This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft File: g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json) Hash identifier: zIk82Fc7sszKzwdzd22XrBcbcvAqsLXDpB8JujO2bgI= Subject key identifier: ED:24:3E:50:74:1B:35:9F:20:66:25:E1:F3:30:B6:35:72:15:98:D1 Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft Manifest number: 011B Signing time: Wed 03 Dec 2025 03:11:56 +0000 Manifest this update: Wed 03 Dec 2025 03:11:55 +0000 Manifest next update: Wed 10 Dec 2025 03:11:55 +0000 Files and hashes: 1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: 2Wuptrw5/mFIaCU/raAddYWGax+ygWww8Ym1qbK3ls4=) 2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: YulPvT0hM25YZIDv5KjG+XciSXVC4OQirSgi0X2f6Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF Validity Not Before: Dec 3 03:11:55 2025 GMT Not After : Dec 10 03:11:55 2025 GMT Subject: CN=692faa7b-b752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:41:d1:e5:07:64:80:5a:16:c9:c1:e1:06: 39:f4:c7:42:34:9a:77:13:61:e8:a7:5e:f6:5b:2e: 25:e7:5a:dd:86:3b:4e:16:45:de:0b:4a:32:75:fe: 7c:29:70:a2:f5:ee:70:dc:cc:8c:10:75:7a:cd:92: b7:58:ff:04:c1:ae:26:47:e6:c4:20:2b:a6:7c:65: f3:89:e0:fb:f3:e6:44:37:92:9f:9f:2b:8a:93:94: 8f:7b:92:56:4b:95:aa:45:89:eb:57:46:12:07:d1: b9:c8:a6:6b:44:f9:22:6a:bf:d9:3d:57:c2:a4:66: af:30:2c:d3:4d:f3:0c:a9:7e:c1:3b:9d:b6:99:2c: 6d:c8:16:4f:e8:a6:21:26:3d:75:31:21:f1:7d:33: 9f:87:5e:d1:6a:00:b0:c0:7e:05:2f:93:ca:bf:bd: 0f:15:1b:8e:46:31:8f:47:a7:4e:bb:2b:af:60:04: aa:f2:4e:97:99:53:3f:23:5f:f0:a4:1b:8f:70:66: 1f:04:d5:43:2e:17:ce:09:51:d6:70:af:52:e2:9a: bf:bc:ef:f4:66:27:b7:04:1c:8d:73:c9:38:e7:98: 5d:e1:d8:c7:b5:60:61:60:ab:b6:71:3b:f8:2e:c3: 81:e8:b3:60:e0:66:31:b1:87:c3:e4:c2:bb:9c:9d: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:24:3E:50:74:1B:35:9F:20:66:25:E1:F3:30:B6:35:72:15:98:D1 X509v3 Authority Key Identifier: keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e2:14:19:10:26:b3:ce:4f:75:b9:a4:67:0f:c6:ee:04:e7: 1c:83:bf:d0:b2:94:3a:5c:10:ad:f1:91:fc:aa:9b:2c:6c:39: e6:b0:09:dc:55:a7:d0:db:63:14:85:98:96:48:b5:66:a0:2b: 25:d3:f0:cd:0c:63:c1:31:23:f9:45:34:b9:61:13:f5:03:35: af:cd:e0:fd:de:ea:6e:35:46:0e:d2:d1:0e:cb:e6:2d:0c:6d: ed:e5:17:f8:1e:a5:72:fb:29:25:08:24:8e:47:a7:42:66:0b: 12:e8:1d:26:75:19:d8:ae:89:74:f0:6e:54:1a:25:17:e5:29: da:c8:51:b1:3d:fd:fd:6e:1f:60:24:af:53:9d:43:f9:54:8b: 4d:eb:01:52:0b:24:bb:bb:f9:9d:73:ea:cf:8c:9d:62:04:aa: 32:03:78:d1:57:f7:38:5a:7d:d3:5e:2c:e8:47:5e:3f:e6:a9: 95:ee:17:48:65:2f:7e:1c:2e:15:7c:2b:ab:c7:a0:82:76:88: 21:07:cf:18:db:42:3f:8a:5e:5c:33:ad:96:72:59:40:82:9f: 4d:f2:eb:3c:af:00:8d:3e:ee:28:69:5a:e8:e7:54:cf:1c:2a: e7:50:88:47:57:81:60:ae:53:1d:56:bf:38:ad:60:2c:e1:25: f1:5f:b7:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDgzQzkwMTUxQkUxNzgyMTRGQzE2NzU4MzM0RDNCNkQ1 Mjc3QTNDQkYwHhcNMjUxMjAzMDMxMTU1WhcNMjUxMjEwMDMxMTU1WjAYMRYwFAYD VQQDEw02OTJmYWE3Yi1iNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl1B0eUHZIBaFsnB4QY59MdCNJp3E2Hop172Wy4l51rdhjtOFkXeC0oydf58 KXCi9e5w3MyMEHV6zZK3WP8Ewa4mR+bEICumfGXzieD78+ZEN5KfnyuKk5SPe5JW S5WqRYnrV0YSB9G5yKZrRPkiar/ZPVfCpGavMCzTTfMMqX7BO522mSxtyBZP6KYh Jj11MSHxfTOfh17RagCwwH4FL5PKv70PFRuORjGPR6dOuyuvYASq8k6XmVM/I1/w pBuPcGYfBNVDLhfOCVHWcK9S4pq/vO/0Zie3BByNc8k455hd4djHtWBhYKu2cTv4 LsOB6LNg4GYxsYfD5MK7nJ2GCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0kPlB0 GzWfIGYl4fMwtjVyFZjRMB8GA1UdIwQYMBaAFIPJAVG+F4IU/BZ1gzTTttUnejy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS81QTExNkJBQTFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9nOGtCVWI0WGdoVDhGbldETk5PMjFTZDZQ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c4a0JVYjRYZ2hUOEZuV0ROTk8yMVNkNlBMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS81QTExNkJBQTFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9nOGtCVWI0WGdo VDhGbldETk5PMjFTZDZQTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT4hQZECazzk91uaRnD8buBOccg7/QspQ6XBCt8ZH8qpssbDnmsAnc VafQ22MUhZiWSLVmoCsl0/DNDGPBMSP5RTS5YRP1AzWvzeD93upuNUYO0tEOy+Yt DG3t5Rf4HqVy+yklCCSOR6dCZgsS6B0mdRnYrol08G5UGiUX5SnayFGxPf39bh9g JK9TnUP5VItN6wFSCyS7u/mdc+rPjJ1iBKoyA3jRV/c4Wn3TXizoR14/5qmV7hdI ZS9+HC4VfCurx6CCdoghB88Y20I/il5cM62WcllAgp9N8us8rwCNPu4oaVro51TP HCrnUIhHV4FgrlMdVr84rWAs4SXxX7dj -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:09 2025 by rpki-client