This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json) Hash identifier: uMCsBA7gWRGLAFBtWWQpWOWUrw6S7rAXk2u2YQNrjNI= Subject key identifier: DB:96:21:E9:3F:87:54:B2:DA:3D:46:C9:72:76:5A:B0:6C:1A:E0:4F Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft Manifest number: 2A Signing time: Wed 03 Dec 2025 05:36:18 +0000 Manifest this update: Wed 03 Dec 2025 05:36:17 +0000 Manifest next update: Wed 10 Dec 2025 05:36:17 +0000 Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: vL4Th/O9SslNnF0KK7mK4wyeffcRF2YGC9ArEFIgHTg=) 2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: EvmYF48T0Vnc/1ZgB1IqFG/4zkh2TOgaxoDK/mhEVBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Dec 3 05:36:17 2025 GMT Not After : Dec 10 05:36:17 2025 GMT Subject: CN=692fcc52-ca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:6c:93:ec:28:0b:47:9c:26:72:93:25:d4: da:78:4c:99:81:95:eb:84:e1:f4:98:46:f7:f7:1f: 03:ff:86:42:7c:a1:05:4d:15:b9:6b:ce:69:15:52: 64:74:d1:66:e0:35:06:a6:20:4f:23:f7:37:80:74: 00:c3:df:c7:d0:95:b5:ac:91:29:d9:0f:2f:7e:a3: d0:bf:8b:04:9b:97:a7:ad:ff:35:00:0c:8f:4d:f5: 3f:9a:b6:fe:1d:0b:fc:f2:58:1e:5c:e8:33:3c:e9: d0:13:5c:c1:da:b2:0e:e6:46:9d:22:f1:e7:68:47: 06:f7:77:0f:75:85:02:55:83:6f:31:90:1d:4f:e2: c3:56:1d:9d:2a:91:7f:40:bc:03:26:51:91:c6:4d: d9:69:39:a1:a1:ee:55:98:69:02:39:46:72:de:11: bf:9c:82:a3:c1:64:e3:b3:1e:7b:f0:0a:20:8b:9e: b9:64:92:2c:f8:da:69:20:1a:ff:b9:aa:aa:cd:1e: 64:7b:d0:35:fe:cc:d6:81:43:d5:ba:77:0b:71:7b: 69:8f:4e:28:aa:bc:06:2d:4d:41:ee:a5:00:26:e5: 4a:ed:5f:20:20:af:98:7a:29:d6:36:dd:20:81:c4: bc:5d:79:4f:60:64:e8:af:5a:76:53:46:88:38:42: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:96:21:E9:3F:87:54:B2:DA:3D:46:C9:72:76:5A:B0:6C:1A:E0:4F X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:02:55:d9:be:a2:6d:f1:09:a8:28:b4:d1:09:e5:ef:1f:c4: 29:b7:14:83:22:46:32:8b:8c:b4:ec:1c:5c:b3:d7:29:33:bb: 71:d0:93:3a:c9:5a:9f:d2:ea:66:53:56:6e:e7:5a:92:3c:a1: 93:7f:51:c4:7b:d7:62:c6:04:d0:63:f7:30:a3:d5:21:93:89: 31:b8:38:c7:4f:30:32:90:4c:01:a7:7f:4e:c1:b4:df:64:85: a7:dd:87:4f:25:87:92:ff:86:b5:8e:90:1d:ff:4d:19:9b:a1: 41:8c:63:6f:04:89:f4:ca:18:44:b0:2e:ac:82:78:c0:da:24: b1:13:5e:51:c7:70:d8:ac:d6:44:f9:83:cd:07:ef:ab:31:60: 13:30:95:d4:9b:dd:b5:be:cd:64:b6:4f:9a:b5:02:5b:72:5a: 31:3f:c0:a4:2b:c2:9f:cb:b7:3b:95:b8:d7:ec:21:35:9e:1b: cf:ca:7b:d2:f7:12:9a:3c:0c:6f:a5:31:15:6d:48:7d:14:da: 19:e9:f5:a2:6f:cb:13:de:b2:95:9f:b7:bb:eb:ce:18:3b:9a: 2f:36:28:3d:01:d4:3e:51:0f:47:2f:44:a2:68:c2:08:82:65: 57:33:c9:06:21:11:50:35:d0:63:1b:0a:21:0d:86:20:e2:8b: 26:23:dd:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNTEyMDMwNTM2MTdaFw0yNTEyMTAwNTM2MTdaMBgxFjAUBgNV BAMTDTY5MmZjYzUyLWNhNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEsmyT7CgLR5wmcpMl1Np4TJmBleuE4fSYRvf3HwP/hkJ8oQVNFblrzmkVUmR0 0WbgNQamIE8j9zeAdADD38fQlbWskSnZDy9+o9C/iwSbl6et/zUADI9N9T+atv4d C/zyWB5c6DM86dATXMHasg7mRp0i8edoRwb3dw91hQJVg28xkB1P4sNWHZ0qkX9A vAMmUZHGTdlpOaGh7lWYaQI5RnLeEb+cgqPBZOOzHnvwCiCLnrlkkiz42mkgGv+5 qqrNHmR70DX+zNaBQ9W6dwtxe2mPTiiqvAYtTUHupQAm5UrtXyAgr5h6KdY23SCB xLxdeU9gZOivWnZTRog4Qj/zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU25Yh6T+H VLLaPUbJcnZasGwa4E8wHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH dGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYCVdm+om3xCagotNEJ5e8fxCm3FIMiRjKLjLTsHFyz1ykzu3HQkzrJ Wp/S6mZTVm7nWpI8oZN/UcR712LGBNBj9zCj1SGTiTG4OMdPMDKQTAGnf07BtN9k hafdh08lh5L/hrWOkB3/TRmboUGMY28EifTKGESwLqyCeMDaJLETXlHHcNis1kT5 g80H76sxYBMwldSb3bW+zWS2T5q1AltyWjE/wKQrwp/LtzuVuNfsITWeG8/Ke9L3 Epo8DG+lMRVtSH0U2hnp9aJvyxPespWft7vrzhg7mi82KD0B1D5RD0cvRKJowgiC ZVczyQYhEVA10GMbCiENhiDiiyYj3aE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:49 2025 by rpki-client