This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: 2ROW+L+G6uwmrMUOnOhLhgRlgzhgqSjmHGTizutVI40= Subject key identifier: 46:43:F8:51:3C:8E:21:83:84:DE:B2:18:44:6C:DE:DF:DA:EB:CE:98 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: DB Signing time: Tue 09 Dec 2025 03:38:39 +0000 Manifest this update: Tue 09 Dec 2025 03:38:39 +0000 Manifest next update: Tue 16 Dec 2025 03:38:39 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: 6qry6bRkl81+YtwWyqNOmV5ApsbKdA2sreKcfdjO2HA=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: p2gyBS69XXDIgLCd40czO4O+CF2ezvi2SVAYuyIvCP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 03:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Dec 9 03:38:39 2025 GMT Not After : Dec 16 03:38:39 2025 GMT Subject: CN=693799bf-7bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:20:cb:af:ba:ac:14:05:bf:79:33:6c:e4: ba:8f:c9:c3:a6:66:71:86:49:dc:ea:1e:f9:cd:78: a6:9e:21:e9:cf:41:2e:e0:8f:92:16:b8:7e:ec:06: 6a:d4:60:bf:b4:05:2b:9a:81:19:6e:ca:d6:a6:2a: 68:13:23:b9:a3:76:9b:fa:46:cc:6e:77:76:d7:6b: 93:e8:4a:86:6c:eb:a5:47:33:0d:3f:ec:d1:9e:74: 92:aa:d1:d0:b4:05:02:75:6c:a1:f2:bd:19:e9:8c: 40:c9:76:00:ca:2d:ea:71:ff:0c:b9:f6:cf:d2:d6: 8c:e1:d1:52:8b:d6:9d:ee:52:3c:d4:39:dc:b0:0a: 1b:d4:dd:1f:cd:56:1d:6f:71:88:c2:9a:f5:6e:0a: df:8d:6b:17:71:50:b8:a1:0e:ff:b0:24:75:73:6c: 98:89:44:3a:a1:69:ec:e7:e2:47:34:d2:e6:77:10: c2:2b:0d:1b:4c:37:93:a2:00:4f:9b:a1:74:b0:c9: d7:a1:e4:61:66:90:e7:e8:8d:e7:87:46:2b:62:22: 14:94:77:9e:42:70:9c:7f:f0:58:b9:d9:83:63:00: 93:35:d1:5a:c1:5f:0e:8d:23:c8:7e:b9:28:d9:c5: 28:c8:db:37:a6:1d:69:99:bc:88:73:d5:ff:0a:17: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:43:F8:51:3C:8E:21:83:84:DE:B2:18:44:6C:DE:DF:DA:EB:CE:98 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ec:38:1d:6b:80:e7:aa:d8:cb:f1:4b:11:1c:4a:56:57:74: 42:f4:38:87:2c:ea:20:4c:a9:01:13:7d:7b:16:3f:bf:3c:09: bf:27:d6:8b:86:7f:52:27:ba:57:e6:e2:31:54:4e:c3:4f:a5: 96:40:6a:3f:ac:eb:f7:c8:d2:ad:6e:ff:86:49:a5:99:f8:69: 45:83:40:de:82:a4:ec:d9:31:65:c5:53:db:94:86:bf:ca:06: f7:dc:e9:14:2c:d3:c3:02:bb:b6:c0:cb:aa:23:2d:27:2a:64: 09:0e:67:f1:00:e0:82:da:cb:65:b2:08:22:de:b0:dc:3c:8c: 58:00:17:12:4b:5f:08:81:e8:b4:70:c9:11:c0:85:2c:6c:84: a9:03:d1:18:1f:d5:44:71:fe:68:03:41:a0:f4:23:2d:34:71: 7d:25:bc:7f:88:18:04:36:b2:35:19:23:66:87:38:95:65:67: ee:e7:eb:35:42:4c:72:a3:97:d2:e4:25:eb:e1:67:ef:58:26: 09:2a:de:e8:6a:ca:b3:2f:b9:d9:dc:18:ab:c2:54:81:b9:3b: cb:e2:b9:c8:68:33:b2:ee:ff:3e:5a:39:ca:36:a0:1a:82:36: b6:45:4b:dc:98:f9:fd:71:f3:b1:2e:de:c7:69:41:5d:8b:30: 78:4f:7c:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUxMjA5MDMzODM5WhcNMjUxMjE2MDMzODM5WjAYMRYwFAYD VQQDEw02OTM3OTliZi03YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkggy6+6rBQFv3kzbOS6j8nDpmZxhknc6h75zXimniHpz0Eu4I+SFrh+7AZq 1GC/tAUrmoEZbsrWpipoEyO5o3ab+kbMbnd212uT6EqGbOulRzMNP+zRnnSSqtHQ tAUCdWyh8r0Z6YxAyXYAyi3qcf8MufbP0taM4dFSi9ad7lI81DncsAob1N0fzVYd b3GIwpr1bgrfjWsXcVC4oQ7/sCR1c2yYiUQ6oWns5+JHNNLmdxDCKw0bTDeTogBP m6F0sMnXoeRhZpDn6I3nh0YrYiIUlHeeQnCcf/BYudmDYwCTNdFawV8OjSPIfrko 2cUoyNs3ph1pmbyIc9X/CheUCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZD+FE8 jiGDhN6yGERs3t/a686YMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV7Dgda4DnqtjL8UsRHEpWV3RC9DiHLOogTKkBE317Fj+/PAm/J9aL hn9SJ7pX5uIxVE7DT6WWQGo/rOv3yNKtbv+GSaWZ+GlFg0DegqTs2TFlxVPblIa/ ygb33OkULNPDAru2wMuqIy0nKmQJDmfxAOCC2stlsggi3rDcPIxYABcSS18Igei0 cMkRwIUsbISpA9EYH9VEcf5oA0Gg9CMtNHF9Jbx/iBgENrI1GSNmhziVZWfu5+s1 Qkxyo5fS5CXr4WfvWCYJKt7oasqzL7nZ3BirwlSBuTvL4rnIaDOy7v8+WjnKNqAa gja2RUvcmPn9cfOxLt7HaUFdizB4T3yD -----END CERTIFICATE-----Generated at Wed Dec 10 05:56:37 2025 by rpki-client