This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: N8/Ik9GaBd6rQpvkJrUjw7nYO8RL3BNWYHEt1uYevCY= Subject key identifier: 3E:E6:02:96:31:9E:42:76:5F:C3:FE:56:68:78:35:A3:3F:A2:E2:48 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 8D Signing time: Tue 09 Dec 2025 04:38:12 +0000 Manifest this update: Tue 09 Dec 2025 04:38:11 +0000 Manifest next update: Tue 16 Dec 2025 04:38:11 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: gG9WTYBPqTlixZv6Qp0OO3USoHNRonlgPKly4Qi33T0=) 2: EFE35156B61811F0AEA87331C4F9AE02.roa (hash: yGF0/J4YTOhabvB6dHd/CkU6xMGpr2zyh/tO91R2r30=) 3: B2E521ACB61911F08CF0DC33C4F9AE02.roa (hash: qhmSvaZGy1wgMrEHyKh0anKTUZYqwOr3QNOLophEj2o=) 4: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: vb7fSe4hGTfYiR3X8s03oFhLsFFESwK0obRkUpL5Xz0=) 5: 692243D640AA11F096F2746AC4F9AE02.roa (hash: 9g7lOOD5JnVMfPoV+CkyAbWN9NrLgMODndTwuqHyDZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 04:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Dec 9 04:38:11 2025 GMT Not After : Dec 16 04:38:11 2025 GMT Subject: CN=6937a7b3-5293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:cd:65:62:6e:5b:83:50:76:f3:27:da:57: e2:7a:81:6f:c3:a9:8b:05:02:de:a6:cb:e0:91:04: 11:21:a6:82:99:01:a6:0e:33:0e:c3:93:f1:62:27: 31:b6:8e:b1:53:09:ac:a2:60:71:ce:ea:ab:62:cc: e3:e1:d7:74:c1:13:3a:2a:24:44:45:f2:62:e1:17: a9:b3:d8:49:80:72:9e:b4:a5:fc:b2:6c:9d:6e:89: d7:14:bb:2e:75:03:23:cc:74:28:75:8e:52:02:38: 43:75:90:37:f7:2f:53:cf:08:f5:ea:89:df:f8:ab: 74:42:97:df:36:a6:11:a0:20:51:63:13:77:cb:9a: 0e:e0:c7:53:e3:bb:7a:ad:1d:9f:04:8b:c3:b7:e4: dd:5f:4f:a4:c0:2b:71:da:c8:54:8d:d2:c7:ab:40: f6:f9:8f:4c:bd:de:58:a6:9f:6a:e5:9f:ac:7c:6b: f3:22:a3:08:b6:ef:4b:09:64:56:b8:63:14:c7:45: ab:87:61:65:15:93:c8:c9:42:38:c4:ab:bc:d4:3a: 1e:67:56:f1:63:df:79:4d:d0:04:1e:99:29:ca:d8: 3f:fe:2b:76:c2:b9:07:c5:d4:f7:8e:b3:59:d4:96: 3f:5f:59:9c:29:d2:aa:bd:d3:b7:f7:01:6f:1e:d3: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E6:02:96:31:9E:42:76:5F:C3:FE:56:68:78:35:A3:3F:A2:E2:48 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:46:fa:ba:e4:88:75:ed:e3:b2:21:d7:1a:6c:bf:4a:6a:b2: 13:d3:29:c4:22:4c:ac:d0:41:74:bd:78:75:9b:12:c9:97:bd: 46:9b:72:d2:4f:fa:cb:33:10:4d:46:5b:50:9b:a4:af:90:3d: 14:5f:ca:c0:ef:ce:c0:ab:b1:ad:1c:b9:14:62:fc:45:29:b5: 56:e7:22:4e:d5:55:0e:e1:ff:05:d4:73:a0:a9:ec:47:c4:23: c0:a7:44:46:ec:4d:42:e8:86:4f:f1:e1:63:af:46:81:25:3a: 50:ed:95:ae:d2:bc:7c:80:e1:76:18:34:42:8c:d4:30:dc:18: c3:67:15:9a:6e:49:e6:eb:b6:2f:84:d2:a7:d0:56:d2:af:bd: 04:5f:f0:81:da:90:0d:d8:48:9f:d7:e6:72:59:fb:fc:1c:89: ee:a4:d0:0d:d1:11:4f:a9:50:bb:a1:26:75:fa:dd:9c:39:ee: af:2d:f9:44:78:e2:b2:3b:6a:73:4e:09:d9:5b:05:fa:a6:62: 06:57:e7:92:8d:32:d1:ec:36:c4:ea:8d:29:83:b7:95:a0:8c: c8:10:85:78:47:65:24:c3:4b:37:d8:98:81:86:c8:b8:85:e5: aa:3c:e1:b5:c3:0c:91:37:37:ca:a1:44:1b:c8:69:67:f7:7b: c8:00:01:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjUxMjA5MDQzODExWhcNMjUxMjE2MDQzODExWjAYMRYwFAYD VQQDEw02OTM3YTdiMy01MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohrNZWJuW4NQdvMn2lfieoFvw6mLBQLepsvgkQQRIaaCmQGmDjMOw5PxYicx to6xUwmsomBxzuqrYszj4dd0wRM6KiRERfJi4Reps9hJgHKetKX8smydbonXFLsu dQMjzHQodY5SAjhDdZA39y9Tzwj16onf+Kt0QpffNqYRoCBRYxN3y5oO4MdT47t6 rR2fBIvDt+TdX0+kwCtx2shUjdLHq0D2+Y9Mvd5Ypp9q5Z+sfGvzIqMItu9LCWRW uGMUx0Wrh2FlFZPIyUI4xKu81DoeZ1bxY995TdAEHpkpytg//it2wrkHxdT3jrNZ 1JY/X1mcKdKqvdO39wFvHtNpAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7mApYx nkJ2X8P+Vmh4NaM/ouJIMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJRvq65Ih17eOyIdcabL9KarIT0ynEIkys0EF0vXh1mxLJl71Gm3LS T/rLMxBNRltQm6SvkD0UX8rA787Aq7GtHLkUYvxFKbVW5yJO1VUO4f8F1HOgqexH xCPAp0RG7E1C6IZP8eFjr0aBJTpQ7ZWu0rx8gOF2GDRCjNQw3BjDZxWabknm67Yv hNKn0FbSr70EX/CB2pAN2Eif1+ZyWfv8HInupNAN0RFPqVC7oSZ1+t2cOe6vLflE eOKyO2pzTgnZWwX6pmIGV+eSjTLR7DbE6o0pg7eVoIzIEIV4R2Ukw0s32JiBhsi4 heWqPOG1wwyRNzfKoUQbyGln93vIAAHQ -----END CERTIFICATE-----Generated at Fri Dec 12 09:28:13 2025 by rpki-client