This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: kD2Pks9McagDqRA8xfn/qHq07QV1SoR//WUA9xGmUZU= Subject key identifier: 38:12:A6:90:61:4E:86:FD:D6:88:7F:A5:01:F1:E9:41:AC:BA:A6:C6 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D57 Signing time: Thu 18 Dec 2025 17:50:11 +0000 Manifest this update: Thu 18 Dec 2025 17:50:10 +0000 Manifest next update: Thu 25 Dec 2025 17:50:10 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: dKmZSQ0RIxEaDS6LM48i7zx96xcepGNViLdb1mitkQw=) 2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /zMIu4aAire5r9mqMzQqAKINeMM11LU3wVsWK0GAqus=) 3: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: 0Xwi/bmW9haZc7tjAjEkhhMp/mPsR+cSlzidnrV+hJs=) 4: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: r/UrHR4/pq4iERDjBjufQuU/vYCRg4tIHiAlT6J6epA=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 2NctsSqYgRdhlX1YbDvI69B+W9MaM7MaZOBeltGDVHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Dec 18 17:50:10 2025 GMT Not After : Dec 25 17:50:10 2025 GMT Subject: CN=69443ed3-dd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:0f:85:1d:1a:8d:2c:be:1b:bb:2e:36:30: 3f:ed:72:41:3c:a7:de:5e:67:11:02:43:a4:38:fa: 2e:95:4f:a4:03:85:c0:44:a6:75:c6:80:b9:f6:a8: a7:3a:a7:b7:e6:e0:b6:4f:aa:fc:2d:dc:2b:60:13: ff:63:97:4f:97:ad:c3:52:46:3e:d1:8c:77:4c:ea: ff:54:3c:d3:dd:a5:51:f3:3b:02:25:79:8d:ab:4f: 6d:d8:fe:42:ab:1e:33:e0:ac:97:ee:c4:42:9c:4c: fc:a1:94:52:20:c4:71:9c:cc:9b:5d:97:dd:aa:85: 7d:ab:50:ae:66:05:e2:d7:1c:59:79:2b:7b:ae:6f: 73:f0:bf:b6:39:86:35:28:96:31:3c:96:63:6a:24: a5:34:6c:5d:02:6d:33:75:01:ad:a6:e4:bd:bd:5d: f2:ae:25:a2:ff:df:af:24:cb:67:2d:17:9d:25:ca: 86:11:e1:47:73:c2:17:47:88:04:7e:69:0d:ff:66: df:8c:33:49:51:6f:a9:df:f3:60:5f:f0:39:72:6b: 46:4c:65:fd:a4:4b:53:7d:79:92:40:0a:8e:49:ee: f8:d8:9d:82:19:c5:dd:71:1b:52:74:93:79:77:ff: 70:fa:79:3e:3a:cd:7f:28:ac:0b:bd:c5:ee:a7:89: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:12:A6:90:61:4E:86:FD:D6:88:7F:A5:01:F1:E9:41:AC:BA:A6:C6 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:44:c6:71:8c:47:02:dd:dc:58:3d:5e:97:cb:7e:de:06:be: aa:5f:e7:84:1a:1a:63:a1:24:60:a0:7e:ca:b6:b6:5f:a5:22: 85:40:68:bb:0f:03:64:f7:5c:ec:90:1b:06:f5:07:3f:fb:a6: 8d:fb:f9:e7:e9:04:c2:6a:60:c8:40:06:b0:c1:39:c3:9c:b8: 8d:56:2e:30:46:22:79:3e:1e:b8:d5:8e:ba:44:1b:11:22:3e: 0c:f3:3e:ab:54:35:8e:57:bc:e8:e7:90:72:e0:f6:9f:5a:2f: ed:9d:a0:73:44:e7:6f:58:73:b8:e0:4a:e3:14:ae:1d:32:3d: 4c:32:11:3b:cf:43:b7:4b:ff:39:25:68:11:d8:73:52:65:a2: 0c:6c:86:8a:71:5f:79:14:bc:8b:32:0f:d2:49:c0:20:a6:85: 7d:ba:3c:2f:ab:9b:ab:02:c5:bf:83:6d:84:c9:7f:c6:41:77: 09:65:f6:8a:1b:26:0f:69:c0:05:5a:e3:85:6b:52:f3:a6:7a: b0:b9:9d:58:73:0f:f2:d2:20:0f:1f:4c:a7:ea:d7:40:03:da: a3:2b:2f:7b:f5:bf:99:60:8f:85:c3:71:5a:37:aa:c6:f7:04: b0:d9:ac:e2:bf:ed:46:c4:6b:8f:7e:06:21:04:b8:e3:7e:8c: bc:b8:bf:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUxMjE4MTc1MDEwWhcNMjUxMjI1MTc1MDEwWjAYMRYwFAYD VQQDDA02OTQ0M2VkMy1kZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDkPhR0ajSy+G7suNjA/7XJBPKfeXmcRAkOkOPoulU+kA4XARKZ1xoC59qin Oqe35uC2T6r8LdwrYBP/Y5dPl63DUkY+0Yx3TOr/VDzT3aVR8zsCJXmNq09t2P5C qx4z4KyX7sRCnEz8oZRSIMRxnMybXZfdqoV9q1CuZgXi1xxZeSt7rm9z8L+2OYY1 KJYxPJZjaiSlNGxdAm0zdQGtpuS9vV3yriWi/9+vJMtnLRedJcqGEeFHc8IXR4gE fmkN/2bfjDNJUW+p3/NgX/A5cmtGTGX9pEtTfXmSQAqOSe742J2CGcXdcRtSdJN5 d/9w+nk+Os1/KKwLvcXup4mknQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgSppBh Tob91oh/pQHx6UGsuqbGMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfRMZxjEcC3dxYPV6Xy37eBr6qX+eEGhpjoSRgoH7KtrZfpSKFQGi7 DwNk91zskBsG9Qc/+6aN+/nn6QTCamDIQAawwTnDnLiNVi4wRiJ5Ph641Y66RBsR Ij4M8z6rVDWOV7zo55By4PafWi/tnaBzROdvWHO44ErjFK4dMj1MMhE7z0O3S/85 JWgR2HNSZaIMbIaKcV95FLyLMg/SScAgpoV9ujwvq5urAsW/g22EyX/GQXcJZfaK GyYPacAFWuOFa1LzpnqwuZ1Ycw/y0iAPH0yn6tdAA9qjKy979b+ZYI+Fw3FaN6rG 9wSw2aziv+1GxGuPfgYhBLjjfoy8uL9g -----END CERTIFICATE-----Generated at Fri Dec 19 12:39:09 2025 by rpki-client