This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: ViJ3AJ/U5AhEaPsEcz78ZlpjF9X8lThOU8Vxiq5KqMI= Subject key identifier: 9F:66:78:1A:E8:8E:38:53:B6:40:B3:98:89:30:19:48:CB:CC:56:8C Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 03F3 Signing time: Mon 22 Dec 2025 23:34:48 +0000 Manifest this update: Mon 22 Dec 2025 23:34:48 +0000 Manifest next update: Mon 29 Dec 2025 23:34:48 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: f23xoTHs3GVY0kbpEK3rzi75rGnAtSFIWYQ6dP2vCHM=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 8U+UsiCXDKifnoegufsPJKGalX6CUXoFX96X70pYMYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Dec 22 23:34:48 2025 GMT Not After : Dec 29 23:34:48 2025 GMT Subject: CN=6949d598-5787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:34:26:89:8a:0e:7f:a9:b5:68:c5:ad:98: bb:f7:61:58:a7:cd:09:9b:50:e1:03:84:e4:76:ae: 5b:17:a0:64:2d:4d:90:7f:0f:a8:5e:fe:60:e4:33: be:e4:17:38:90:92:36:7f:df:b4:1b:e1:7a:09:c7: 9b:57:cf:55:47:47:e0:89:d9:8f:1d:b9:2e:23:4f: a5:b6:ef:90:dd:a7:ea:9e:19:f1:3e:8a:2a:61:fe: eb:16:3f:5e:ae:4b:d6:da:bf:ca:0e:6b:ec:cd:88: 74:d5:fb:b4:7b:50:b8:1d:0e:c7:e8:bf:0e:84:c8: 21:f7:fc:40:da:1e:d9:84:83:33:b9:97:62:50:ae: 4a:95:87:09:a2:cf:61:4b:d5:5d:70:1a:98:ef:e4: 2f:9b:07:74:ba:3b:94:39:8b:d5:a0:63:16:85:43: 71:d1:3e:56:93:d4:c3:d7:fe:ab:9e:b0:2a:3c:44: 69:6a:ae:44:82:66:19:b6:ee:d2:01:13:78:e2:dc: b0:61:a2:56:1f:6f:77:94:5e:9e:1a:8c:1f:7a:59: 01:38:b8:38:10:d7:17:3e:fd:a3:90:db:37:d9:3c: 91:20:57:21:30:a2:0b:87:d1:a5:31:e3:84:52:25: b9:cf:47:ab:5e:e9:fc:4d:bd:26:88:54:d8:40:ce: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:66:78:1A:E8:8E:38:53:B6:40:B3:98:89:30:19:48:CB:CC:56:8C X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c2:60:ea:6d:56:71:6a:28:e8:e3:dc:3d:c5:e0:05:b9:d3: f7:25:5b:ac:a7:3a:73:5f:15:a4:d9:be:8d:7a:cc:84:a7:cb: 58:49:82:04:95:3b:45:92:91:9c:8a:8f:bf:da:83:e3:69:76: b3:c5:bc:b8:2b:5a:b3:c9:cd:7b:a3:86:0a:61:fe:25:2f:ce: b9:ce:5a:6c:3d:d8:1b:3f:fd:d2:b7:1b:ea:98:92:c4:04:8c: ca:18:f4:03:b4:e2:0b:4c:ef:a7:2a:2b:2e:1b:c7:3e:8c:b8: 45:51:5e:0e:c9:d8:b0:0c:42:82:bc:43:f6:fa:34:bc:bf:41: e4:ba:47:e6:9e:47:17:81:22:35:00:11:0d:1b:d8:76:45:9e: 74:35:62:3d:e0:bd:ac:35:bb:1d:51:fb:90:78:f8:49:6b:d7: 51:00:76:01:b3:7a:b0:5e:65:3b:36:b7:29:7c:e7:36:b6:7c: 1f:f0:fd:e9:fd:7b:8a:19:aa:23:04:52:f2:5b:66:c6:09:69: 01:ce:c2:6a:55:1d:9a:cf:4e:67:a4:7e:63:90:21:b2:17:2a: c8:0e:66:fd:b3:2d:01:42:23:80:45:ee:f8:31:1f:8e:7a:cc: 5f:dd:a5:27:6c:a7:8a:ee:aa:22:38:a9:26:35:d4:cc:39:60: 8d:37:e5:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjUxMjIyMjMzNDQ4WhcNMjUxMjI5MjMzNDQ4WjAYMRYwFAYD VQQDDA02OTQ5ZDU5OC01Nzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4U0JomKDn+ptWjFrZi792FYp80Jm1DhA4Tkdq5bF6BkLU2Qfw+oXv5g5DO+ 5Bc4kJI2f9+0G+F6CcebV89VR0fgidmPHbkuI0+ltu+Q3afqnhnxPooqYf7rFj9e rkvW2r/KDmvszYh01fu0e1C4HQ7H6L8OhMgh9/xA2h7ZhIMzuZdiUK5KlYcJos9h S9VdcBqY7+Qvmwd0ujuUOYvVoGMWhUNx0T5Wk9TD1/6rnrAqPERpaq5EgmYZtu7S ARN44tywYaJWH293lF6eGowfelkBOLg4ENcXPv2jkNs32TyRIFchMKILh9GlMeOE UiW5z0erXun8Tb0miFTYQM66NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9meBro jjhTtkCzmIkwGUjLzFaMMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVwmDqbVZxaijo49w9xeAFudP3JVuspzpzXxWk2b6NesyEp8tYSYIE lTtFkpGcio+/2oPjaXazxby4K1qzyc17o4YKYf4lL865zlpsPdgbP/3StxvqmJLE BIzKGPQDtOILTO+nKisuG8c+jLhFUV4OydiwDEKCvEP2+jS8v0HkukfmnkcXgSI1 ABENG9h2RZ50NWI94L2sNbsdUfuQePhJa9dRAHYBs3qwXmU7NrcpfOc2tnwf8P3p /XuKGaojBFLyW2bGCWkBzsJqVR2az05npH5jkCGyFyrIDmb9sy0BQiOARe74MR+O esxf3aUnbKeK7qoiOKkmNdTMOWCNN+Us -----END CERTIFICATE-----Generated at Tue Dec 23 13:11:13 2025 by rpki-client