This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json) Hash identifier: bLJBRAozhsTuS7dStDenU00BMVPddVjJupA8Qhv9kHw= Subject key identifier: E2:9F:B1:FD:B2:B9:DF:F0:BC:91:BF:E4:56:EE:C3:A5:7C:49:12:D3 Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft Manifest number: FC Signing time: Tue 23 Dec 2025 04:11:37 +0000 Manifest this update: Tue 23 Dec 2025 04:11:36 +0000 Manifest next update: Tue 30 Dec 2025 04:11:36 +0000 Files and hashes: 1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: flFjQn7OIBaD154AWaDcunxSIyLZUFOyfd9GDRiBdtI=) 2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: GCMBGFfjL07x7SqicgzDicIqCejugsZ+LueaE228tBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Validity Not Before: Dec 23 04:11:36 2025 GMT Not After : Dec 30 04:11:36 2025 GMT Subject: CN=694a1679-9da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:5e:d4:00:ef:fa:20:56:13:fa:1b:3f:06: 60:82:e8:fc:87:e3:a9:60:bf:a1:98:74:38:b3:c9: 75:7b:b7:7c:5c:10:ed:eb:de:08:4f:82:9c:79:16: af:d6:b9:54:9d:d1:86:f3:f4:50:32:c4:74:9d:5b: bf:e4:8d:89:21:47:21:d1:00:82:8e:38:a0:be:fa: 00:8f:ac:95:d6:5f:53:47:ac:68:4d:5a:8d:d2:22: 9b:fd:90:43:b9:88:9f:1b:f6:f3:e6:f6:93:db:02: ed:1d:3a:15:7b:df:07:b3:7b:26:a6:53:74:21:28: 69:ac:ab:71:21:2d:04:01:2a:a3:b5:2a:83:76:18: bd:6b:d4:7c:43:fa:73:94:11:55:ec:50:09:88:30: bf:fc:73:1f:1a:e9:df:60:29:1e:94:f5:d3:c4:fc: 5c:f6:e0:7a:66:a3:cc:95:14:8f:b5:38:53:0d:89: b9:4c:6b:d8:54:c6:83:34:75:89:2f:3c:61:e4:3b: 36:25:ca:4f:a1:dd:0a:ef:86:fd:a5:0a:45:95:04: e7:54:23:90:89:5f:59:2b:2c:b9:44:ac:62:b3:fc: 08:0e:56:a2:d7:ff:73:05:41:19:d5:b7:3f:da:bd: 54:74:ab:4a:fa:a1:5c:4d:9e:9d:e2:e1:bf:ab:cf: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9F:B1:FD:B2:B9:DF:F0:BC:91:BF:E4:56:EE:C3:A5:7C:49:12:D3 X509v3 Authority Key Identifier: keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:87:fa:80:94:ba:f9:0a:30:27:8c:31:55:f8:ca:77:6c:4c: 2c:b7:18:9d:ac:f5:60:b1:63:44:45:f5:34:bd:ee:d4:68:0f: f7:25:eb:59:d3:94:5a:92:4f:13:02:6c:84:d3:5a:31:cf:6a: 78:b1:9f:3c:a8:35:b1:1b:85:b8:b1:a9:8e:28:d8:69:b7:72: 12:bd:64:83:7b:24:c3:9a:23:5d:51:3e:d3:29:86:65:aa:b3: 30:8c:78:61:83:48:bb:60:88:18:c5:0d:7f:3d:0f:93:58:dd: 59:90:dd:e2:4c:54:a5:44:28:c4:37:57:11:b7:d5:5e:9a:eb: 89:6a:b3:09:61:39:46:fd:c7:4c:be:95:b1:8d:fd:9f:a1:89: ee:ef:38:48:55:e8:79:0b:b0:18:a0:36:a4:c7:6d:e1:b3:cd: 1e:5b:69:5e:c2:05:d9:c5:ec:c7:2a:46:4f:6c:69:b8:73:0b: 27:5b:6d:5a:6b:c6:68:d3:3b:53:40:02:24:f7:f7:41:65:2f: b6:03:84:5d:d0:5a:62:7c:65:34:0c:f5:9a:d7:c4:72:3a:04: 68:d7:4f:c1:de:6e:c1:ad:3a:be:8a:a1:05:28:2d:df:42:d7: 18:14:8f:07:e3:f8:30:23:af:98:c9:b3:76:be:6e:11:f5:69: 89:9d:f9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E3MzUxMTAvBgNVBAUTKDUzN0IxQkExQzAxQjQ4NjM0NzM4QUExMTU5QUUyQjk1 NTkwREREOTEwHhcNMjUxMjIzMDQxMTM2WhcNMjUxMjMwMDQxMTM2WjAYMRYwFAYD VQQDDA02OTRhMTY3OS05ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2pe1ADv+iBWE/obPwZgguj8h+OpYL+hmHQ4s8l1e7d8XBDt694IT4KceRav 1rlUndGG8/RQMsR0nVu/5I2JIUch0QCCjjigvvoAj6yV1l9TR6xoTVqN0iKb/ZBD uYifG/bz5vaT2wLtHToVe98Hs3smplN0IShprKtxIS0EASqjtSqDdhi9a9R8Q/pz lBFV7FAJiDC//HMfGunfYCkelPXTxPxc9uB6ZqPMlRSPtThTDYm5TGvYVMaDNHWJ Lzxh5Ds2JcpPod0K74b9pQpFlQTnVCOQiV9ZKyy5RKxis/wIDlai1/9zBUEZ1bc/ 2r1UdKtK+qFcTZ6d4uG/q8/UQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKfsf2y ud/wvJG/5Fbuw6V8SRLTMB8GA1UdIwQYMBaAFFN7G6HAG0hjRziqEVmuK5VZDd2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9EMEU5QjFFRTYz OUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNHTkhPS29SV2E0cmxWa04z WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Uzc2JvY0FiU0dOSE9Lb1JXYTRybFZrTjNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTczNS9EMEU5QjFFRTYzOUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNH TkhPS29SV2E0cmxWa04zWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVh/qAlLr5CjAnjDFV+Mp3bEwstxidrPVgsWNERfU0ve7UaA/3JetZ 05Rakk8TAmyE01oxz2p4sZ88qDWxG4W4samOKNhpt3ISvWSDeyTDmiNdUT7TKYZl qrMwjHhhg0i7YIgYxQ1/PQ+TWN1ZkN3iTFSlRCjEN1cRt9VemuuJarMJYTlG/cdM vpWxjf2foYnu7zhIVeh5C7AYoDakx23hs80eW2lewgXZxezHKkZPbGm4cwsnW21a a8Zo0ztTQAIk9/dBZS+2A4Rd0FpifGU0DPWa18RyOgRo10/B3m7BrTq+iqEFKC3f QtcYFI8H4/gwI6+YybN2vm4R9WmJnfmg -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:16 2025 by rpki-client