:af:f2:83:e2:7c:ef:cf:9c: 1d:a5:24:29:4f:3c:b3:47:29:94:fa:55:af:fa:3a:af:44:67: 2b:bd:a3:46:e3:6c:27:f8:00:f9:8c:4e:09:b8:eb:04:74:51: 92:93:e6:d2:b3:2b:62:c2:b2:97:77:27:4e:50:e3:ef:3e:b3: a4:63:f9:d1:d4:34:48:8a:c8:75:a9:a1:5d:34:d2:ec:45:78: f2:56:c3:fd:cf:6a:48:e4:1e:da:eb:60:87:6d:bf:e3:9e:cf: f8:30:29:3a:ec:cc:be:8b:f0:ff:55:38:aa:53:c7:69:d9:c0: 4d:54:b3:f7:cb:ac:05:d7:6f:a9:85:70:f0:e2:5b:12:f0:f8: 1d:ea:36:5a:f3:ba:e3:1b:27:3a:a7:0f:8a:e1:4b:c7:74:62: b1:1f:ea:f6:1d:bf:d5:f7:14:95:53:8e:09:63:ef:31:95:20: f4:9e:c3:c4:37:f6:35:e0:1c:54:30:86:e6:54:24:e0:f3:73: a1:58:36:5c:a7:12:2a:bb:53:58:38:8d:78:81:e5:04:7a:99: bf:5d:86:96:ce:32:aa:75:4a:7f:78:ca:0d:1d:71:87:82:2d: 55:5f:bf:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUxMjA4MjEwMjE2WhcNMjUxMjE1MjEwMjE2WjAYMRYwFAYD VQQDEw02OTM3M2NkOC00YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1/L/YrPeZ+UcOKrrESySZHJ+B3ELKgoN1AI9DZ1SR6nZiH+inFBVGdd9hqN WDoq4WzKC2E1QKmnHqp3FeKuZDl3CZpA9lc4raKqHyMBm3KYHpNv1hYKyewE6dmO ex/T9HhK+qWgvO0XT9SaDIgBrsc4k8wNrBtOpXpXoLqr3HVg2A2pPQ2/PUBgh3xk 1oHAhGes61kZKVi/kb5C5V+6o+m31b4T7qfdczzCFv7IzCtJAEzTQ84L2T3db+d9 qj602hqMVIvsLJifqWkt8NRwDNr0cQUdWBoDioN13u1dQE5DHRyIPMKcf9qUMkzL ZEG32+aGfNqP51zV1EmOkOSXZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNZAAYv vBBHOzwgDXsWNTlv0lJ6MB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAupY7NBoMun/B+1P6ueHiXKs8/kdYLallCYKnxr/KD4nzvz5wdpSQp TzyzRymU+lWv+jqvRGcrvaNG42wn+AD5jE4JuOsEdFGSk+bSsytiwrKXdydOUOPv PrOkY/nR1DRIish1qaFdNNLsRXjyVsP9z2pI5B7a62CHbb/jns/4MCk67My+i/D/ VTiqU8dp2cBNVLP3y6wF12+phXDw4lsS8Pgd6jZa87rjGyc6pw+K4UvHdGKxH+r2 Hb/V9xSVU44JY+8xlSD0nsPEN/Y14BxUMIbmVCTg83OhWDZcpxIqu1NYOI14geUE epm/XYaWzjKqdUp/eMoNHXGHgi1VX7+D -----END CERTIFICATE-----Generated at Wed Dec 10 05:07:06 2025 by rpki-client