This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: yJeUIV+NqaniEZxeCuScZds6N94rDhpvQM1pbUuO2OQ= Subject key identifier: C5:EF:32:FA:3A:D3:5A:AD:35:F7:28:3B:12:A4:DF:74:C8:5E:39:CF Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 651C955C0158FB48F7197635EF6F396B56A54BDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 06BB Signing time: Tue 23 Dec 2025 00:26:25 +0000 Manifest this update: Tue 23 Dec 2025 00:21:25 +0000 Manifest next update: Wed 24 Dec 2025 03:30:25 +0000 Files and hashes: 1: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 2: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) 3: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 4: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) 5: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 6: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: JEax5ZvhEWJ4JjJ4d8LKhBlOTZsJ9fOjYj2Rvzncev4=) 7: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) 8: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1c:95:5c:01:58:fb:48:f7:19:76:35:ef:6f:39:6b:56:a5:4b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Dec 23 00:21:25 2025 GMT Not After : Dec 24 03:30:25 2025 GMT Subject: CN=C5EF32FA3AD35AAD35F7283B12A4DF74C85E39CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:48:70:c4:40:e7:51:36:88:c8:40:c5:1a: 46:31:c2:00:e8:16:d0:c6:ce:e2:3a:a8:1c:7e:cb: 1d:99:da:42:05:f6:6c:ae:80:85:7b:e7:84:83:9b: 66:ec:c9:20:ea:15:3e:d2:32:c3:07:b8:ae:dc:32: 42:b5:72:f4:ce:66:87:43:7d:c1:26:c2:ba:f5:6c: 1f:6d:54:51:aa:1d:29:f3:c0:26:b4:87:53:a8:80: fb:f4:ff:ef:c6:11:66:74:c0:46:a4:60:5a:64:a1: 3f:a1:42:78:dc:ec:1c:1a:d0:68:f8:b1:9a:09:74: b3:02:30:49:f5:73:6b:7c:03:59:0a:f2:88:aa:b4: 5e:94:05:cc:2b:f3:f2:25:46:e9:c9:05:64:fc:9b: 48:48:d3:7c:e5:4b:0b:4e:89:b2:14:a2:0b:ff:59: 3a:13:5b:0f:6e:4f:e2:93:04:b8:d8:b6:07:75:d2: 3a:c4:2c:d6:34:af:21:d6:6f:0d:05:e0:91:bc:ad: 71:49:f7:90:97:a8:82:c0:65:af:16:5b:d9:8b:02: 7c:04:da:0c:0c:a7:b4:2f:a1:76:48:85:ed:53:8a: 4e:95:f7:4c:eb:78:1a:26:c6:8c:7b:36:1a:8d:bb: bd:c0:27:fa:10:93:8e:cb:3a:bd:96:bf:88:85:cd: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:32:FA:3A:D3:5A:AD:35:F7:28:3B:12:A4:DF:74:C8:5E:39:CF X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:35:56:dd:cc:ff:01:47:2b:ec:03:39:c1:7a:71:2e:cd:23: b4:97:fb:95:c9:d5:bb:c3:40:f9:bf:72:c9:c3:ae:cd:07:b0: c2:61:89:f6:bd:ca:28:d6:16:03:32:05:8a:d1:b9:38:67:33: b1:7c:cf:b0:e7:01:07:b9:a1:c3:5d:ff:cb:37:b4:3e:78:83: 44:52:a6:14:e2:dd:d8:18:40:64:d9:8d:31:ba:ad:e2:c5:97: 1b:e1:15:0e:65:c6:32:66:ef:fb:3a:cf:10:7d:da:68:a1:4f: c2:bb:0a:dc:ed:6b:23:e5:44:f7:15:be:a9:e2:2f:1c:93:f7: cb:50:7a:94:d3:d9:bf:3b:3f:11:a2:19:f1:ce:62:32:b3:d8: a5:d2:de:71:ee:4b:81:48:7d:34:27:ab:26:39:6b:f0:bf:e6: 79:e4:ce:43:ac:a1:a7:ac:2c:55:3f:8e:22:d2:c5:64:2a:c8: 09:e6:b2:5b:78:68:38:e7:02:17:16:c4:45:6a:34:ba:dd:f3: 8d:c9:27:22:d9:a4:0d:4d:51:7c:6a:14:6c:5b:87:18:4d:f3: 88:69:67:39:ea:24:7c:45:b9:5e:20:ef:1a:0a:11:ad:47:f8: 47:6d:7b:6a:75:56:05:88:1a:91:6c:43:9f:4d:63:91:2a:34: 11:c5:2f:72 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZRyVXAFY+0j3GXY17285a1alS9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MTIyMzAwMjEyNVoX DTI1MTIyNDAzMzAyNVowMzExMC8GA1UEAxMoQzVFRjMyRkEzQUQzNUFBRDM1Rjcy ODNCMTJBNERGNzRDODVFMzlDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0TSHDEQOdRNojIQMUaRjHCAOgW0MbO4jqoHH7LHZnaQgX2bK6AhXvnhIOb ZuzJIOoVPtIywwe4rtwyQrVy9M5mh0N9wSbCuvVsH21UUaodKfPAJrSHU6iA+/T/ 78YRZnTARqRgWmShP6FCeNzsHBrQaPixmgl0swIwSfVza3wDWQryiKq0XpQFzCvz 8iVG6ckFZPybSEjTfOVLC06JshSiC/9ZOhNbD25P4pMEuNi2B3XSOsQs1jSvIdZv DQXgkbytcUn3kJeogsBlrxZb2YsCfATaDAyntC+hdkiF7VOKTpX3TOt4GibGjHs2 Go27vcAn+hCTjss6vZa/iIXN0+UCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTF7zL6 OtNarTX3KDsSpN90yF45zzAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAITVW3cz/AUcr7AM5wXpxLs0jtJf7lcnVu8NA+b9yycOuzQew wmGJ9r3KKNYWAzIFitG5OGczsXzPsOcBB7mhw13/yze0PniDRFKmFOLd2BhAZNmN Mbqt4sWXG+EVDmXGMmbv+zrPEH3aaKFPwrsK3O1rI+VE9xW+qeIvHJP3y1B6lNPZ vzs/EaIZ8c5iMrPYpdLece5LgUh9NCerJjlr8L/meeTOQ6yhp6wsVT+OItLFZCrI CeayW3hoOOcCFxbERWo0ut3zjcknItmkDU1RfGoUbFuHGE3ziGlnOeokfEW5XiDv GgoRrUf4R217anVWBYgakWxDn01jkSo0EcUvcg== -----END CERTIFICATE-----Generated at Tue Dec 23 05:01:48 2025 by rpki-client