This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: /8locZ4J+1NNpezzMzWMfHr0isnp2XADR+BctWDhTjw= Subject key identifier: 63:16:A8:B3:68:F0:71:FD:17:D9:C9:8E:34:B8:36:33:C1:C9:2A:DA Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 014B Signing time: Wed 03 Dec 2025 02:49:54 +0000 Manifest this update: Wed 03 Dec 2025 02:49:54 +0000 Manifest next update: Wed 10 Dec 2025 02:49:54 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: L1MjtVfOOGRC4SBogA9On4A99ElhvEdOGwPuHL8Uaas=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: 6O+gN+s3nYuHADI/TEqtB2x9DBi8NBjryPUz/maJeSc=) 3: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: Tr2BD+TjkZLpINWnT5Dv/SJcrrMfCgyU3wvXQZmqI2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Dec 3 02:49:54 2025 GMT Not After : Dec 10 02:49:54 2025 GMT Subject: CN=692fa552-80f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:9f:71:b7:db:88:cb:2f:ff:a4:1b:02:7d: fa:9c:89:d3:25:40:4c:0f:86:4d:1e:29:81:a8:ff: 63:66:de:9c:68:75:da:fb:54:f7:23:11:1d:87:8d: cc:16:41:8e:3a:88:6a:31:87:5d:be:aa:b7:07:f4: 84:e4:a2:5e:03:2e:e3:5b:b5:f2:fe:a9:e7:4e:32: 98:92:29:f2:f7:28:c6:3f:26:b3:eb:7b:af:03:0a: 2a:d3:4c:15:05:56:87:f8:12:63:31:83:d1:f9:f2: d2:df:a9:e5:c2:21:cc:6e:d3:d6:ae:37:f9:9a:ad: 1d:cb:86:11:bf:44:15:c3:d4:cf:90:1c:1f:d8:82: 74:56:c8:ee:62:0b:e2:50:63:6f:db:bb:8b:27:ac: e0:1c:d4:fd:9a:37:5c:6c:ba:0d:6a:26:59:4a:63: 4a:aa:d1:9c:9b:89:0d:46:95:51:c0:a3:7f:fb:46: 9d:f0:24:53:92:9d:3d:fe:cb:8b:83:00:07:4d:9c: c6:63:90:bb:3d:68:fc:4f:aa:c2:09:a0:b0:4c:fc: 5b:ad:53:1b:d4:63:a7:a3:79:5f:fc:eb:1a:f9:27: 73:7b:ce:79:dc:7a:91:ee:cc:69:11:b7:f3:73:e8: 7e:91:76:ce:98:15:78:af:cc:dd:a2:f6:26:be:2a: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:16:A8:B3:68:F0:71:FD:17:D9:C9:8E:34:B8:36:33:C1:C9:2A:DA X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:c8:ea:35:98:21:ed:b2:e6:18:77:00:43:42:8e:c2:bb:23: 07:15:27:90:8e:32:e8:db:30:f3:7f:1f:e9:f3:0f:cd:64:9c: b8:0a:6b:3e:f6:7c:fd:f8:03:3d:b4:ec:2b:1e:e2:ae:f7:8c: 0e:81:5f:8e:ab:2b:bf:80:87:c3:34:b4:f9:23:07:2f:ad:5e: ab:48:8d:ff:1d:5f:24:d3:75:f9:ce:fd:5c:b3:9d:79:b8:5b: 13:93:71:33:5e:ac:27:56:fe:2e:8c:8d:c6:0d:79:5c:87:bd: ec:49:3b:11:a7:25:d5:81:49:d4:44:54:14:8d:f6:28:fc:c7: 8c:3e:d7:08:42:86:89:55:cd:ba:38:58:7b:79:ed:88:65:73: e8:9e:6b:66:71:e5:2b:83:de:aa:b8:fa:35:b6:e0:bf:59:0a: d9:f3:ce:2d:f9:85:db:63:c6:8c:fc:e8:97:1e:bb:e7:6e:b4: a5:66:90:1a:ce:43:b3:04:9a:19:e6:31:91:00:25:4b:07:2a: 81:4a:6c:57:c7:c6:1e:6f:7a:6c:ee:7f:95:d1:d7:2a:02:56: 3e:3d:b3:1c:a6:19:98:d3:c0:72:0d:6a:03:dc:9a:30:1e:36: e5:48:cd:d2:89:55:4a:85:cd:06:53:31:e4:f2:dc:c9:99:9e: 9c:a0:7d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUxMjAzMDI0OTU0WhcNMjUxMjEwMDI0OTU0WjAYMRYwFAYD VQQDEw02OTJmYTU1Mi04MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5afcbfbiMsv/6QbAn36nInTJUBMD4ZNHimBqP9jZt6caHXa+1T3IxEdh43M FkGOOohqMYddvqq3B/SE5KJeAy7jW7Xy/qnnTjKYkiny9yjGPyaz63uvAwoq00wV BVaH+BJjMYPR+fLS36nlwiHMbtPWrjf5mq0dy4YRv0QVw9TPkBwf2IJ0VsjuYgvi UGNv27uLJ6zgHNT9mjdcbLoNaiZZSmNKqtGcm4kNRpVRwKN/+0ad8CRTkp09/suL gwAHTZzGY5C7PWj8T6rCCaCwTPxbrVMb1GOno3lf/Osa+Sdze8553HqR7sxpEbfz c+h+kXbOmBV4r8zdovYmviohdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMWqLNo 8HH9F9nJjjS4NjPBySraMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkyOo1mCHtsuYYdwBDQo7CuyMHFSeQjjLo2zDzfx/p8w/NZJy4Cms+ 9nz9+AM9tOwrHuKu94wOgV+Oqyu/gIfDNLT5IwcvrV6rSI3/HV8k03X5zv1cs515 uFsTk3EzXqwnVv4ujI3GDXlch73sSTsRpyXVgUnURFQUjfYo/MeMPtcIQoaJVc26 OFh7ee2IZXPonmtmceUrg96quPo1tuC/WQrZ884t+YXbY8aM/OiXHrvnbrSlZpAa zkOzBJoZ5jGRACVLByqBSmxXx8Yeb3ps7n+V0dcqAlY+PbMcphmY08ByDWoD3Jow HjblSM3SiVVKhc0GUzHk8tzJmZ6coH1d -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:26 2025 by rpki-client