This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: 39BCk5X5cyibaRaV0cnEcHl59AdOB+vBBylDnSHJqT0= Subject key identifier: 37:B2:87:4D:05:8B:86:F0:A8:04:1D:28:36:C0:6B:A6:C4:EE:74:DB Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: F6 Signing time: Sun 07 Dec 2025 03:33:55 +0000 Manifest this update: Sun 07 Dec 2025 03:33:55 +0000 Manifest next update: Sun 14 Dec 2025 03:33:55 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: 0FdJy1sKsdHJFtTV1u/vx4crpC3TqAUztsNGj0+XPIY=) 2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=) 3: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Dec 7 03:33:55 2025 GMT Not After : Dec 14 03:33:55 2025 GMT Subject: CN=6934f5a3-6362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:90:c9:22:58:be:b2:28:ba:1f:9a:9e:45: c6:60:d5:01:ac:16:a5:32:13:07:4e:72:cd:ca:76: 70:91:32:fd:40:80:67:7b:7c:ed:a4:61:ea:69:97: a8:14:99:e3:76:44:e4:dc:08:91:c4:1e:c4:68:88: 45:9d:e9:5b:60:73:e3:4c:96:49:a5:67:86:a0:19: d3:59:cb:99:46:45:fb:0e:0d:bf:7f:bd:29:f0:33: 14:25:66:af:fc:8e:11:9a:fe:9d:cb:db:d0:d9:8f: 33:81:0f:dc:a3:f0:30:f8:1d:36:14:cd:ec:05:96: 77:9c:89:aa:55:46:fc:4b:bc:21:8f:4f:2c:20:99: fd:9f:a6:ff:2f:a2:5f:d4:f2:ee:e3:02:80:34:e5: c3:bf:f5:d0:33:d8:49:d8:92:e9:3e:1b:6f:8a:a3: a9:6b:ef:5f:37:b3:90:01:6d:d7:35:e9:14:b3:b4: d8:c7:d0:30:4e:6a:ef:e4:62:84:0e:81:06:e5:9c: aa:a3:42:0b:4b:fa:e6:02:81:d9:4e:bd:75:53:c2: ac:b4:bf:8b:fd:7b:eb:4c:b2:04:38:52:51:22:b9: c6:60:d5:59:79:da:44:60:07:cd:10:43:b4:5b:77: bd:b8:b1:6a:bf:32:85:c0:ba:5a:43:50:f8:37:99: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B2:87:4D:05:8B:86:F0:A8:04:1D:28:36:C0:6B:A6:C4:EE:74:DB X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3a:e7:d7:a0:d4:01:41:fa:fd:e4:2d:eb:dd:0b:68:c3:07: 3f:54:fc:df:63:43:5d:ac:21:4b:fd:7c:60:06:22:72:e1:0a: d2:f9:03:e8:b5:7b:7c:c9:9e:95:eb:1c:35:f9:9e:c9:8a:ef: cc:df:f8:28:e8:2e:57:3f:ef:8d:1d:fb:82:62:65:20:d9:ee: 97:4a:37:77:c8:91:00:16:03:55:a7:26:d1:cc:16:87:8e:7b: 16:32:fd:3c:e9:14:68:88:cf:c5:36:72:c7:b9:26:89:b6:46: c4:45:7e:02:01:86:2f:13:13:92:1f:cb:5b:87:24:1d:ec:a1: 6c:8b:7f:65:de:9b:3e:bf:6f:73:c7:28:6a:09:66:1c:da:06: 21:1b:d1:b1:c0:aa:5a:74:2a:5d:cd:7b:73:dd:ae:cb:ce:6c: 34:e7:e8:5e:a3:34:6e:6c:c4:85:1e:6c:f1:c9:f1:49:44:92: f9:fc:57:6c:51:96:0f:5e:cd:fa:2e:75:e3:93:1c:1f:52:5e: ba:41:aa:19:96:86:11:1a:5e:96:da:a3:77:ad:0d:5c:be:0d: 10:c9:aa:64:2c:fc:f3:cc:f2:1e:89:4a:7b:ee:cc:82:33:b9: 1f:0f:31:81:5e:4b:f8:81:81:88:a2:2c:de:90:23:38:a5:49: 22:05:a4:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUxMjA3MDMzMzU1WhcNMjUxMjE0MDMzMzU1WjAYMRYwFAYD VQQDEw02OTM0ZjVhMy02MzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmKQySJYvrIouh+ankXGYNUBrBalMhMHTnLNynZwkTL9QIBne3ztpGHqaZeo FJnjdkTk3AiRxB7EaIhFnelbYHPjTJZJpWeGoBnTWcuZRkX7Dg2/f70p8DMUJWav /I4Rmv6dy9vQ2Y8zgQ/co/Aw+B02FM3sBZZ3nImqVUb8S7whj08sIJn9n6b/L6Jf 1PLu4wKANOXDv/XQM9hJ2JLpPhtviqOpa+9fN7OQAW3XNekUs7TYx9AwTmrv5GKE DoEG5Zyqo0ILS/rmAoHZTr11U8KstL+L/XvrTLIEOFJRIrnGYNVZedpEYAfNEEO0 W3e9uLFqvzKFwLpaQ1D4N5n6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeyh00F i4bwqAQdKDbAa6bE7nTbMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOufXoNQBQfr95C3r3Qtowwc/VPzfY0NdrCFL/XxgBiJy4QrS+QPo tXt8yZ6V6xw1+Z7Jiu/M3/go6C5XP++NHfuCYmUg2e6XSjd3yJEAFgNVpybRzBaH jnsWMv086RRoiM/FNnLHuSaJtkbERX4CAYYvExOSH8tbhyQd7KFsi39l3ps+v29z xyhqCWYc2gYhG9GxwKpadCpdzXtz3a7Lzmw05+heozRubMSFHmzxyfFJRJL5/Fds UZYPXs36LnXjkxwfUl66QaoZloYRGl6W2qN3rQ1cvg0QyapkLPzzzPIeiUp77syC M7kfDzGBXkv4gYGIoizekCM4pUkiBaTZ -----END CERTIFICATE-----Generated at Mon Dec 8 14:23:46 2025 by rpki-client