This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: 6IjHL1QgYJmRvOQQXr3HcWnZrzaVvjqBMQFdqZsny58= Subject key identifier: 28:2B:C9:F5:A2:26:E0:68:4F:41:FA:C3:6E:6F:84:F7:75:B7:77:C0 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0BC3 Signing time: Thu 04 Dec 2025 18:17:30 +0000 Manifest this update: Thu 04 Dec 2025 18:17:30 +0000 Manifest next update: Thu 11 Dec 2025 18:17:30 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: be2GlKN9uJrOa4Rh7ybKTMSXSdIVRHfp/G4ULeLOyLg=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Dec 4 18:17:30 2025 GMT Not After : Dec 11 18:17:30 2025 GMT Subject: CN=6931d03a-6a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:af:d7:43:04:09:67:18:ec:31:32:ed:01: 24:e3:ca:23:01:37:29:81:b7:e0:02:3a:84:bf:8e: 88:66:77:ad:2c:78:3e:54:b6:31:72:08:0e:24:e6: dd:91:82:1f:48:8c:44:ee:00:88:f6:8c:35:3c:9a: fc:de:20:2d:3f:ad:b8:f7:e5:35:20:d5:5e:81:a6: 36:75:41:76:1e:f8:96:30:b4:b1:09:ba:ec:38:da: 04:b6:23:e1:ed:ec:1d:45:3f:51:30:f8:b4:1a:c1: c0:56:ce:9c:a7:d5:ec:70:15:1d:de:26:59:fa:78: 16:9a:d3:25:9c:6f:58:53:5b:e0:24:f5:c8:d7:bd: b1:76:a8:73:ff:11:9a:1f:35:ce:40:a5:41:81:70: 47:77:4b:06:71:23:05:b2:ec:ab:79:dd:09:68:04: af:48:61:98:f6:9f:70:ad:03:41:c5:bd:3f:14:a8: bf:cc:85:e2:66:ae:3e:9b:1d:11:5e:5d:d1:e6:10: ba:31:52:95:33:95:ec:75:63:2d:bb:05:fc:ec:7b: 00:89:90:c9:0a:f9:02:36:9e:81:b8:3b:06:39:dd: a8:3c:df:52:a8:61:a9:91:39:05:93:7f:95:9e:ba: 21:e6:3e:12:fd:d9:ec:ac:15:89:86:d7:18:61:21: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:C9:F5:A2:26:E0:68:4F:41:FA:C3:6E:6F:84:F7:75:B7:77:C0 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:54:8a:6f:a4:22:f9:f6:b6:d1:79:eb:38:b0:3d:51:a3:1f: a4:48:6e:c9:b4:68:51:7d:7a:c6:64:30:ba:a5:18:58:b0:31: 3d:a3:26:bb:46:43:f3:f8:88:05:26:ac:ad:c1:8f:13:42:b7: 89:bf:18:d9:65:d6:66:e1:c3:e6:8e:fc:dd:14:34:1c:d7:83: 51:18:02:f6:48:6d:20:6b:46:dc:24:e5:9a:7d:e3:23:e8:08: 27:a1:d8:28:4b:b0:66:e3:70:c3:57:c7:0d:3c:ed:6f:5e:c7: eb:9e:4b:cb:69:f8:5a:b4:e3:82:bc:6e:e0:1f:18:e8:8c:6f: 21:4d:c4:e3:b1:f7:c9:2f:c6:2e:b0:55:02:4d:cf:f7:e1:3b: 6b:27:70:7f:dc:e9:26:61:41:dc:05:38:b2:ac:6d:81:41:84: 8a:b8:1c:70:5c:a2:6f:0f:4b:15:97:50:84:f6:ea:20:1b:66: 09:d2:4a:35:c8:f6:f8:2c:f3:5f:f0:ab:a2:99:61:98:29:b9: cc:07:32:58:08:ec:7b:77:6d:d1:c1:6e:ce:63:9e:4c:30:9f: 38:69:9e:ac:42:e3:82:7f:8f:5a:35:09:7c:0c:19:f7:f6:2d: 80:dc:22:09:89:ca:81:c4:bd:4b:a6:2e:8a:18:e6:26:a6:1a: 81:f0:bf:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUxMjA0MTgxNzMwWhcNMjUxMjExMTgxNzMwWjAYMRYwFAYD VQQDEw02OTMxZDAzYS02YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2t6v10MECWcY7DEy7QEk48ojATcpgbfgAjqEv46IZnetLHg+VLYxcggOJObd kYIfSIxE7gCI9ow1PJr83iAtP6249+U1INVegaY2dUF2HviWMLSxCbrsONoEtiPh 7ewdRT9RMPi0GsHAVs6cp9XscBUd3iZZ+ngWmtMlnG9YU1vgJPXI172xdqhz/xGa HzXOQKVBgXBHd0sGcSMFsuyred0JaASvSGGY9p9wrQNBxb0/FKi/zIXiZq4+mx0R Xl3R5hC6MVKVM5XsdWMtuwX87HsAiZDJCvkCNp6BuDsGOd2oPN9SqGGpkTkFk3+V nroh5j4S/dnsrBWJhtcYYSEQPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgryfWi JuBoT0H6w25vhPd1t3fAMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXVIpvpCL59rbRees4sD1Rox+kSG7JtGhRfXrGZDC6pRhYsDE9oya7 RkPz+IgFJqytwY8TQreJvxjZZdZm4cPmjvzdFDQc14NRGAL2SG0ga0bcJOWafeMj 6AgnodgoS7Bm43DDV8cNPO1vXsfrnkvLafhatOOCvG7gHxjojG8hTcTjsffJL8Yu sFUCTc/34TtrJ3B/3OkmYUHcBTiyrG2BQYSKuBxwXKJvD0sVl1CE9uogG2YJ0ko1 yPb4LPNf8KuimWGYKbnMBzJYCOx7d23RwW7OY55MMJ84aZ6sQuOCf49aNQl8DBn3 9i2A3CIJicqBxL1Lpi6KGOYmphqB8L9W -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:41 2025 by rpki-client