This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json) Hash identifier: vCKKO4eADQe7HRyN4eIGzlj0VhWqVdTvRtBR9z/sXuc= Subject key identifier: A8:67:AA:A0:19:A1:B7:1A:64:E8:E1:3F:1B:66:8C:D0:E4:67:4F:78 Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft Manifest number: F4 Signing time: Wed 03 Dec 2025 03:37:47 +0000 Manifest this update: Wed 03 Dec 2025 03:37:47 +0000 Manifest next update: Wed 10 Dec 2025 03:37:47 +0000 Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: 2oBP92+E/VFooCSxm0iR8mGeFHK39QV623IoLlS4xlg=) 2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Validity Not Before: Dec 3 03:37:47 2025 GMT Not After : Dec 10 03:37:47 2025 GMT Subject: CN=692fb08b-c29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:c5:cc:42:c9:3c:a2:1b:a4:2c:6e:76:f9: f1:cb:9a:08:0d:4a:8a:11:28:20:0d:1b:b3:63:26: 40:e2:ca:ea:c0:6b:9d:79:dc:30:b9:64:6f:60:ef: e6:2f:e0:44:5f:ca:5e:d7:dd:5e:02:5e:ce:b6:b0: 6b:30:e7:1a:95:76:6a:9c:8a:41:fc:c2:4d:c5:8e: 5b:a4:c7:0d:21:75:e6:27:b3:d5:1a:64:b4:a8:fb: 27:0a:7f:45:58:88:17:16:c7:82:33:54:cc:a8:30: d3:a4:46:a1:ae:eb:fe:7d:a2:a5:1d:9d:4e:cb:77: f5:52:41:9a:00:65:60:ae:a3:a7:5a:7a:b8:9f:69: 63:a1:99:8e:8d:24:40:36:90:2a:cf:6b:be:18:f5: 3f:af:eb:e1:b7:fa:14:dc:18:2d:e9:87:89:6f:e7: 44:e3:7e:9c:f6:f1:33:ca:be:83:54:f2:69:c1:51: 6d:b0:db:fa:d0:ae:2f:e9:1d:9a:1b:cd:85:fb:9b: 2d:8c:58:c6:df:67:c6:69:3a:de:73:2d:eb:7a:56: d1:6c:4b:38:da:77:6d:09:46:3e:70:a5:95:31:0d: 6b:35:3f:70:75:ab:08:cc:de:68:25:35:62:cb:e3: f4:8a:9e:77:11:d6:f2:89:2a:af:ee:9e:70:d1:0c: b9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:67:AA:A0:19:A1:B7:1A:64:E8:E1:3F:1B:66:8C:D0:E4:67:4F:78 X509v3 Authority Key Identifier: keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:0b:cc:01:4c:b0:f9:e2:41:8b:8b:6c:9c:58:f1:f1:10:32: a7:09:ee:1d:ef:39:fc:84:bf:e7:d5:93:2c:aa:a9:04:5b:63: e1:1d:a2:10:f1:f8:fa:89:4a:0c:1a:49:4c:0c:ed:e9:7a:8a: 32:d8:70:a5:c3:29:d9:86:16:c6:e6:40:fb:bb:b8:ef:c5:92: 62:8d:0f:fa:10:d7:16:33:c3:eb:f8:35:b5:a4:d4:a0:e1:3d: f7:23:3c:9a:27:8d:6c:c1:21:ba:14:b8:b9:a6:35:f3:26:47: e8:cc:1b:1a:2f:32:e5:49:60:e8:27:07:13:ab:fe:29:06:6c: 11:c4:e5:6f:3f:ca:af:25:5d:99:f6:f1:89:ff:4e:69:3a:b4: 5b:0b:b3:98:2a:6b:2d:e7:25:f9:d8:b1:25:0e:38:93:a0:9b: e7:0a:6d:15:09:4d:5a:05:2a:db:ab:5f:65:3d:15:8a:23:34: ce:f7:f3:e0:91:6d:5b:01:c5:d7:85:ad:fd:9d:cd:80:f2:51: 56:a1:35:b6:e6:6a:4d:aa:bd:37:a5:77:d5:a8:cb:e7:1c:e9: 53:f4:d1:56:05:6d:c8:76:7f:be:e6:9e:0a:ff:fb:3b:76:de: fe:70:f7:4e:cd:e1:09:18:ed:0f:62:66:58:61:8e:07:cd:a2: 9c:61:d9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1 RkM0ODM0MEIwHhcNMjUxMjAzMDMzNzQ3WhcNMjUxMjEwMDMzNzQ3WjAYMRYwFAYD VQQDEw02OTJmYjA4Yi1jMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLLFzELJPKIbpCxudvnxy5oIDUqKESggDRuzYyZA4srqwGudedwwuWRvYO/m L+BEX8pe191eAl7OtrBrMOcalXZqnIpB/MJNxY5bpMcNIXXmJ7PVGmS0qPsnCn9F WIgXFseCM1TMqDDTpEahruv+faKlHZ1Oy3f1UkGaAGVgrqOnWnq4n2ljoZmOjSRA NpAqz2u+GPU/r+vht/oU3Bgt6YeJb+dE436c9vEzyr6DVPJpwVFtsNv60K4v6R2a G82F+5stjFjG32fGaTrecy3relbRbEs42ndtCUY+cKWVMQ1rNT9wdasIzN5oJTVi y+P0ip53EdbyiSqv7p5w0Qy5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhnqqAZ obcaZOjhPxtmjNDkZ094MB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0 UUZkdUFBYnp1OFpmeElOQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkC8wBTLD54kGLi2ycWPHxEDKnCe4d7zn8hL/n1ZMsqqkEW2PhHaIQ 8fj6iUoMGklMDO3peooy2HClwynZhhbG5kD7u7jvxZJijQ/6ENcWM8Pr+DW1pNSg 4T33IzyaJ41swSG6FLi5pjXzJkfozBsaLzLlSWDoJwcTq/4pBmwRxOVvP8qvJV2Z 9vGJ/05pOrRbC7OYKmst5yX52LElDjiToJvnCm0VCU1aBSrbq19lPRWKIzTO9/Pg kW1bAcXXha39nc2A8lFWoTW25mpNqr03pXfVqMvnHOlT9NFWBW3Idn++5p4K//s7 dt7+cPdOzeEJGO0PYmZYYY4HzaKcYdm0 -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:57 2025 by rpki-client