This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: DpwpanUgAdwawmP+RAhvsSXO7SNNoOLXtQ4lYD/xrfs= Subject key identifier: 7B:3A:00:8C:45:EA:D4:89:21:E4:17:BE:12:83:95:6A:9D:4C:96:64 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 34F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 34F1 Signing time: Mon 22 Dec 2025 14:47:01 +0000 Manifest this update: Mon 22 Dec 2025 14:47:01 +0000 Manifest next update: Mon 29 Dec 2025 14:47:01 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: sqVmADgzXHn5haf7CoOS6I3ZwV8aCeDZHU9S+TeMOyY=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Dec 22 14:47:01 2025 GMT Not After : Dec 29 14:47:01 2025 GMT Subject: CN=694959e5-c679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:ba:a6:7c:e0:1c:97:c7:af:cd:c1:c0:86: b6:0b:7d:f4:76:b2:88:ae:a8:54:8e:5b:03:91:b8: ea:7a:72:5b:40:fd:2c:d3:d3:3e:49:04:72:67:37: 13:61:4b:04:dc:1e:21:64:f9:cf:9f:6a:5b:ec:a5: d3:42:d1:73:d0:9a:08:17:e8:2b:00:85:eb:34:55: 9c:9a:f5:20:98:86:f4:00:d4:3d:3c:78:fe:89:7b: c6:4c:df:e9:7c:18:85:b7:4a:16:e0:d1:b6:4f:f0: 96:54:58:0c:e4:d2:99:76:cb:81:9a:c4:7a:da:8a: 21:40:f2:f3:c2:a0:7f:9a:ab:6c:4e:0b:12:db:11: fa:6a:e5:12:92:4b:9a:c9:6e:37:90:25:e4:3b:7b: 3e:7f:8f:79:e7:1a:c7:bd:db:d7:80:6f:a3:5d:33: 1a:0d:4b:f5:03:49:0c:35:f6:4e:15:3b:34:12:20: 9e:93:a2:3a:c1:8c:47:59:33:d5:55:46:be:fd:73: 1c:c6:51:81:fc:09:ee:97:be:71:d3:49:59:f5:ea: f2:70:84:fa:02:e4:29:cc:b2:56:39:04:0b:33:38: 6f:39:83:24:da:51:af:aa:9f:97:62:9f:be:15:8a: 6f:d6:62:34:4b:8e:39:25:0a:eb:46:1d:bb:15:01: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3A:00:8C:45:EA:D4:89:21:E4:17:BE:12:83:95:6A:9D:4C:96:64 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7a:03:ff:12:de:e1:f9:ec:60:0f:b5:7e:49:4e:b6:54:86: a5:c5:ca:a3:8f:c9:18:23:b8:27:57:fa:d2:f3:1a:f6:a3:37: 4f:a1:e7:df:d2:a7:b6:88:dd:d7:c7:18:57:92:21:39:cf:39: c7:50:be:f8:15:51:68:61:a5:69:f1:52:f1:1b:89:64:4e:ab: 51:65:c8:d0:9d:20:ce:64:1e:91:85:df:40:12:d3:72:6d:60: 0a:d4:63:e6:bb:f6:9f:1c:11:b4:11:a3:e4:53:4a:f0:ca:28: 0e:79:a5:27:42:e3:62:3a:9a:93:84:59:90:cb:f7:77:5d:5a: a5:3a:bf:14:4b:95:52:84:4d:1a:5d:1c:64:15:bf:7e:71:10: 8a:05:14:6f:4c:31:c8:b1:63:3b:d9:0e:84:98:88:45:78:15: 34:7c:84:e4:01:ad:ea:d5:77:a9:0d:7e:b1:b9:43:34:be:37: cb:09:01:7b:fd:a2:bb:6f:54:ce:d8:6b:ae:44:1c:02:70:3e: 61:23:b6:2d:2a:4c:dc:75:94:9d:8c:e3:7d:25:c1:e4:bf:88: 04:36:6d:a5:8f:29:b0:06:37:66:59:ef:bd:9c:f4:50:fc:09: b7:1a:f7:37:42:48:2b:1c:36:75:fd:cf:b5:1c:2b:ff:a7:37: 77:44:6c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUxMjIyMTQ0NzAxWhcNMjUxMjI5MTQ0NzAxWjAYMRYwFAYD VQQDDA02OTQ5NTllNS1jNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmC6pnzgHJfHr83BwIa2C330drKIrqhUjlsDkbjqenJbQP0s09M+SQRyZzcT YUsE3B4hZPnPn2pb7KXTQtFz0JoIF+grAIXrNFWcmvUgmIb0ANQ9PHj+iXvGTN/p fBiFt0oW4NG2T/CWVFgM5NKZdsuBmsR62oohQPLzwqB/mqtsTgsS2xH6auUSkkua yW43kCXkO3s+f4955xrHvdvXgG+jXTMaDUv1A0kMNfZOFTs0EiCek6I6wYxHWTPV VUa+/XMcxlGB/Anul75x00lZ9erycIT6AuQpzLJWOQQLMzhvOYMk2lGvqp+XYp++ FYpv1mI0S445JQrrRh27FQGlMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs6AIxF 6tSJIeQXvhKDlWqdTJZkMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCegP/Et7h+exgD7V+SU62VIalxcqjj8kYI7gnV/rS8xr2ozdPoeff 0qe2iN3XxxhXkiE5zznHUL74FVFoYaVp8VLxG4lkTqtRZcjQnSDOZB6Rhd9AEtNy bWAK1GPmu/afHBG0EaPkU0rwyigOeaUnQuNiOpqThFmQy/d3XVqlOr8US5VShE0a XRxkFb9+cRCKBRRvTDHIsWM72Q6EmIhFeBU0fITkAa3q1XepDX6xuUM0vjfLCQF7 /aK7b1TO2GuuRBwCcD5hI7YtKkzcdZSdjON9JcHkv4gENm2ljymwBjdmWe+9nPRQ /Am3Gvc3QkgrHDZ1/c+1HCv/pzd3RGxc -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:06 2025 by rpki-client