This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: tHaBFKOI5O7dzGM5YBKGypiNooejOdd7RvM/EZb+vvk= Subject key identifier: D5:18:A5:F1:9F:B4:B4:AC:08:04:72:7B:11:CD:AC:30:0D:86:4D:69 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0680 Signing time: Thu 18 Dec 2025 21:56:57 +0000 Manifest this update: Thu 18 Dec 2025 21:56:57 +0000 Manifest next update: Thu 25 Dec 2025 21:56:57 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: s4ufA0lxdp78X6DYr4713oh1runbGLjDlLtISWXk3Oo=) 2: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 3: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 4: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) 5: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Dec 18 21:56:57 2025 GMT Not After : Dec 25 21:56:57 2025 GMT Subject: CN=694478a9-24de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:84:f2:d1:71:34:2d:65:27:56:1f:30:19: 30:af:4f:f1:d5:e0:01:69:8e:39:88:5d:ca:19:c1: 9e:84:1e:9a:f5:9b:e7:a6:5b:1c:71:c8:9a:93:33: 78:29:df:70:e7:bb:3a:9c:41:71:77:7c:71:00:e2: 3f:a0:bc:e1:a8:92:f3:dc:9f:81:e9:c7:02:aa:ed: 98:00:f3:b0:4c:95:22:f6:d7:39:da:6f:79:70:4a: ef:38:a9:e7:94:26:84:c1:2b:8a:bf:a9:93:52:fe: a5:f7:22:72:df:c5:8b:19:73:a4:b1:cf:fb:c6:cc: 3e:35:93:fe:7c:9c:35:d0:8d:94:6f:0d:b5:5b:df: 63:92:59:7e:10:d5:d2:66:a9:19:ff:53:a3:b5:a0: 2a:a0:9a:db:34:66:5c:20:21:5d:d0:5f:b9:cd:a9: 9b:98:a6:15:b2:1e:35:77:ee:18:dd:82:16:e6:b2: f9:e6:a1:af:a6:f9:ad:47:dd:71:0b:1d:96:fb:1f: 96:62:1e:18:06:33:45:49:a9:26:21:a4:8b:a3:61: 6a:32:88:60:24:9a:56:4e:89:89:74:ae:3a:c2:84: b0:89:81:da:49:d9:07:b4:8c:94:cb:93:4d:ad:11: 35:72:5e:75:62:0b:cd:33:59:09:79:e7:79:f2:20: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:18:A5:F1:9F:B4:B4:AC:08:04:72:7B:11:CD:AC:30:0D:86:4D:69 X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:a3:86:3f:ce:a4:ee:8e:7e:ab:1b:ea:98:ea:10:dd:e2: a6:f0:78:05:a9:d4:1e:80:39:d7:05:5e:c6:4c:f7:01:21:a9: 0f:83:63:1b:94:bd:bb:2d:20:ff:54:b3:9c:45:95:7d:82:05: 9c:73:07:2a:9f:d8:47:30:3a:5d:c8:ec:66:dd:90:0c:4c:69: 97:a0:ff:b3:20:a3:60:0d:52:f0:be:8f:03:ed:1c:f1:74:75: 8c:df:b2:7d:a5:05:57:a4:4d:87:f2:db:31:e1:8f:65:51:c7: 4e:80:00:25:30:43:f5:c8:8b:6a:10:f6:31:86:d0:3b:84:01: f5:e3:b0:3c:5b:7a:67:1c:ad:0b:40:2f:e4:05:38:84:f4:2d: d9:8e:fc:4b:dd:2b:8e:bd:b0:06:e3:70:bd:0e:01:1c:b6:a0: 45:a1:fb:70:49:4c:1e:1e:e7:29:36:06:b3:3b:ce:6a:e2:0d: 08:d6:32:6a:9a:23:21:b1:86:fa:22:3f:84:16:dd:7f:a1:91: 26:3b:80:2b:4c:74:28:33:d8:d3:f5:4c:e7:91:1c:3f:2f:2c: ac:a2:99:00:e9:2b:8c:da:6c:e3:8b:06:0f:8d:3f:06:97:de: cd:8b:0b:28:3d:f6:a6:c5:89:da:6b:83:18:d4:1e:fd:65:db: 75:b7:55:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUxMjE4MjE1NjU3WhcNMjUxMjI1MjE1NjU3WjAYMRYwFAYD VQQDDA02OTQ0NzhhOS0yNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGmE8tFxNC1lJ1YfMBkwr0/x1eABaY45iF3KGcGehB6a9ZvnplsccciakzN4 Kd9w57s6nEFxd3xxAOI/oLzhqJLz3J+B6ccCqu2YAPOwTJUi9tc52m95cErvOKnn lCaEwSuKv6mTUv6l9yJy38WLGXOksc/7xsw+NZP+fJw10I2Ubw21W99jkll+ENXS ZqkZ/1OjtaAqoJrbNGZcICFd0F+5zambmKYVsh41d+4Y3YIW5rL55qGvpvmtR91x Cx2W+x+WYh4YBjNFSakmIaSLo2FqMohgJJpWTomJdK46woSwiYHaSdkHtIyUy5NN rRE1cl51YgvNM1kJeed58iCUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUYpfGf tLSsCARyexHNrDANhk1pMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH0KOGP86k7o5+qxvqmOoQ3eKm8HgFqdQegDnXBV7GTPcBIakPg2Mb lL27LSD/VLOcRZV9ggWccwcqn9hHMDpdyOxm3ZAMTGmXoP+zIKNgDVLwvo8D7Rzx dHWM37J9pQVXpE2H8tsx4Y9lUcdOgAAlMEP1yItqEPYxhtA7hAH147A8W3pnHK0L QC/kBTiE9C3ZjvxL3SuOvbAG43C9DgEctqBFoftwSUweHucpNgazO85q4g0I1jJq miMhsYb6Ij+EFt1/oZEmO4ArTHQoM9jT9UznkRw/LyysopkA6SuM2mzjiwYPjT8G l97NiwsoPfamxYnaa4MY1B79Zdt1t1X3 -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:52 2025 by rpki-client