This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: ne4Mk2zxkWFyx6MlRhl/2WdIKKenct7IYlMyV7mo4lc= Subject key identifier: 0B:EB:48:75:55:1B:F3:EB:AD:47:41:4F:5D:15:3B:1E:DA:B4:22:2B Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 35D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 354A Signing time: Sat 06 Dec 2025 14:23:12 +0000 Manifest this update: Sat 06 Dec 2025 14:23:12 +0000 Manifest next update: Sat 13 Dec 2025 14:23:12 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: nAFaft8oc0AitpwghUEkcut1qsdvhF/opKQzwZ25fS0=) 2: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: 6nK3GoLVaSP0VSJQQ8fMNbxkXH0UKpIkFpkEB95EEy0=) 3: D0886954188811EC8E86754FC4F9AE02.roa (hash: 6VbOvgdK5CTvuRLAoKi7F+0CDGeRIa2tmkBoLvAgouA=) 4: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: Co7SE3g9/ARrpsRXeCTg4P0jRRisbdn9kOGmwejTlBg=) 5: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: atHB41zC9ox7WEbx/oU2a0/b1MGieqCzosX2UKLPzlk=) 6: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: eobj/eFuFNpYpHWfoCh4R2f9ILietn5YmlGo8HxPsps=) 7: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: nVehuPJuIkWIOjh795nZonFcwqqWF8/uu32Co6wlMr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13778 (0x35d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Dec 6 14:23:12 2025 GMT Not After : Dec 13 14:23:12 2025 GMT Subject: CN=69343c50-00c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:59:d1:0c:96:3d:26:9b:9a:2b:dc:29:5a: 81:ac:cb:fb:95:c2:70:d2:fc:75:8c:94:d1:c1:14: 48:56:6a:87:01:c4:d8:78:5b:82:fd:01:43:d5:d7: 27:58:92:cf:c4:78:fd:67:44:e0:6f:dc:e8:65:fd: 25:16:32:5a:8c:a9:a4:d6:26:d0:e8:9f:58:be:7b: d6:ea:7a:9e:3e:e0:8d:b5:fe:34:89:e9:e6:f9:fc: 42:e8:44:a7:3d:9a:3a:19:f8:eb:25:30:ff:dd:96: 9b:f4:35:73:59:24:9d:5f:df:e7:61:10:b8:3d:59: 2a:6c:68:00:51:2f:cf:8d:4b:7c:ee:e1:19:c3:28: 95:42:5a:ff:cc:f1:03:96:86:81:30:b8:87:ad:1c: 14:4a:6f:2d:60:7a:5b:03:c1:fc:27:c6:27:dc:e8: 46:c1:ed:8c:96:ed:38:5e:5f:e6:33:3a:a7:58:66: f0:c2:80:1f:6d:97:22:44:50:85:65:fc:8a:de:da: 9a:36:94:33:39:35:1f:28:0d:99:ef:c9:67:e4:35: 65:97:e3:c9:6c:fc:eb:db:79:a3:42:e6:ae:c7:e3: 16:aa:93:35:ff:b5:d0:c9:44:59:a8:c5:93:d3:a9: ad:ba:9d:03:f1:b4:d5:79:89:4f:1e:b5:05:57:20: 67:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:48:75:55:1B:F3:EB:AD:47:41:4F:5D:15:3B:1E:DA:B4:22:2B X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:62:47:3d:27:02:c5:d2:ba:3d:4e:cd:32:74:3c:d3:91:02: cc:0e:70:d2:fe:5b:35:1d:33:7a:15:6b:20:72:41:61:b7:29: 61:d3:96:5b:81:53:fd:08:e5:5e:ad:4b:e9:68:f6:52:ee:1b: 5d:a2:2e:7d:27:62:3a:bf:24:8e:86:70:e7:d4:61:ba:6e:2f: e9:45:0e:a9:68:91:d2:a2:68:3a:bd:e9:e9:36:27:50:f3:b2: 4e:43:34:52:ab:b3:ef:2e:e5:5e:b3:62:61:d5:76:6b:1c:30: c8:3e:5a:bb:0e:f1:92:64:52:73:8b:af:47:59:03:fc:2a:d1: 0f:bd:11:78:44:a8:16:2b:22:2f:5e:4a:a0:de:1f:8e:4b:c8: e4:da:4d:64:8a:36:8b:33:e8:49:63:cb:23:bd:c8:55:61:a4: a9:0b:9f:c3:ae:4f:d0:56:88:59:e6:d0:42:af:89:6a:38:1d: 3f:16:f4:7f:a2:fa:0f:0e:9d:f3:86:2f:f3:71:aa:4b:df:ec: 6c:56:ab:40:0c:4b:d9:ed:81:dd:ae:95:4e:2c:96:db:72:a0: 83:bd:80:53:ae:70:f4:47:e9:2a:7c:9a:d4:01:12:c3:5b:08: b8:90:f9:b9:26:b8:cb:f1:ad:84:86:0a:91:c7:ff:b1:03:78: 5e:bd:b8:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjUxMjA2MTQyMzEyWhcNMjUxMjEzMTQyMzEyWjAYMRYwFAYD VQQDEw02OTM0M2M1MC0wMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAno5Z0QyWPSabmivcKVqBrMv7lcJw0vx1jJTRwRRIVmqHAcTYeFuC/QFD1dcn WJLPxHj9Z0Tgb9zoZf0lFjJajKmk1ibQ6J9YvnvW6nqePuCNtf40ienm+fxC6ESn PZo6GfjrJTD/3Zab9DVzWSSdX9/nYRC4PVkqbGgAUS/PjUt87uEZwyiVQlr/zPED loaBMLiHrRwUSm8tYHpbA8H8J8Yn3OhGwe2Mlu04Xl/mMzqnWGbwwoAfbZciRFCF ZfyK3tqaNpQzOTUfKA2Z78ln5DVll+PJbPzr23mjQuaux+MWqpM1/7XQyURZqMWT 06mtup0D8bTVeYlPHrUFVyBnlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvrSHVV G/PrrUdBT10VOx7atCIrMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALYkc9JwLF0ro9Ts0ydDzTkQLMDnDS/ls1HTN6FWsgckFhtylh05Zb gVP9COVerUvpaPZS7htdoi59J2I6vySOhnDn1GG6bi/pRQ6paJHSomg6venpNidQ 87JOQzRSq7PvLuVes2Jh1XZrHDDIPlq7DvGSZFJzi69HWQP8KtEPvRF4RKgWKyIv Xkqg3h+OS8jk2k1kijaLM+hJY8sjvchVYaSpC5/Drk/QVohZ5tBCr4lqOB0/FvR/ ovoPDp3zhi/zcapL3+xsVqtADEvZ7YHdrpVOLJbbcqCDvYBTrnD0R+kqfJrUARLD Wwi4kPm5JrjL8a2EhgqRx/+xA3hevbg5 -----END CERTIFICATE-----Generated at Sun Dec 7 12:22:12 2025 by rpki-client