This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: GonlBarf31DuYPvVleZeqFlrygQAIwK/gD+/nDH4xHE= Subject key identifier: 31:86:70:24:20:54:F7:11:88:6E:00:A9:96:2C:C5:17:F8:B7:E2:A8 Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 65 Signing time: Wed 03 Dec 2025 05:15:37 +0000 Manifest this update: Wed 03 Dec 2025 05:15:36 +0000 Manifest next update: Wed 10 Dec 2025 05:15:36 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: YqktBt+NQch4BhegzjHNNcMSmB1lMznyj6Fy24UuMdI=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Dec 3 05:15:36 2025 GMT Not After : Dec 10 05:15:36 2025 GMT Subject: CN=692fc779-5f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:01:d0:80:62:c0:5c:de:83:ce:58:4b:0d: c0:b8:aa:b9:67:f6:77:7a:c7:3d:9e:f0:13:83:3a: 0d:79:2d:92:5c:ce:42:67:51:16:fd:bd:62:b7:80: 5d:bb:af:8d:5a:89:3e:74:28:c5:9e:9b:74:f6:55: ab:74:57:cc:c2:b2:9d:91:63:b0:81:82:97:9d:05: c5:6c:8b:40:88:26:70:1e:c1:aa:7c:c4:78:65:b4: 21:30:8d:83:8e:9b:6e:1c:f4:33:cd:db:e5:cd:58: 35:5e:11:e4:e8:d6:d0:a9:d0:73:53:8d:8b:e4:0f: 7b:09:71:fc:0c:47:2f:5b:a2:2e:f9:cc:f7:ba:de: ac:25:bb:b6:ba:e6:b9:20:8f:c0:7f:d5:80:e6:c9: 13:cd:f1:9b:1d:d8:05:76:26:1f:96:a3:20:44:f3: b6:a8:f8:b4:eb:d9:28:7f:2b:a5:12:60:84:01:eb: 16:1c:6b:09:cc:60:1c:57:9b:17:6f:c4:a2:56:57: bd:7b:cb:4e:e5:34:46:b7:dc:81:72:66:74:de:63: 1f:18:a9:59:79:dd:71:bd:ea:10:9d:44:bb:ae:bd: f1:c8:a4:3d:60:36:72:11:31:06:ca:7e:61:ad:36: 4a:fc:24:49:38:a3:cd:1a:47:e6:52:67:2a:1d:5e: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:70:24:20:54:F7:11:88:6E:00:A9:96:2C:C5:17:F8:B7:E2:A8 X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bc:1e:2d:dd:e9:a0:db:49:b0:1f:62:21:09:5d:a1:ec:a3: bb:78:78:85:c9:f4:d4:69:f0:60:27:86:b4:83:91:88:cc:5d: af:ee:9a:61:d3:97:29:94:7c:2d:4b:ac:a2:fc:c4:8b:a0:ed: 0c:c0:ec:64:b7:a5:43:39:d0:7b:d3:67:3a:aa:48:80:c0:9f: e0:fc:6d:b9:25:fd:03:7e:c1:0c:d1:2f:a6:69:7b:d5:9a:50: 04:04:11:9e:00:98:ea:6b:34:de:48:a2:0a:1d:65:80:8c:68: 48:83:67:72:96:fb:39:a2:48:7b:1e:97:a8:08:9e:dc:ca:2b: 90:2b:67:7d:f1:f7:49:31:d5:67:c2:50:be:ef:b6:05:05:0b: ab:3a:57:06:35:95:d6:ad:f6:be:60:9e:4b:95:d0:2d:7c:9c: 24:a4:45:0d:6c:fe:42:c0:3a:3e:15:0f:95:60:7b:24:8e:d1: f5:71:79:01:7a:da:f7:af:62:91:45:a5:b1:15:64:31:29:c6: 98:ce:be:6e:ad:e3:09:c5:62:8d:7a:3a:c5:99:66:5e:23:9d: 51:3f:7a:e5:39:2a:36:0a:44:0d:48:fe:1b:71:97:06:ed:44: 89:32:be:04:78:ea:47:fd:9d:58:bc:1a:03:46:81:bd:d1:ea: da:4a:05:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTEyMDMwNTE1MzZaFw0yNTEyMTAwNTE1MzZaMBgxFjAUBgNV BAMTDTY5MmZjNzc5LTVmNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQRAHQgGLAXN6DzlhLDcC4qrln9nd6xz2e8BODOg15LZJczkJnURb9vWK3gF27 r41aiT50KMWem3T2Vat0V8zCsp2RY7CBgpedBcVsi0CIJnAewap8xHhltCEwjYOO m24c9DPN2+XNWDVeEeTo1tCp0HNTjYvkD3sJcfwMRy9boi75zPe63qwlu7a65rkg j8B/1YDmyRPN8Zsd2AV2Jh+WoyBE87ao+LTr2Sh/K6USYIQB6xYcawnMYBxXmxdv xKJWV717y07lNEa33IFyZnTeYx8YqVl53XG96hCdRLuuvfHIpD1gNnIRMQbKfmGt Nkr8JEk4o80aR+ZSZyodXvOJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMYZwJCBU 9xGIbgCplizFF/i34qgwHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA28Hi3d6aDbSbAfYiEJXaHso7t4eIXJ9NRp8GAnhrSDkYjMXa/ummHT lymUfC1LrKL8xIug7QzA7GS3pUM50HvTZzqqSIDAn+D8bbkl/QN+wQzRL6Zpe9Wa UAQEEZ4AmOprNN5IogodZYCMaEiDZ3KW+zmiSHsel6gIntzKK5ArZ33x90kx1WfC UL7vtgUFC6s6VwY1ldat9r5gnkuV0C18nCSkRQ1s/kLAOj4VD5VgeySO0fVxeQF6 2vevYpFFpbEVZDEpxpjOvm6t4wnFYo16OsWZZl4jnVE/euU5KjYKRA1I/htxlwbt RIkyvgR46kf9nVi8GgNGgb3R6tpKBUw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:12 2025 by rpki-client