This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: CKn3e7XUC4kHJV3oupF91YcfUWF93k0hvmaosc/kMM4= Subject key identifier: 85:C9:D0:73:1E:EB:4F:D2:C4:EB:C2:28:00:FB:C2:2A:4B:62:4D:97 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 017A Signing time: Thu 27 Nov 2025 01:54:46 +0000 Manifest this update: Thu 27 Nov 2025 01:54:46 +0000 Manifest next update: Thu 04 Dec 2025 01:54:46 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: a6AFT+HXdUa918933pjw2Dj4ANz/R0J7rm0HfjgxofQ=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 01:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Nov 27 01:54:46 2025 GMT Not After : Dec 4 01:54:46 2025 GMT Subject: CN=6927af66-11ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:03:2d:b4:2e:78:b2:2d:c3:a7:a3:26:20: c6:80:4e:22:69:aa:bb:4e:e4:cf:22:8f:49:f3:c1: 77:73:b6:9d:0a:14:79:8f:a0:0c:de:69:3c:81:e9: 74:b7:5b:44:4f:d4:dc:56:77:64:9e:3f:c8:2c:df: ab:f9:1f:ea:9f:8f:78:fa:68:05:d2:70:1e:d7:60: b6:80:a5:6c:c4:6f:46:3a:9d:13:e0:99:39:fa:de: 64:e0:ef:19:e0:e1:9d:d4:91:66:18:90:5e:cc:92: a6:99:91:52:f7:db:d3:15:02:0e:d8:86:d1:cc:33: ca:5a:10:9b:2d:00:99:a2:73:80:31:8c:66:9a:31: 7b:3b:23:1b:7a:47:09:9d:54:50:2f:36:ad:79:db: bd:28:89:68:67:82:d2:3e:5b:9e:de:83:8f:a4:39: ba:69:78:0d:79:1d:99:f5:cc:88:d2:70:45:d0:2c: 1b:ca:61:5d:83:5b:26:1a:b4:6d:a5:7a:73:a0:e5: 06:7c:93:a6:0a:11:50:af:0b:86:70:9c:f6:8f:7f: 65:8a:4e:3c:e3:34:67:8e:ad:ea:45:cf:9d:d8:40: d4:43:a2:5a:07:cd:12:6f:00:37:29:f3:e4:ed:af: d5:4a:f9:5f:de:a8:ae:bf:88:e4:31:e4:93:78:b9: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C9:D0:73:1E:EB:4F:D2:C4:EB:C2:28:00:FB:C2:2A:4B:62:4D:97 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:95:8a:3d:58:f3:d8:6b:13:df:4c:09:db:b3:21:cb:b8:ab: fd:18:72:35:f3:c6:67:29:6e:70:01:7f:73:17:62:61:2e:4e: 8d:57:e8:d7:e8:9c:d3:bf:c3:40:cb:f9:e6:f0:51:89:48:73: 9b:ad:2a:70:cb:54:da:85:c6:13:25:3d:3e:59:8e:0b:c7:23: 40:2b:6e:a7:96:c9:f7:eb:6f:a7:b0:65:ae:31:63:af:75:e5: 4a:a5:96:6a:da:42:2f:b7:cd:a1:91:8e:77:fc:96:4c:ac:65: 75:b1:02:21:86:26:d5:fc:57:4c:d7:84:89:61:a4:99:ec:e4: d5:97:86:5c:a8:95:e6:be:79:f9:74:b0:da:de:4d:ed:2c:03: 4b:39:03:5c:c4:c8:54:b9:08:66:cd:21:6d:cb:dd:01:59:f9: cf:51:b0:d1:9a:f7:c2:10:4e:9f:79:8b:17:c0:ff:58:51:a4: c8:29:07:e7:21:e8:b8:92:a9:cd:89:d6:6e:b4:87:af:32:e2: de:0c:b5:23:c3:8e:5b:6b:f9:44:c4:6d:8a:a3:6f:b7:92:a2: c9:b7:d7:c6:bb:87:86:f1:c3:10:f2:c9:32:db:55:d5:13:a0: 7e:d3:4d:16:5c:49:36:10:e3:ee:70:1c:9b:d9:a7:ca:40:eb: 3d:f6:df:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUxMTI3MDE1NDQ2WhcNMjUxMjA0MDE1NDQ2WjAYMRYwFAYD VQQDEw02OTI3YWY2Ni0xMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulYDLbQueLItw6ejJiDGgE4iaaq7TuTPIo9J88F3c7adChR5j6AM3mk8gel0 t1tET9TcVndknj/ILN+r+R/qn494+mgF0nAe12C2gKVsxG9GOp0T4Jk5+t5k4O8Z 4OGd1JFmGJBezJKmmZFS99vTFQIO2IbRzDPKWhCbLQCZonOAMYxmmjF7OyMbekcJ nVRQLzatedu9KIloZ4LSPlue3oOPpDm6aXgNeR2Z9cyI0nBF0CwbymFdg1smGrRt pXpzoOUGfJOmChFQrwuGcJz2j39lik484zRnjq3qRc+d2EDUQ6JaB80SbwA3KfPk 7a/VSvlf3qiuv4jkMeSTeLkMiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXJ0HMe 60/SxOvCKAD7wipLYk2XMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjlYo9WPPYaxPfTAnbsyHLuKv9GHI188ZnKW5wAX9zF2JhLk6NV+jX 6JzTv8NAy/nm8FGJSHObrSpwy1TahcYTJT0+WY4LxyNAK26nlsn362+nsGWuMWOv deVKpZZq2kIvt82hkY53/JZMrGV1sQIhhibV/FdM14SJYaSZ7OTVl4ZcqJXmvnn5 dLDa3k3tLANLOQNcxMhUuQhmzSFty90BWfnPUbDRmvfCEE6feYsXwP9YUaTIKQfn Iei4kqnNidZutIevMuLeDLUjw45ba/lExG2Ko2+3kqLJt9fGu4eG8cMQ8sky21XV E6B+000WXEk2EOPucByb2afKQOs99t9l -----END CERTIFICATE-----Generated at Fri Nov 28 05:45:17 2025 by rpki-client