This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: kmP9CT51BBYgratt1I0Uto+UolrQMg2BDF7rP4aNDWc= Subject key identifier: 1A:28:19:7F:00:02:81:6E:6E:F2:4B:AE:56:D6:22:FA:A7:99:FB:51 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0565 Signing time: Sat 06 Dec 2025 22:16:52 +0000 Manifest this update: Sat 06 Dec 2025 22:16:51 +0000 Manifest next update: Sat 13 Dec 2025 22:16:51 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: WWQeGX//MJkGQMMHeAVULXEl0nGRHZ4xZ2z0TxkggGc=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Dec 6 22:16:51 2025 GMT Not After : Dec 13 22:16:51 2025 GMT Subject: CN=6934ab54-aff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:e7:77:ec:4c:1e:a9:a2:95:7e:53:89:7b: e5:fa:71:72:a3:89:04:96:90:15:30:61:0b:be:a6: 61:76:41:48:32:45:7d:bb:83:ca:5e:52:7b:f5:9b: 8c:df:63:35:43:ca:e4:37:1c:36:71:97:d9:f8:c1: 32:80:c0:d4:e1:27:0f:98:5d:67:4f:c5:eb:54:d1: fc:7e:84:b4:41:4e:e4:52:df:9d:f7:6e:0c:b2:ba: 09:72:b0:80:d9:7f:0c:37:01:e9:a3:58:84:34:4b: ea:b5:f0:ea:80:fe:5f:0f:2e:65:76:5d:c6:75:38: 7b:6f:74:af:48:ec:ea:7b:3f:ab:f1:c8:28:60:d0: fc:1f:2a:73:1e:cc:4e:e2:b4:91:1d:78:b0:56:62: 74:04:b4:09:68:bb:97:fc:26:95:1c:21:ff:71:cb: 2c:cd:7b:00:c1:d0:cf:9b:b2:f7:d3:13:c7:64:b7: b7:79:8f:79:cf:86:6e:94:42:45:de:2d:dc:7c:45: 67:72:b8:c8:4b:14:6f:4a:0e:32:db:e5:c8:84:1e: c2:e2:1d:9b:71:7b:20:ea:94:97:01:dc:69:bc:70: 38:ba:f8:e5:24:3a:ba:a0:45:b4:29:49:28:f1:bd: d6:54:7d:60:31:7e:b0:bc:d1:67:fe:dc:59:f0:8c: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:19:7F:00:02:81:6E:6E:F2:4B:AE:56:D6:22:FA:A7:99:FB:51 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:0c:47:9e:9d:b8:8a:89:69:b9:5a:ef:5a:66:54:ee:4f: 2c:38:88:b7:d1:a0:44:aa:1b:36:bd:9e:25:a3:fc:3a:63:22: 1c:b8:b9:b7:a4:2d:34:6e:42:80:17:a1:54:89:ae:8b:4a:4c: 70:3d:46:bd:02:20:d2:62:1e:85:3f:dd:33:95:38:b0:59:f3: 1d:93:52:3a:36:9a:44:a1:91:90:ca:a8:92:98:6b:75:35:6f: ea:b8:27:1a:fd:bf:52:5c:5a:26:e2:d6:24:89:43:4c:9d:ef: 55:76:18:b7:8e:84:1e:4f:5d:4c:d4:47:af:0b:3b:36:97:46: e8:b3:c2:ff:65:ef:db:26:c7:e9:74:56:ac:a4:ee:d7:b0:4c: d5:12:2a:42:41:6a:d5:a5:f2:01:59:66:f0:71:ba:60:aa:92: f6:55:71:d5:99:66:db:f1:54:9d:a4:eb:8d:66:52:3d:aa:29: 20:dd:66:a7:b5:ea:95:89:1e:08:94:07:10:88:6e:a4:e4:6f: 39:2b:74:f7:30:21:4e:2b:d9:4d:3d:ec:41:83:e3:71:99:b8: 8b:af:b9:95:11:77:29:4f:b1:b7:b6:5d:68:5a:cc:a1:ff:88: 5a:c8:fb:5d:84:e3:b7:3a:06:2f:2a:db:13:c7:4f:90:b2:81: 0f:85:02:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUxMjA2MjIxNjUxWhcNMjUxMjEzMjIxNjUxWjAYMRYwFAYD VQQDEw02OTM0YWI1NC1hZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vnnd+xMHqmilX5TiXvl+nFyo4kElpAVMGELvqZhdkFIMkV9u4PKXlJ79ZuM 32M1Q8rkNxw2cZfZ+MEygMDU4ScPmF1nT8XrVNH8foS0QU7kUt+d924MsroJcrCA 2X8MNwHpo1iENEvqtfDqgP5fDy5ldl3GdTh7b3SvSOzqez+r8cgoYND8HypzHsxO 4rSRHXiwVmJ0BLQJaLuX/CaVHCH/ccsszXsAwdDPm7L30xPHZLe3eY95z4ZulEJF 3i3cfEVncrjISxRvSg4y2+XIhB7C4h2bcXsg6pSXAdxpvHA4uvjlJDq6oEW0KUko 8b3WVH1gMX6wvNFn/txZ8IysSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBooGX8A AoFubvJLrlbWIvqnmftRMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2EgxHnp24iolpuVrvWmZU7k8sOIi30aBEqhs2vZ4lo/w6YyIcuLm3 pC00bkKAF6FUia6LSkxwPUa9AiDSYh6FP90zlTiwWfMdk1I6NppEoZGQyqiSmGt1 NW/quCca/b9SXFom4tYkiUNMne9Vdhi3joQeT11M1EevCzs2l0bos8L/Ze/bJsfp dFaspO7XsEzVEipCQWrVpfIBWWbwcbpgqpL2VXHVmWbb8VSdpOuNZlI9qikg3Wan teqViR4IlAcQiG6k5G85K3T3MCFOK9lNPexBg+NxmbiLr7mVEXcpT7G3tl1oWsyh /4hayPtdhOO3OgYvKtsTx0+QsoEPhQLS -----END CERTIFICATE-----Generated at Mon Dec 8 04:51:30 2025 by rpki-client