This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: WE51X+g3sg1oM69KY8Zk3UfaKzvKZl8z+tgDWKZKH8w= Subject key identifier: 1D:1B:E3:D1:1B:FC:90:03:BD:58:0C:46:43:F3:30:7B:94:06:36:2E Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0938 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 090A Signing time: Mon 08 Dec 2025 19:32:22 +0000 Manifest this update: Mon 08 Dec 2025 19:32:21 +0000 Manifest next update: Mon 15 Dec 2025 19:32:21 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: xlUl73nbHQzFjVsMkHUOLNZymLjuknbd4y2PX7ZmFcU=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Dec 8 19:32:21 2025 GMT Not After : Dec 15 19:32:21 2025 GMT Subject: CN=693727c6-5585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:5a:e4:1c:14:3f:e3:c6:a6:46:4d:cb:94: 5a:3a:02:0c:39:db:51:35:4b:da:f0:6c:e3:af:ad: 3e:2c:b2:85:08:a0:90:91:ce:eb:1a:05:ed:ee:42: 82:31:83:dd:ac:cf:13:8e:24:7f:a4:8e:14:fd:2f: 54:d8:91:87:9a:44:07:5a:57:1d:c8:25:33:24:7e: 68:b1:20:f4:c2:7e:7a:9f:ab:83:84:b4:a8:7e:da: 2b:df:74:67:79:cf:59:3d:26:63:49:0c:75:a1:29: 64:01:b2:87:d5:74:8d:7b:8b:a7:5d:1b:46:e3:9d: e9:c5:bd:87:ac:50:f1:5f:c9:6e:07:ec:87:fe:55: d3:7c:5e:d2:09:8c:e9:63:80:fd:cf:4d:b7:f6:ca: f4:8e:44:f2:37:ca:ba:bb:54:9b:2e:fb:62:cd:ec: ae:2c:97:12:a5:37:5a:98:dd:35:d1:34:6b:66:9e: 6f:67:e6:99:60:2a:e3:f9:5b:4a:b1:59:c0:08:a7: eb:b6:7f:fd:ca:38:d9:4a:4a:28:05:f1:4b:6b:62: 3e:b1:07:c9:af:e5:89:b3:d0:3f:8a:7b:4e:18:2e: ae:d6:ea:84:e6:eb:5a:08:3b:24:cf:69:f0:53:2f: c3:64:25:f8:2f:d1:7f:9e:83:ae:1e:b5:b8:d9:d7: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:E3:D1:1B:FC:90:03:BD:58:0C:46:43:F3:30:7B:94:06:36:2E X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:03:79:46:83:c3:2f:22:ba:ae:04:65:04:37:39:cd:a8:1a: 4b:28:06:1b:dd:4b:f8:8a:f5:f0:bb:7a:11:12:cb:c7:74:95: 83:d4:98:72:7c:a0:5f:f5:a1:b8:fa:24:a1:78:41:46:6b:de: 32:8d:60:55:a1:2f:d8:45:a6:24:73:e4:ad:f6:ad:c9:57:c9: 41:ed:45:59:0b:5c:6b:9f:eb:3b:5a:95:c8:cb:29:7b:93:86: d8:50:9c:7a:4f:a4:40:67:eb:1c:ef:03:db:4e:04:ec:28:d5: 7d:57:15:53:83:3a:de:e7:45:8a:ee:60:ce:a7:92:2c:bc:dd: e2:d0:21:89:1b:f7:00:5f:88:16:57:43:dc:e4:78:35:04:42: 78:b1:38:c8:4f:74:f6:d4:32:5f:2b:04:e6:3a:e8:6f:56:ed: 14:1e:da:57:d6:42:c0:b0:b2:9d:e6:96:77:8f:c4:06:c9:94: 7e:91:ad:e1:67:8e:04:6b:de:25:c3:f4:8c:ab:52:bb:bd:ba: 06:49:89:1d:b1:f6:d2:f4:69:aa:50:52:8f:2a:fa:1b:d3:87: b8:3d:16:76:ad:65:41:0b:b5:11:63:fc:6d:4f:8e:97:81:1e: de:75:95:1c:db:1d:4e:5c:dc:55:e2:72:bb:3f:56:09:8a:33: 5d:59:63:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUxMjA4MTkzMjIxWhcNMjUxMjE1MTkzMjIxWjAYMRYwFAYD VQQDEw02OTM3MjdjNi01NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneBa5BwUP+PGpkZNy5RaOgIMOdtRNUva8Gzjr60+LLKFCKCQkc7rGgXt7kKC MYPdrM8TjiR/pI4U/S9U2JGHmkQHWlcdyCUzJH5osSD0wn56n6uDhLSoftor33Rn ec9ZPSZjSQx1oSlkAbKH1XSNe4unXRtG453pxb2HrFDxX8luB+yH/lXTfF7SCYzp Y4D9z0239sr0jkTyN8q6u1SbLvtizeyuLJcSpTdamN010TRrZp5vZ+aZYCrj+VtK sVnACKfrtn/9yjjZSkooBfFLa2I+sQfJr+WJs9A/intOGC6u1uqE5utaCDskz2nw Uy/DZCX4L9F/noOuHrW42dcerQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0b49Eb /JADvVgMRkPzMHuUBjYuMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuA3lGg8MvIrquBGUENznNqBpLKAYb3Uv4ivXwu3oREsvHdJWD1Jhy fKBf9aG4+iSheEFGa94yjWBVoS/YRaYkc+St9q3JV8lB7UVZC1xrn+s7WpXIyyl7 k4bYUJx6T6RAZ+sc7wPbTgTsKNV9VxVTgzre50WK7mDOp5IsvN3i0CGJG/cAX4gW V0Pc5Hg1BEJ4sTjIT3T21DJfKwTmOuhvVu0UHtpX1kLAsLKd5pZ3j8QGyZR+ka3h Z44Ea94lw/SMq1K7vboGSYkdsfbS9GmqUFKPKvob04e4PRZ2rWVBC7URY/xtT46X gR7edZUc2x1OXNxV4nK7P1YJijNdWWOm -----END CERTIFICATE-----Generated at Wed Dec 10 12:52:31 2025 by rpki-client