This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: X4hpou3TtQrVI8U0XckaVs/xlFYblCIP/0syLDwraLs= Subject key identifier: 7B:FB:C4:C1:77:D4:E0:3C:83:63:B8:31:D3:A8:12:6E:55:27:2D:93 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 014B Signing time: Tue 23 Dec 2025 03:16:25 +0000 Manifest this update: Tue 23 Dec 2025 03:16:24 +0000 Manifest next update: Tue 30 Dec 2025 03:16:24 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: 01T4XbMKoEmJZBT1z2wAMchBFFvog2BuRqfLss7bodk=) 2: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: YlzrLadmLZj8tcRLHED6W+B0nbQveqQqdBBbNI84e3w=) 3: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: qn4Fpxt7PWA/6hWMWYVeaGljIqcp672ouf6S4bONl/4=) 4: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: Kq9z18t39rAjNqTDFxx/COpb6FxmGJ+tPX1EqE4L/i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Dec 23 03:16:24 2025 GMT Not After : Dec 30 03:16:24 2025 GMT Subject: CN=694a0989-7b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:a4:da:44:a6:2e:7a:9a:6e:32:32:e7:c1: 65:4e:da:91:12:ff:4c:8b:5a:d4:dd:f8:ab:18:80: 2d:18:68:06:f9:d0:a9:95:cb:b0:81:88:34:d5:b9: 30:52:a5:4e:60:71:93:e0:21:d7:97:49:a8:bd:2a: ef:3d:58:e2:ab:34:6f:eb:ee:65:e0:5b:70:79:be: 46:4c:da:d0:d6:88:9f:05:a9:47:46:fa:49:08:4e: 30:f4:10:92:f4:1d:63:8e:66:19:cf:13:3c:ae:bf: f9:25:48:51:8e:3f:77:a8:2d:a6:aa:d4:09:cb:05: 58:c1:02:cc:31:7a:86:1d:0d:7a:01:e4:00:24:8d: 3b:c6:47:e5:79:5a:75:02:13:9a:18:f4:99:ca:b5: ca:b0:b8:09:ed:43:0e:b7:23:24:eb:2d:12:cc:b4: 7c:8c:c2:c7:40:cf:41:d4:87:ae:17:70:5a:80:88: f5:47:f8:63:44:6d:8a:17:6f:f3:97:8f:a8:f0:51: d7:32:95:5a:24:53:ba:57:7d:56:72:80:fb:56:3c: 7b:0b:8b:db:8c:62:d2:66:14:33:43:8d:b5:22:fa: aa:bb:a0:9c:32:9e:77:50:2c:dd:ba:61:c2:6b:7d: a3:5f:29:2c:01:dd:8a:cd:8d:2c:6d:5b:a2:a7:9c: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FB:C4:C1:77:D4:E0:3C:83:63:B8:31:D3:A8:12:6E:55:27:2D:93 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:68:1e:4a:b9:a4:88:56:02:25:e9:df:50:8d:00:04:ed:0a: 19:06:4a:84:62:f5:69:21:0e:22:6a:f6:6d:6b:3d:93:da:2a: 42:59:98:1a:2a:e0:a9:9e:f8:46:ad:70:4d:b4:11:2d:03:15: f7:9e:f2:19:43:fb:20:de:ff:7d:68:35:ad:25:a9:b8:43:f2: 44:fc:77:c3:f8:ce:27:ca:f0:25:9b:9c:aa:4c:e7:bf:10:76: 97:85:d5:5f:de:cc:6c:4d:8b:7b:8e:39:59:47:97:4a:f6:1d: 3f:26:b5:c1:f9:f8:e1:01:c1:28:d2:d0:5e:69:f5:ed:ab:ba: 20:34:2d:ad:2e:96:df:ae:14:7b:76:23:71:47:96:02:58:e4: 66:07:aa:d3:c0:a1:af:03:65:f7:3a:1f:61:15:0d:b5:2c:1a: b2:6c:3c:59:9e:b4:56:e5:3b:86:a5:af:2c:28:2b:b5:ca:ce: 40:b6:c0:99:30:f1:b4:a7:a0:3c:f7:ce:2d:7c:29:d0:e2:70: d6:a9:82:64:23:75:8f:f4:a6:ea:ce:db:16:4e:67:91:4c:d8: b5:9c:58:a7:a2:9b:55:af:2f:a0:d2:c8:7a:71:2d:26:3f:25: a9:05:20:ba:b0:fd:96:55:ee:44:d4:3d:3c:65:28:c8:6c:fd: 57:b6:73:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUxMjIzMDMxNjI0WhcNMjUxMjMwMDMxNjI0WjAYMRYwFAYD VQQDDA02OTRhMDk4OS03YjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQCk2kSmLnqabjIy58FlTtqREv9Mi1rU3firGIAtGGgG+dCplcuwgYg01bkw UqVOYHGT4CHXl0movSrvPVjiqzRv6+5l4Ftweb5GTNrQ1oifBalHRvpJCE4w9BCS 9B1jjmYZzxM8rr/5JUhRjj93qC2mqtQJywVYwQLMMXqGHQ16AeQAJI07xkfleVp1 AhOaGPSZyrXKsLgJ7UMOtyMk6y0SzLR8jMLHQM9B1IeuF3BagIj1R/hjRG2KF2/z l4+o8FHXMpVaJFO6V31WcoD7Vjx7C4vbjGLSZhQzQ421Ivqqu6CcMp53UCzdumHC a32jXyksAd2KzY0sbVuip5ypwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv7xMF3 1OA8g2O4MdOoEm5VJy2TMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuaB5KuaSIVgIl6d9QjQAE7QoZBkqEYvVpIQ4iavZtaz2T2ipCWZga KuCpnvhGrXBNtBEtAxX3nvIZQ/sg3v99aDWtJam4Q/JE/HfD+M4nyvAlm5yqTOe/ EHaXhdVf3sxsTYt7jjlZR5dK9h0/JrXB+fjhAcEo0tBeafXtq7ogNC2tLpbfrhR7 diNxR5YCWORmB6rTwKGvA2X3Oh9hFQ21LBqybDxZnrRW5TuGpa8sKCu1ys5AtsCZ MPG0p6A8984tfCnQ4nDWqYJkI3WP9KbqztsWTmeRTNi1nFinoptVry+g0sh6cS0m PyWpBSC6sP2WVe5E1D08ZSjIbP1XtnOb -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:05 2025 by rpki-client