This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: 1MUnPBvkQoz0LNTX2nGUakSbcu3M6X7y9c5UimUMVbs= Subject key identifier: E1:97:C8:5A:90:FF:04:D9:EF:69:3B:67:BD:5B:4E:3D:58:CA:B8:C6 Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 02 Signing time: Mon 15 Dec 2025 10:24:18 +0000 Manifest this update: Mon 15 Dec 2025 10:24:17 +0000 Manifest next update: Mon 22 Dec 2025 10:24:17 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: 6YVs7mUX4fGl6Lf4WkHRbtJ+seA5ZBYXokPHhXX0Eno=) 2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: 9y0iXHRShul2Weaui/QHA5FE1MQsTrAU5mMVd8q+b7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Dec 15 10:24:17 2025 GMT Not After : Dec 22 10:24:17 2025 GMT Subject: CN=693fe1d1-5ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4b:17:27:80:2f:5a:f7:8d:6e:f3:25:4c:b5: 47:9c:64:5a:19:34:d0:a2:68:ac:50:4f:fc:71:5c: 0b:e0:57:38:87:b8:84:34:7c:5b:a2:22:11:e0:ec: 21:83:7d:90:65:a0:35:f2:9a:07:bf:fd:3d:ef:1d: b8:d8:57:2b:62:3d:f8:a4:89:73:ef:9d:93:89:e4: 07:e0:50:91:61:ae:9b:17:e0:cb:23:99:71:96:65: ca:6c:1f:77:5f:a1:32:77:c7:c6:99:c8:aa:64:a4: 77:48:0f:cb:3b:06:e3:a5:0f:51:99:bc:3a:4a:8a: 5c:36:47:91:ef:8b:bd:d2:b5:2a:a2:1f:b9:8d:45: 95:bd:6b:4f:0f:c9:40:03:7c:33:80:16:4d:64:66: 71:1b:d9:d3:a9:98:bf:34:22:c6:fd:54:a5:b4:95: 39:20:10:95:4e:8e:37:89:8a:83:5a:0e:5b:37:42: 91:bf:a9:d6:01:e6:30:b6:6b:f0:a0:76:37:33:25: 7b:6b:95:f8:fb:74:a0:e0:d7:c9:ed:d5:bd:86:8c: 2b:bd:05:a7:cb:ce:65:bd:46:32:35:48:77:11:60: 03:25:ff:ac:b6:14:ac:48:7e:0a:7f:76:f0:c9:8e: 2f:4d:4c:1d:e9:1c:9c:5c:4b:b1:07:e1:8b:72:4e: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:C8:5A:90:FF:04:D9:EF:69:3B:67:BD:5B:4E:3D:58:CA:B8:C6 X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:aa:b0:b2:13:78:f5:c0:75:3d:9d:a2:d0:50:42:25:d1:40: 43:8b:17:9c:50:f3:e9:ab:ee:da:94:22:44:f9:eb:50:5b:02: ab:d0:42:59:e6:1b:14:bc:07:88:99:5f:71:b1:af:5d:81:2c: fc:82:51:71:a0:b2:e0:29:18:cd:b0:ce:73:47:30:c7:f7:30: a7:73:92:32:70:ca:29:50:fc:30:0f:1c:dd:64:6d:c2:e8:13: b0:0b:e0:ee:b3:67:fb:05:98:0b:a1:b5:77:e9:84:a9:1a:ff: 36:e7:0e:90:ba:d8:d6:a9:92:86:db:a7:1d:96:7c:ae:2d:3f: 76:e7:3a:dd:14:7c:cb:31:b3:07:3e:00:44:c6:a1:48:b1:02: d2:96:cc:93:71:31:21:f2:cf:c9:ed:05:96:1d:6f:5f:b4:2e: b1:45:a6:58:a7:bb:58:d0:94:bb:92:ca:0a:cd:f5:3c:95:c2: 4b:00:15:fd:59:aa:87:b4:aa:ef:cf:5e:d8:89:46:31:da:ed: 83:87:ba:d3:b5:b2:e8:c9:b2:e6:22:08:65:16:5e:cf:c0:f4: fe:98:d8:57:c4:72:03:d1:0d:13:c1:d6:c5:a3:0b:a9:6f:58: e2:f2:4e:46:b2:61:e9:fc:e6:d1:9c:fa:3c:4f:48:65:a4:72: 14:0e:cf:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNTEyMTUxMDI0MTdaFw0yNTEyMjIxMDI0MTdaMBgxFjAUBgNV BAMMDTY5M2ZlMWQxLTVjZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwSxcngC9a941u8yVMtUecZFoZNNCiaKxQT/xxXAvgVziHuIQ0fFuiIhHg7CGD fZBloDXymge//T3vHbjYVytiPfikiXPvnZOJ5AfgUJFhrpsX4MsjmXGWZcpsH3df oTJ3x8aZyKpkpHdID8s7BuOlD1GZvDpKilw2R5Hvi73StSqiH7mNRZW9a08PyUAD fDOAFk1kZnEb2dOpmL80Isb9VKW0lTkgEJVOjjeJioNaDls3QpG/qdYB5jC2a/Cg djczJXtrlfj7dKDg18nt1b2GjCu9BafLzmW9RjI1SHcRYAMl/6y2FKxIfgp/dvDJ ji9NTB3pHJxcS7EH4YtyTi8XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ZfIWpD/ BNnvaTtnvVtOPVjKuMYwHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOqsLITePXAdT2dotBQQiXRQEOLF5xQ8+mr7tqUIkT561BbAqvQQlnm GxS8B4iZX3Gxr12BLPyCUXGgsuApGM2wznNHMMf3MKdzkjJwyilQ/DAPHN1kbcLo E7AL4O6zZ/sFmAuhtXfphKka/zbnDpC62Napkobbpx2WfK4tP3bnOt0UfMsxswc+ AETGoUixAtKWzJNxMSHyz8ntBZYdb1+0LrFFplinu1jQlLuSygrN9TyVwksAFf1Z qoe0qu/PXtiJRjHa7YOHutO1sujJsuYiCGUWXs/A9P6Y2FfEcgPRDRPB1sWjC6lv WOLyTkayYen85tGc+jxPSGWkchQOz6I= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:34 2025 by rpki-client