This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: 7wlRLJYgBbQvwGJm40xtORuKpmupsLrCbaGkZHVLS7c= Subject key identifier: 3B:18:2E:74:77:7A:3B:CA:8C:6A:A7:7E:E5:8C:85:36:FE:35:0C:D9 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 8B Signing time: Fri 05 Dec 2025 04:41:14 +0000 Manifest this update: Fri 05 Dec 2025 04:41:14 +0000 Manifest next update: Fri 12 Dec 2025 04:41:14 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: III5+udnCxn5BiJ0ewE6m4id5eb+mf0b7wnzQVzH6XI=) 2: EFE35156B61811F0AEA87331C4F9AE02.roa (hash: yGF0/J4YTOhabvB6dHd/CkU6xMGpr2zyh/tO91R2r30=) 3: B2E521ACB61911F08CF0DC33C4F9AE02.roa (hash: qhmSvaZGy1wgMrEHyKh0anKTUZYqwOr3QNOLophEj2o=) 4: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: vb7fSe4hGTfYiR3X8s03oFhLsFFESwK0obRkUpL5Xz0=) 5: 692243D640AA11F096F2746AC4F9AE02.roa (hash: 9g7lOOD5JnVMfPoV+CkyAbWN9NrLgMODndTwuqHyDZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Dec 5 04:41:14 2025 GMT Not After : Dec 12 04:41:14 2025 GMT Subject: CN=6932626a-1b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:7b:d1:87:1f:32:87:47:b0:6e:7d:4e:cc: ae:ad:70:5f:96:e2:10:4c:e5:77:36:13:62:f2:54: 83:53:9a:c7:0a:d1:b7:f5:25:ab:d3:37:0d:c9:b2: c4:23:50:21:60:73:31:f1:97:3c:13:04:b5:11:f0: 65:c0:b8:30:6c:ae:df:b6:be:d4:da:34:0c:b7:eb: ff:e7:3d:cb:84:8d:30:0e:f4:1e:b2:f4:31:9e:82: 92:7f:83:e6:e2:3d:19:65:ad:ad:da:5b:9a:b6:dd: 11:a0:ba:8a:35:6a:0e:78:1e:65:1b:ec:57:8b:fc: 62:29:f8:44:f6:04:06:01:8e:52:df:63:67:9c:43: ae:42:ad:38:96:27:fd:96:6f:df:3b:0e:81:6e:9c: dc:67:8f:42:0f:a5:3e:6c:e5:97:0c:6b:4e:b4:4b: a5:4e:ab:6d:5d:51:05:10:57:f5:e0:04:29:55:b1: bd:cc:7d:d2:c2:70:38:fd:7c:62:c2:5c:64:81:b1: 7f:80:83:28:2e:bf:77:9c:9d:32:94:e6:8e:3c:89: b1:55:db:a4:6c:22:e8:d3:88:b9:ed:53:74:45:3b: 53:66:84:c5:7a:be:4e:da:c6:94:5b:c5:34:9c:7e: dc:58:ec:ee:41:80:4e:c6:3f:e3:dc:f6:47:8d:fc: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:18:2E:74:77:7A:3B:CA:8C:6A:A7:7E:E5:8C:85:36:FE:35:0C:D9 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0b:8a:ee:3e:27:cc:2b:73:f5:14:3d:4d:57:ac:7c:c0:22: a0:1e:43:97:5e:61:58:49:01:de:a0:61:1a:fa:0b:7b:d2:0d: 11:8a:1b:13:4a:94:08:21:61:82:6e:3b:60:7f:0f:b1:69:cb: e7:b6:1f:4b:06:45:34:dc:8c:5f:70:49:ab:f8:20:20:f4:9c: f7:9b:06:f0:18:3a:78:7c:05:49:a6:58:48:b8:ce:60:ae:1c: bb:83:86:32:da:a2:0f:c4:68:89:a2:52:1e:e9:41:af:56:44: 04:07:83:ea:2e:9e:33:cc:76:71:af:44:a8:bc:c6:4b:95:76: 7d:2e:96:77:60:16:7f:9f:b4:d3:ee:01:d5:8d:cf:43:b3:bc: ae:8b:e5:37:2f:2c:03:03:37:eb:82:4d:fc:f0:36:2a:2b:00: 0f:72:90:82:dd:4e:7b:ca:7d:6e:a0:62:54:1e:08:ae:88:08: 56:ef:c5:29:6c:6c:01:bb:6a:90:48:39:55:8a:00:a4:38:3b: e3:61:f0:c0:fa:07:d4:22:95:85:cd:d1:fc:b2:ef:f0:58:c6: ec:6c:b5:29:0c:7c:d7:b2:98:1c:5a:04:97:b9:36:b4:2f:1e: 2b:52:97:57:25:b8:08:e9:7a:17:f9:ed:55:85:cd:45:38:03: 97:2d:fe:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjUxMjA1MDQ0MTE0WhcNMjUxMjEyMDQ0MTE0WjAYMRYwFAYD VQQDEw02OTMyNjI2YS0xYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqN70YcfModHsG59TsyurXBfluIQTOV3NhNi8lSDU5rHCtG39SWr0zcNybLE I1AhYHMx8Zc8EwS1EfBlwLgwbK7ftr7U2jQMt+v/5z3LhI0wDvQesvQxnoKSf4Pm 4j0ZZa2t2luatt0RoLqKNWoOeB5lG+xXi/xiKfhE9gQGAY5S32NnnEOuQq04lif9 lm/fOw6BbpzcZ49CD6U+bOWXDGtOtEulTqttXVEFEFf14AQpVbG9zH3SwnA4/Xxi wlxkgbF/gIMoLr93nJ0ylOaOPImxVdukbCLo04i57VN0RTtTZoTFer5O2saUW8U0 nH7cWOzuQYBOxj/j3PZHjfwaIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsYLnR3 ejvKjGqnfuWMhTb+NQzZMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAC4ruPifMK3P1FD1NV6x8wCKgHkOXXmFYSQHeoGEa+gt70g0RihsT SpQIIWGCbjtgfw+xacvnth9LBkU03IxfcEmr+CAg9Jz3mwbwGDp4fAVJplhIuM5g rhy7g4Yy2qIPxGiJolIe6UGvVkQEB4PqLp4zzHZxr0SovMZLlXZ9LpZ3YBZ/n7TT 7gHVjc9Ds7yui+U3LywDAzfrgk388DYqKwAPcpCC3U57yn1uoGJUHgiuiAhW78Up bGwBu2qQSDlVigCkODvjYfDA+gfUIpWFzdH8su/wWMbsbLUpDHzXspgcWgSXuTa0 Lx4rUpdXJbgI6XoX+e1Vhc1FOAOXLf7z -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:43 2025 by rpki-client