This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: B6oyUb9gatmXKMRlUtVuI4JUIIvAWj1TOOUQScL2FwI= Subject key identifier: CF:09:EF:48:6E:D5:08:7A:9A:A9:CE:BC:07:86:F8:91:3F:A0:A6:4B Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 0518 Signing time: Mon 22 Dec 2025 22:43:09 +0000 Manifest this update: Mon 22 Dec 2025 22:43:08 +0000 Manifest next update: Mon 29 Dec 2025 22:43:08 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: A+atFJL6GrFsQKtKFUTy0v+TtR6uqkyPLQxSsSuF4yY=) 2: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: ehKgJL5LpCf7RlyE1aWed3p9Jx0fKt/Hbu4XpQx0/fc=) 3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: yboxuGYa7ria6kIKGtokstUujAuaxIezyJo4PlnmwrQ=) 4: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: RtF3QF7uJka6OGDIQWbUTerYNiAs2ytZrcxGiAE5oMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Dec 22 22:43:08 2025 GMT Not After : Dec 29 22:43:08 2025 GMT Subject: CN=6949c97d-a39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:a6:b1:fa:0d:8d:24:fd:b4:81:10:04:42: aa:5c:33:94:79:d2:0e:51:5a:7b:31:c5:fe:7a:71: b7:89:8a:19:00:d2:0b:56:1a:a9:20:28:06:46:9a: 96:2c:38:8d:04:4d:17:78:94:00:e7:24:c4:ac:cc: f1:f4:8f:28:48:a9:9f:97:a1:60:55:d8:9e:60:89: 3e:cc:82:b9:fb:d1:bd:f9:44:e6:d1:57:a3:ae:8a: e9:5a:1e:25:60:4f:f5:b3:07:fb:4d:05:be:77:8a: 10:ae:1d:36:58:94:80:29:65:b8:1f:03:9e:c7:94: 94:42:f5:5e:d6:a4:1d:68:a7:63:fe:55:c7:08:ea: 48:a3:34:b2:1a:a1:24:5e:47:08:9b:7d:28:a1:8e: 5c:fe:e5:c5:9b:a8:75:67:7b:09:11:6f:cb:06:c5: a3:78:54:16:c3:62:57:a8:3a:6f:7f:87:88:36:8d: b7:ec:ed:e3:20:a5:56:da:34:41:ea:1c:0a:62:a2: b4:29:73:6e:99:a2:9d:45:68:0e:f2:8f:ab:89:a5: bb:f9:12:3a:27:4b:83:a4:ae:af:c3:e5:12:f6:54: c9:2f:5c:43:bb:1e:57:78:3a:17:43:26:fd:00:d4: 79:2f:bc:8c:67:05:1d:4e:fd:aa:a7:ed:e9:5f:0c: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:09:EF:48:6E:D5:08:7A:9A:A9:CE:BC:07:86:F8:91:3F:A0:A6:4B X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:28:a9:3e:f0:f5:09:33:3f:32:da:a4:59:17:f5:47:cb:bb: b2:d1:c2:d2:32:86:eb:54:f1:d3:7c:8e:6d:62:a0:fa:51:25: e2:c2:a0:92:19:05:6d:22:cc:cd:0c:67:d6:5d:b1:b9:23:18: c8:6f:5e:b9:d5:85:48:ca:18:c4:41:77:70:c1:60:21:37:3e: 8c:82:78:8a:bc:12:d5:43:08:63:a8:ec:2e:e3:77:ab:ba:36: 5e:98:cf:f2:5d:52:95:c9:2d:c6:59:3f:97:d4:2e:4a:23:3e: 3f:62:2d:e4:56:fe:22:7b:17:20:41:80:17:6c:bf:cf:81:28: fe:d0:fb:0d:ef:6b:4d:c9:29:af:04:f4:a2:03:27:d8:5e:80: 17:1c:c9:15:2b:80:2b:1b:a5:fe:dd:ff:f6:29:d5:b0:d9:54: 89:eb:ec:68:c2:5f:bf:3b:8c:0d:b4:0b:1c:f6:1d:c9:fb:4a: af:fe:58:9d:d8:b4:ab:32:db:13:5c:76:c3:31:0e:ea:4f:9a: be:a7:0e:43:34:dd:34:28:7a:88:14:74:81:e3:ca:78:2c:f0: f5:44:80:66:5d:5d:53:6d:a2:6b:23:fe:34:97:28:61:02:fc: 0f:c8:78:4a:d8:f0:bd:e1:ae:4e:29:8a:a3:43:8c:d5:b7:d1: 49:e4:67:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjUxMjIyMjI0MzA4WhcNMjUxMjI5MjI0MzA4WjAYMRYwFAYD VQQDDA02OTQ5Yzk3ZC1hMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszWmsfoNjST9tIEQBEKqXDOUedIOUVp7McX+enG3iYoZANILVhqpICgGRpqW LDiNBE0XeJQA5yTErMzx9I8oSKmfl6FgVdieYIk+zIK5+9G9+UTm0VejrorpWh4l YE/1swf7TQW+d4oQrh02WJSAKWW4HwOex5SUQvVe1qQdaKdj/lXHCOpIozSyGqEk XkcIm30ooY5c/uXFm6h1Z3sJEW/LBsWjeFQWw2JXqDpvf4eINo237O3jIKVW2jRB 6hwKYqK0KXNumaKdRWgO8o+riaW7+RI6J0uDpK6vw+US9lTJL1xDux5XeDoXQyb9 ANR5L7yMZwUdTv2qp+3pXwzbgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8J70hu 1Qh6mqnOvAeG+JE/oKZLMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0KKk+8PUJMz8y2qRZF/VHy7uy0cLSMobrVPHTfI5tYqD6USXiwqCS GQVtIszNDGfWXbG5IxjIb1651YVIyhjEQXdwwWAhNz6MgniKvBLVQwhjqOwu43er ujZemM/yXVKVyS3GWT+X1C5KIz4/Yi3kVv4iexcgQYAXbL/PgSj+0PsN72tNySmv BPSiAyfYXoAXHMkVK4ArG6X+3f/2KdWw2VSJ6+xowl+/O4wNtAsc9h3J+0qv/lid 2LSrMtsTXHbDMQ7qT5q+pw5DNN00KHqIFHSB48p4LPD1RIBmXV1TbaJrI/40lyhh AvwPyHhK2PC94a5OKYqjQ4zVt9FJ5GfV -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:42 2025 by rpki-client