This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: v9afNIGRbgKwFAJw8qmQcI3yFGXLqaWZWu3Nt5EUtfY= Subject key identifier: 14:B5:5F:BD:37:E4:BE:C2:85:C9:BD:0A:63:32:E4:E7:9F:3E:B8:FA Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D43 Signing time: Mon 22 Dec 2025 17:38:54 +0000 Manifest this update: Mon 22 Dec 2025 17:38:53 +0000 Manifest next update: Mon 29 Dec 2025 17:38:53 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: vEQ3BL+++CWAdTFKWjRH+anGh/evqe/UEb1t/5AhP9M=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: eWcvHOUT67GedsanEfBHjHteAl5xPcgw0p372As4/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3405 (0xd4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Dec 22 17:38:53 2025 GMT Not After : Dec 29 17:38:53 2025 GMT Subject: CN=6949822e-41d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:3c:fd:70:35:e8:79:68:16:78:44:b5:4b: 08:5f:75:48:07:ef:1c:0a:92:b6:f2:e2:10:33:3b: 75:c1:c5:e4:22:23:d2:ea:c6:24:93:01:2b:33:48: e4:38:17:13:d3:af:9c:be:80:e7:18:15:af:4b:48: 76:20:b0:1f:68:33:85:f3:9b:d3:a7:93:fd:ff:47: 37:64:d8:6d:f4:98:60:f2:24:b8:e8:dc:5e:58:65: bb:b5:20:ec:c1:75:0f:78:ed:93:0d:0d:3d:01:5d: 13:3e:15:ec:f6:2b:74:7a:da:27:ea:4b:24:b5:02: 07:69:53:53:45:ad:ed:55:c2:29:58:07:04:87:33: f0:5c:d6:c2:01:f4:67:a2:3a:47:28:ac:2f:c8:ae: d7:22:8e:78:1f:f2:20:7d:c0:0e:5a:71:73:32:7b: 60:10:3b:ef:a3:6c:70:0a:c3:03:24:ac:90:9a:a8: 19:c6:67:a0:51:ad:1c:41:40:ae:06:ac:35:bb:bb: 5e:2b:55:89:79:4b:b9:6f:72:61:94:a4:1f:2c:ae: e9:bd:80:be:b1:d7:13:a9:e6:3b:fd:29:38:b5:22: 35:11:f6:00:1d:1a:0d:a5:dc:10:82:e9:6e:f4:cf: c0:25:1c:93:ab:d1:f6:24:9b:fe:2f:fd:26:6c:59: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B5:5F:BD:37:E4:BE:C2:85:C9:BD:0A:63:32:E4:E7:9F:3E:B8:FA X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4f:78:ff:e3:6c:c1:64:09:75:24:55:a4:f1:d2:86:ec:fc: f0:e0:46:38:d6:63:c8:3a:e6:b7:c3:b5:17:f4:60:9a:3e:d2: c5:6f:44:a8:80:f0:87:46:46:75:69:6a:24:b4:57:52:73:b2: e2:82:54:19:0c:56:1b:51:d9:9c:fc:f3:77:7a:08:72:30:b8: 97:7a:22:a1:74:3d:1f:d2:6d:ad:30:7d:4f:4b:42:1d:8c:b1: 4f:f1:ac:6a:db:f0:8c:6b:44:40:f7:ad:14:50:39:0e:7b:e7: 6a:f2:85:92:0e:bb:3e:73:d6:06:31:09:cf:32:e4:7f:97:50: 73:87:9d:4e:29:68:e8:a9:a2:02:37:ae:b9:71:6a:ce:0f:b6: 59:fb:75:cc:7c:2a:a4:2f:ba:1e:ab:60:3c:48:71:1b:81:98: bd:f1:64:b4:f5:f2:bc:39:db:8e:47:09:da:12:64:4e:6d:4a: 58:00:20:5a:03:2c:f8:5d:cd:d5:b3:a2:0e:88:cd:3f:88:a0: ed:3f:29:97:f6:3c:cd:c8:4d:a9:b8:6d:6e:a2:f7:c9:0c:e1: 44:c7:10:65:80:c2:c1:28:7d:4e:8b:cd:94:f7:ca:af:98:c4: 67:b7:ff:62:f6:f0:d1:d8:9a:f0:a9:58:50:c5:d2:eb:0d:87: 6a:44:d0:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUxMjIyMTczODUzWhcNMjUxMjI5MTczODUzWjAYMRYwFAYD VQQDDA02OTQ5ODIyZS00MWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAves8/XA16HloFnhEtUsIX3VIB+8cCpK28uIQMzt1wcXkIiPS6sYkkwErM0jk OBcT06+cvoDnGBWvS0h2ILAfaDOF85vTp5P9/0c3ZNht9Jhg8iS46NxeWGW7tSDs wXUPeO2TDQ09AV0TPhXs9it0eton6ksktQIHaVNTRa3tVcIpWAcEhzPwXNbCAfRn ojpHKKwvyK7XIo54H/IgfcAOWnFzMntgEDvvo2xwCsMDJKyQmqgZxmegUa0cQUCu Bqw1u7teK1WJeUu5b3JhlKQfLK7pvYC+sdcTqeY7/Sk4tSI1EfYAHRoNpdwQgulu 9M/AJRyTq9H2JJv+L/0mbFmVAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS1X703 5L7Chcm9CmMy5OefPrj6MB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjT3j/42zBZAl1JFWk8dKG7Pzw4EY41mPIOua3w7UX9GCaPtLFb0So gPCHRkZ1aWoktFdSc7LiglQZDFYbUdmc/PN3eghyMLiXeiKhdD0f0m2tMH1PS0Id jLFP8axq2/CMa0RA960UUDkOe+dq8oWSDrs+c9YGMQnPMuR/l1Bzh51OKWjoqaIC N665cWrOD7ZZ+3XMfCqkL7oeq2A8SHEbgZi98WS09fK8OduORwnaEmRObUpYACBa Ayz4Xc3Vs6IOiM0/iKDtPymX9jzNyE2puG1uovfJDOFExxBlgMLBKH1Oi82U98qv mMRnt/9i9vDR2JrwqVhQxdLrDYdqRNB0 -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:02 2025 by rpki-client