This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json) Hash identifier: 3EAYLQkhuyyjXMAduEiKWd4psF14h8IrBibV8ZKUp3c= Subject key identifier: 1B:49:18:BA:9D:8A:5A:17:E9:14:52:9F:73:40:97:3D:CC:CD:57:2B Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft Manifest number: 02 Signing time: Mon 15 Dec 2025 10:38:06 +0000 Manifest this update: Mon 15 Dec 2025 10:38:05 +0000 Manifest next update: Mon 22 Dec 2025 10:38:05 +0000 Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: +OZ51A2sqnRKBFaPuTV5owPwLAV9jsYShvm1jR9QI6U=) 2: 21656302D9A211F09604B56168D3641D.roa (hash: MzpEivAK43y+EyRc9LHLYYj12JAzyfhxl29v0dpkat4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Validity Not Before: Dec 15 10:38:05 2025 GMT Not After : Dec 22 10:38:05 2025 GMT Subject: CN=693fe50e-a628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:10:fc:50:1e:b2:cf:3f:cb:69:bf:06:d1: a7:74:1a:cc:27:d5:92:87:b4:e9:bb:5a:3c:82:65: 89:1e:0a:46:ea:75:4c:b1:4b:38:d4:b7:d5:fe:09: 95:34:66:e5:69:16:75:5e:6d:1e:d4:b1:b5:b6:c4: 68:cb:85:91:ba:d2:6d:25:a2:0f:05:9a:4f:60:f3: 4f:e0:a3:15:69:c5:60:18:07:83:26:d2:8a:f2:49: 54:55:bf:e2:13:3f:87:10:4e:7e:31:f8:59:18:07: 13:20:62:28:f1:64:ed:ab:12:45:d9:71:d9:c1:d2: 4d:ed:7f:4a:cd:93:a1:db:df:dc:f1:b5:6b:1d:32: 3d:21:09:60:9c:1f:66:f0:81:89:89:d8:b0:d2:00: d9:7a:62:7a:1a:45:f5:f4:b1:30:e8:43:5e:c3:e9: 26:50:c4:ba:a7:28:3a:ec:45:20:f2:66:41:ba:02: 86:cb:60:9b:74:34:ed:c4:94:fa:ae:82:b1:b9:b6: b9:b2:8b:95:a8:58:48:dd:4e:4e:86:6c:a0:d8:5d: 64:37:6f:85:58:67:c6:0d:ab:0a:f6:b2:f0:2d:a6: 6e:7a:cf:35:8e:f4:bb:aa:69:4f:84:e2:a0:3e:03: 9d:5f:67:4e:94:a1:2a:6e:d6:b5:9c:d7:c4:c8:94: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:49:18:BA:9D:8A:5A:17:E9:14:52:9F:73:40:97:3D:CC:CD:57:2B X509v3 Authority Key Identifier: keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:61:25:f7:34:b4:63:5f:0b:f5:5d:e1:d6:b3:11:4d:60:11: b9:ca:9e:51:1c:e0:7f:20:0d:88:2f:ec:25:90:b6:92:19:b8: 71:cd:fc:24:56:b2:02:1d:de:5e:4b:5b:c5:10:df:fb:32:e2: e9:6a:59:43:32:8b:09:cd:8e:c7:84:2c:40:ed:01:f3:4b:9b: 68:e4:cc:00:8f:68:dc:57:41:c6:78:b0:bc:7c:53:cc:e2:9e: 06:a0:21:15:93:5d:93:2d:28:8c:5b:be:a5:de:2e:af:f3:5d: 3a:7d:4b:c5:ef:e3:a2:ff:54:b6:fa:7d:1c:90:03:c5:a3:d0: 72:00:b5:39:55:a8:e8:6a:39:44:53:72:56:9f:8a:3e:88:0c: 14:1a:bf:64:04:5b:93:b6:7d:c1:b1:d8:2a:c5:22:aa:45:8a: 3e:7e:18:96:e0:39:68:53:dc:82:63:a4:98:91:24:16:37:84: b6:c3:99:62:2c:d5:da:d1:b4:2e:d4:7f:79:94:55:c8:af:9b: 0e:da:b2:ff:ce:3b:2a:a6:3f:f4:8c:20:44:05:24:fd:b5:a5: 08:4b:58:63:05:c1:0a:64:cf:cf:8c:19:e1:b5:94:b4:14:46: b3:f0:8f:11:24:85:33:d5:11:2a:6c:2b:15:74:0f:d5:4e:14: 23:2a:bc:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDM3ODExMC8GA1UEBRMoNkQxQjFDNUVDOUE5Q0UyMEU4Qjg1REEzRjZDMUUzQ0RE NDJFRjgzOTAeFw0yNTEyMTUxMDM4MDVaFw0yNTEyMjIxMDM4MDVaMBgxFjAUBgNV BAMMDTY5M2ZlNTBlLWE2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3lRD8UB6yzz/Lab8G0ad0Gswn1ZKHtOm7WjyCZYkeCkbqdUyxSzjUt9X+CZU0 ZuVpFnVebR7UsbW2xGjLhZG60m0log8Fmk9g80/goxVpxWAYB4Mm0orySVRVv+IT P4cQTn4x+FkYBxMgYijxZO2rEkXZcdnB0k3tf0rNk6Hb39zxtWsdMj0hCWCcH2bw gYmJ2LDSANl6YnoaRfX0sTDoQ17D6SZQxLqnKDrsRSDyZkG6AobLYJt0NO3ElPqu grG5trmyi5WoWEjdTk6GbKDYXWQ3b4VYZ8YNqwr2svAtpm56zzWO9LuqaU+E4qA+ A51fZ06UoSpu1rWc18TIlHCZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG0kYup2K WhfpFFKfc0CXPczNVyswHwYDVR0jBBgwFoAUbRscXsmpziDouF2j9sHjzdQu+Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0Mzc4L0Y2MjkxNDhDRDlB MDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlEb3VGMmo5c0hqemRRdS1E ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlJzY1hzbXB6aURvdUYyajlzSGp6ZFF1LURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 Mzc4L0Y2MjkxNDhDRDlBMDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlE b3VGMmo5c0hqemRRdS1Eay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhhJfc0tGNfC/Vd4dazEU1gEbnKnlEc4H8gDYgv7CWQtpIZuHHN/CRW sgId3l5LW8UQ3/sy4ulqWUMyiwnNjseELEDtAfNLm2jkzACPaNxXQcZ4sLx8U8zi ngagIRWTXZMtKIxbvqXeLq/zXTp9S8Xv46L/VLb6fRyQA8Wj0HIAtTlVqOhqOURT clafij6IDBQav2QEW5O2fcGx2CrFIqpFij5+GJbgOWhT3IJjpJiRJBY3hLbDmWIs 1drRtC7Uf3mUVcivmw7asv/OOyqmP/SMIEQFJP21pQhLWGMFwQpkz8+MGeG1lLQU RrPwjxEkhTPVESpsKxV0D9VOFCMqvHA= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:34 2025 by rpki-client