This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: v2yXS+1MgQHekNif5f1VlMO1lStekhz5vjZdo6Q0KPQ= Subject key identifier: 46:1D:62:F2:D3:A4:31:F6:DD:0A:D1:3F:42:0B:44:CF:D4:C0:25:02 Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: 0A Signing time: Wed 03 Dec 2025 06:09:43 +0000 Manifest this update: Wed 03 Dec 2025 06:09:43 +0000 Manifest next update: Wed 10 Dec 2025 06:09:43 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: 4URH3NAXFgAdtcgmB4Qp1xE7g/MM9q97bc14jtxIxTs=) 2: C6B0BA0EC37D11F0A205F578C4F9AE02.roa (hash: tub+Z8WVlBzcWOU2IfPK/efOM91HFbQq95uFwNMo7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Dec 3 06:09:43 2025 GMT Not After : Dec 10 06:09:43 2025 GMT Subject: CN=692fd427-59fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:8f:5b:8c:c0:04:5d:e9:cf:16:29:cf:40: 28:9b:14:a5:fa:f4:f8:ad:10:65:0b:fc:e4:c1:f3: 9a:78:bf:b7:9d:0c:3f:ad:33:fc:b6:e1:b0:5f:76: 3a:82:a8:7b:9b:e7:97:81:16:86:82:4d:34:57:db: 79:b7:00:ff:2f:9b:a0:ec:a7:04:28:ce:93:f8:9c: 08:99:8f:9d:fd:da:7b:47:cf:a8:e5:7f:d2:0f:02: 61:f1:16:ac:87:3e:48:68:7e:c3:25:7d:b2:d0:b6: e7:59:bd:bc:00:40:77:44:96:1a:9a:e0:38:bf:80: 80:1d:43:a3:54:3f:ef:c5:09:13:c7:d8:24:b6:ea: d1:60:d9:21:0f:d9:6d:6f:46:21:52:62:3e:67:66: 06:a8:ea:e3:ec:e2:7c:68:18:a6:80:6a:79:7a:6f: 75:6e:ff:6c:2e:99:de:fe:41:28:76:32:da:a2:ea: a1:ca:d3:23:0a:72:01:50:36:9f:fb:f6:80:f4:49: 6d:a4:b3:fc:cf:ed:b6:95:de:54:bb:05:d4:90:1a: e1:91:d5:38:7e:58:4e:4a:f3:f2:dc:25:43:e6:46: 79:95:33:e6:c2:2d:07:fb:c5:e7:89:fe:f5:f9:28: 2c:7f:4d:63:46:4c:b0:bc:8f:2f:45:46:60:c7:4f: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1D:62:F2:D3:A4:31:F6:DD:0A:D1:3F:42:0B:44:CF:D4:C0:25:02 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:19:ce:6b:d0:fd:ea:f9:41:01:24:ea:cc:98:10:ee:ce:b0: 2a:04:0d:e4:23:34:ee:43:e9:50:0c:1c:22:bf:08:0b:50:28: 9a:40:22:fb:1a:bf:4b:ad:f7:0a:20:10:e1:34:26:0d:64:d0: cb:ba:22:57:f2:8b:c2:c0:96:48:fe:56:fa:a2:eb:19:b5:03: 41:44:28:a1:aa:3b:e0:2f:4c:1b:72:d2:4f:e9:ad:38:5d:9a: 30:ac:1e:9d:8c:7f:42:b5:71:9b:ea:6f:b3:a2:6e:c2:df:03: 26:0e:ae:ac:70:b4:d9:e3:50:d1:ca:20:bb:9a:3c:ff:c2:b5: 4b:6b:04:30:2f:a7:cb:ab:9c:18:10:b9:20:a1:b9:33:1a:e0: 3f:04:d7:3b:41:16:34:fd:df:f1:db:ec:63:92:af:54:ff:91: a2:3d:1a:5d:74:a7:50:9a:2d:a4:9b:27:b1:89:f4:51:ca:f9: 6e:dd:2c:ef:9e:62:e5:8d:06:ab:ef:07:cc:2a:31:d4:b3:91: 76:3c:5c:27:23:f3:c2:92:46:c0:76:02:d7:1a:42:8d:84:e4: ae:e5:59:9c:74:88:74:10:ce:5c:2f:77:2d:79:b3:28:27:7e: 38:ee:2e:06:4d:b7:77:49:c5:cb:f8:dc:06:0e:e0:04:ed:08: 3f:cf:a6:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNTEyMDMwNjA5NDNaFw0yNTEyMTAwNjA5NDNaMBgxFjAUBgNV BAMTDTY5MmZkNDI3LTU5ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi449bjMAEXenPFinPQCibFKX69PitEGUL/OTB85p4v7edDD+tM/y24bBfdjqC qHub55eBFoaCTTRX23m3AP8vm6DspwQozpP4nAiZj5392ntHz6jlf9IPAmHxFqyH PkhofsMlfbLQtudZvbwAQHdElhqa4Di/gIAdQ6NUP+/FCRPH2CS26tFg2SEP2W1v RiFSYj5nZgao6uPs4nxoGKaAanl6b3Vu/2wumd7+QSh2Mtqi6qHK0yMKcgFQNp/7 9oD0SW2ks/zP7baV3lS7BdSQGuGR1Th+WE5K8/LcJUPmRnmVM+bCLQf7xeeJ/vX5 KCx/TWNGTLC8jy9FRmDHT/3JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURh1i8tOk MfbdCtE/QgtEz9TAJQIwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzY4MkIzOUE2QzM3QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRr TUtLZGxkZGl0NWtLY1A4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM0ZzmvQ/er5QQEk6syYEO7OsCoEDeQjNO5D6VAMHCK/CAtQKJpAIvsa v0ut9wogEOE0Jg1k0Mu6Ilfyi8LAlkj+Vvqi6xm1A0FEKKGqO+AvTBty0k/prThd mjCsHp2Mf0K1cZvqb7OibsLfAyYOrqxwtNnjUNHKILuaPP/CtUtrBDAvp8urnBgQ uSChuTMa4D8E1ztBFjT93/Hb7GOSr1T/kaI9Gl10p1CaLaSbJ7GJ9FHK+W7dLO+e YuWNBqvvB8wqMdSzkXY8XCcj88KSRsB2AtcaQo2E5K7lWZx0iHQQzlwvdy15sygn fjjuLgZNt3dJxcv43AYO4ATtCD/PprQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:18 2025 by rpki-client