This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json) Hash identifier: 5nsvUviw/TW8NIFWKj569C+JjAbP80wia+pRv0A1R+A= Subject key identifier: 37:CB:7E:EE:C0:F3:20:43:D5:54:82:83:95:CA:D0:E2:89:56:A9:6A Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft Manifest number: 3B Signing time: Sun 07 Dec 2025 05:30:23 +0000 Manifest this update: Sun 07 Dec 2025 05:30:22 +0000 Manifest next update: Sun 14 Dec 2025 05:30:22 +0000 Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: PCSdl8FBZmXnH053bdriza481Z7Sqn31pKoKE5PmffA=) 2: BAC878D0799511F098E98265C4F9AE02.roa (hash: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw=) 3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: ENyfebcRoladpIqoDMvyVSOny2O0G7/P5ahmxQmU81s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Dec 7 05:30:22 2025 GMT Not After : Dec 14 05:30:22 2025 GMT Subject: CN=693510ef-12de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:57:fd:08:3d:79:d8:d6:d6:5d:7e:59:8a: a0:f3:81:c4:54:11:1d:f5:4c:84:6b:3e:a9:e4:7c: 1c:e9:05:e4:d1:61:cb:0e:20:5a:50:23:39:7d:d4: 3f:a0:1e:a6:ab:fd:d8:39:26:96:96:1c:a5:ff:80: d2:c1:bb:70:ad:04:2c:20:79:87:f9:bb:d4:60:b7: f4:5e:74:a3:63:3b:3a:e5:04:4d:48:a1:0f:52:f3: 95:e0:22:37:74:6e:90:f0:04:7c:c6:57:c5:36:73: f9:65:c7:8e:aa:94:38:30:e8:94:cb:4f:63:56:8d: b7:af:63:58:9c:19:85:11:3d:ff:10:07:74:de:f6: 63:61:5d:bf:14:08:9c:c9:b2:53:8b:92:fe:e5:c3: b5:64:3a:0c:96:9d:13:92:ee:ea:75:89:39:e5:8a: 94:86:18:c6:64:ee:ba:5f:9c:df:f7:ce:17:74:3c: 77:39:fc:11:57:b4:65:8c:7b:c6:3f:33:6e:6c:a8: f6:a7:07:03:0c:bc:95:12:92:cb:f7:8a:8a:a1:e5: 7d:22:d3:9c:96:16:73:98:9a:a8:45:26:60:c9:44: 91:d7:bf:22:6b:31:0f:cb:fd:2d:b5:de:08:1e:87: a5:14:58:85:1e:b0:ef:d8:7c:eb:32:10:ee:fd:93: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:7E:EE:C0:F3:20:43:D5:54:82:83:95:CA:D0:E2:89:56:A9:6A X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:51:6a:f6:12:2f:32:62:e8:af:a9:53:20:5c:62:5a:cf:c4: c2:6f:c3:54:68:d8:11:93:14:15:8f:99:d6:5a:f6:0f:63:8e: 08:15:76:e3:57:c8:39:ee:9d:ae:8a:16:3e:56:a6:93:c9:38: 71:dd:53:ea:6d:48:42:9a:27:95:fc:ac:12:5b:79:33:72:15: cd:3d:74:87:e5:95:25:f3:cf:59:e0:77:99:10:11:61:23:c1: 58:9b:d4:10:61:3f:e3:d4:41:31:cb:ab:49:5c:ef:c0:43:5c: 9d:d6:35:b9:f3:dc:6d:e9:2b:b7:9c:a8:23:c3:28:10:f9:d9: 8b:88:4c:22:78:fe:86:44:e7:69:d9:7a:a8:83:4f:30:ce:5d: 58:be:95:ae:6d:92:d4:31:2e:3c:58:d4:e1:14:d5:f2:07:31: 4b:45:13:ef:34:2e:4c:a6:90:c7:67:5b:53:5c:6c:05:1c:75: 81:02:3b:ff:5d:2a:ac:15:ba:dd:92:9e:7a:b1:e6:62:81:5b: 21:e4:31:7b:78:cd:bf:d9:8e:9b:db:ff:4e:8c:06:57:82:1b: a5:5c:01:1c:e0:01:2a:a6:84:81:f2:34:b3:70:fd:e3:62:60: 7e:5a:7d:5d:37:4f:d0:12:c3:ca:b0:c0:2a:07:11:4a:b5:09: dd:b8:ab:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTEyMDcwNTMwMjJaFw0yNTEyMTQwNTMwMjJaMBgxFjAUBgNV BAMTDTY5MzUxMGVmLTEyZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgNlf9CD152NbWXX5ZiqDzgcRUER31TIRrPqnkfBzpBeTRYcsOIFpQIzl91D+g Hqar/dg5JpaWHKX/gNLBu3CtBCwgeYf5u9Rgt/RedKNjOzrlBE1IoQ9S85XgIjd0 bpDwBHzGV8U2c/llx46qlDgw6JTLT2NWjbevY1icGYURPf8QB3Te9mNhXb8UCJzJ slOLkv7lw7VkOgyWnROS7up1iTnlipSGGMZk7rpfnN/3zhd0PHc5/BFXtGWMe8Y/ M25sqPanBwMMvJUSksv3ioqh5X0i05yWFnOYmqhFJmDJRJHXvyJrMQ/L/S213gge h6UUWIUesO/YfOsyEO79k+tzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN8t+7sDz IEPVVIKDlcrQ4olWqWowHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NjRGLzM2MENBMTdBNzk5NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNL UXNSQWpJMWlKVEhmRTJ6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBRavYSLzJi6K+pUyBcYlrPxMJvw1Ro2BGTFBWPmdZa9g9jjggVduNX yDnuna6KFj5WppPJOHHdU+ptSEKaJ5X8rBJbeTNyFc09dIfllSXzz1ngd5kQEWEj wVib1BBhP+PUQTHLq0lc78BDXJ3WNbnz3G3pK7ecqCPDKBD52YuITCJ4/oZE52nZ eqiDTzDOXVi+la5tktQxLjxY1OEU1fIHMUtFE+80LkymkMdnW1NcbAUcdYECO/9d KqwVut2Snnqx5mKBWyHkMXt4zb/Zjpvb/06MBleCG6VcARzgASqmhIHyNLNw/eNi YH5afV03T9ASw8qwwCoHEUq1Cd24q4Y= -----END CERTIFICATE-----Generated at Mon Dec 8 06:19:25 2025 by rpki-client