This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: qZv/Jaroi2smtJWwspHuzX6kMbsirnjjSP14/5+qG60= Subject key identifier: 5B:A3:90:59:73:D2:1C:A8:27:A7:9B:5A:4C:7E:F6:D2:2E:E0:91:11 Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 355C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 3528 Signing time: Wed 24 Dec 2025 14:15:50 +0000 Manifest this update: Wed 24 Dec 2025 14:15:49 +0000 Manifest next update: Wed 31 Dec 2025 14:15:49 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: e9LJo8Yv7nFoe5rb2hqLq53KbNLJUern2b7GoCeqfYI=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: BjBw06wqcfGvhB/HNG/x6XCnBoMAhTux2IYRf4xqDUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13660 (0x355c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: Dec 24 14:15:49 2025 GMT Not After : Dec 31 14:15:49 2025 GMT Subject: CN=694bf596-d3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:21:32:a6:e8:32:1d:29:37:12:f6:64:e4: f8:38:d4:58:66:4b:fc:cf:a8:8d:e4:fc:21:98:99: 0b:e8:0c:43:c7:4f:bd:62:bf:39:02:cb:e5:2a:8a: ae:2e:7b:cc:44:c7:bf:ec:0c:49:63:9c:80:95:1c: 84:5b:af:4e:03:2a:83:ba:e6:d3:6d:9a:66:4e:a3: 6a:df:8e:fd:c0:37:55:2b:e5:ad:26:52:e1:fd:1f: cf:40:a5:9c:35:5b:c6:9d:a8:74:55:6a:5c:ee:03: 42:52:77:99:8a:cf:e5:0d:b9:2c:61:39:aa:9a:31: 04:59:b4:89:8f:f1:5b:8e:22:e8:9e:00:ef:00:31: 12:16:d0:b2:53:19:9e:e7:a2:e8:cb:e5:56:9c:90: 88:dc:8b:86:6f:0c:c5:6c:29:0b:c3:5a:b1:90:7c: 60:1c:68:af:69:2e:9a:6d:6b:cf:29:3a:93:3a:9f: 4f:0f:36:49:e7:3a:ec:ea:a2:d5:e5:72:e5:e1:a6: 4b:c9:6c:16:ec:d1:23:03:f4:3a:9c:b9:6b:fe:35: ea:60:06:b1:c7:8d:cb:c5:3c:fb:9b:11:a1:3c:0a: 98:06:a5:9b:81:a2:85:0d:de:ac:db:20:ef:74:bb: 85:3c:b8:a0:72:29:3d:a7:ee:aa:7e:0d:df:cc:c2: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:90:59:73:D2:1C:A8:27:A7:9B:5A:4C:7E:F6:D2:2E:E0:91:11 X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:63:c2:a3:bf:c8:b5:b7:8b:e5:9f:93:a4:6e:d3:f7:c9:71: e8:76:81:b0:85:68:13:74:e9:c9:f6:ae:90:69:dc:72:1a:56: 73:5a:9a:60:b2:58:23:7f:65:d7:29:ab:c0:9c:fd:e6:18:95: c0:4e:e8:6a:63:08:80:e7:76:95:54:16:68:88:bf:9a:85:b4: 33:18:6d:e4:88:25:45:21:73:b9:b3:6c:22:fb:65:17:e4:dd: c6:1a:0d:da:a5:21:0d:71:46:31:91:fd:f1:e1:28:f3:8c:aa: 69:b4:73:6e:bb:6b:21:a1:9b:d6:12:9e:0a:24:fb:e4:89:b2: 36:f8:94:ed:4a:f6:bf:5d:5f:52:a2:93:d6:32:95:f5:ed:9e: 33:88:5c:51:c7:30:03:59:30:86:58:7d:76:c3:96:d9:ec:a1: b5:80:24:b1:70:08:10:a7:dd:9a:47:d0:0e:d1:0c:95:07:f2: 53:b0:e0:ee:26:00:a5:ef:04:15:46:94:ab:87:2c:4e:3d:4c: 9c:3e:a8:c4:cf:e2:76:fe:3d:48:bd:15:e2:50:cc:b4:d8:07: c3:89:af:17:0c:57:26:dc:7c:a9:9b:3b:6d:c9:55:f9:c6:56: f4:c0:92:52:36:0c:db:0d:4f:17:99:f5:77:5a:69:3a:90:a2: 91:33:a5:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjUxMjI0MTQxNTQ5WhcNMjUxMjMxMTQxNTQ5WjAYMRYwFAYD VQQDDA02OTRiZjU5Ni1kM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9ohMqboMh0pNxL2ZOT4ONRYZkv8z6iN5PwhmJkL6AxDx0+9Yr85AsvlKoqu LnvMRMe/7AxJY5yAlRyEW69OAyqDuubTbZpmTqNq3479wDdVK+WtJlLh/R/PQKWc NVvGnah0VWpc7gNCUneZis/lDbksYTmqmjEEWbSJj/FbjiLongDvADESFtCyUxme 56Loy+VWnJCI3IuGbwzFbCkLw1qxkHxgHGivaS6abWvPKTqTOp9PDzZJ5zrs6qLV 5XLl4aZLyWwW7NEjA/Q6nLlr/jXqYAaxx43LxTz7mxGhPAqYBqWbgaKFDd6s2yDv dLuFPLigcik9p+6qfg3fzMIaVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFujkFlz 0hyoJ6ebWkx+9tIu4JERMB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Y8Kjv8i1t4vln5OkbtP3yXHodoGwhWgTdOnJ9q6QadxyGlZzWppg slgjf2XXKavAnP3mGJXATuhqYwiA53aVVBZoiL+ahbQzGG3kiCVFIXO5s2wi+2UX 5N3GGg3apSENcUYxkf3x4SjzjKpptHNuu2shoZvWEp4KJPvkibI2+JTtSva/XV9S opPWMpX17Z4ziFxRxzADWTCGWH12w5bZ7KG1gCSxcAgQp92aR9AO0QyVB/JTsODu JgCl7wQVRpSrhyxOPUycPqjEz+J2/j1IvRXiUMy02AfDia8XDFcm3HypmzttyVX5 xlb0wJJSNgzbDU8XmfV3Wmk6kKKRM6Xy -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:19 2025 by rpki-client