This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: 4MqMdYESd7TICoClYlpQe+fD0Jvj+AeTaikJYtKdNZw= Subject key identifier: 17:A8:CF:71:82:E8:0C:07:69:19:FA:30:F2:B0:53:AD:2D:3F:F0:75 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 01CF Signing time: Fri 05 Dec 2025 01:10:23 +0000 Manifest this update: Fri 05 Dec 2025 01:10:22 +0000 Manifest next update: Fri 12 Dec 2025 01:10:22 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: ii4+vEeXq2BZCBP2QzeVA7Xlek3oA50vwkvGr3qyV6E=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: t+UtlSfQB7uB9LxMHNDwpYNTZSeeRrSKvGFeOr/lo+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Dec 5 01:10:22 2025 GMT Not After : Dec 12 01:10:22 2025 GMT Subject: CN=693230fe-6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:99:c9:2f:a1:8b:35:75:cd:5b:ad:36:4f: b3:08:74:16:35:92:b5:3c:cb:a5:35:bc:42:47:02: fa:a8:9a:ce:e2:ea:cd:e9:3c:d1:59:e6:7f:d2:8f: c2:85:b0:d8:fa:91:69:d8:4e:09:4a:02:dd:1b:af: 9d:39:a5:5a:62:e3:d1:4b:e1:5c:bf:a7:14:55:69: 59:60:89:17:d8:f5:51:c0:ee:49:29:51:d8:61:15: 16:45:6d:46:f9:c9:1d:dd:20:9a:2f:d5:14:ae:38: 33:06:cf:3a:80:e3:4f:bf:fb:c3:6e:82:7b:32:62: 4d:6f:5d:d9:88:cf:55:0b:5f:7c:cf:43:c5:44:54: ad:be:54:32:ca:41:92:1a:86:ce:0a:e9:ba:0e:08: dc:ed:61:17:76:81:a0:15:42:5e:eb:25:f4:28:3c: 03:af:c7:ce:17:0a:63:e2:63:b5:29:6b:e0:84:b9: 87:fc:75:31:cc:6f:5a:20:df:c5:02:d8:80:d3:e4: a8:c9:77:f3:f3:06:15:80:a1:15:42:b0:94:90:fc: b0:27:b8:fd:0e:ee:38:75:f5:30:9b:2a:a7:98:31: 9d:96:80:01:9d:34:0b:ef:1d:f0:bf:93:4d:54:fe: cf:d3:e6:1f:4b:83:05:2f:36:b7:56:2b:8e:c0:a5: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A8:CF:71:82:E8:0C:07:69:19:FA:30:F2:B0:53:AD:2D:3F:F0:75 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:21:51:d0:5d:bc:79:e0:f6:c9:6b:45:e4:24:38:ec:8a:83: 56:8b:23:4b:3b:15:f6:dc:08:a5:f9:21:ef:a3:df:0c:2b:84: f1:db:e9:48:b2:38:c7:56:82:f0:22:ee:94:f5:d7:c1:b9:68: e8:2b:dd:d6:b7:7e:b0:3e:bc:2e:c4:48:2d:96:f9:5b:b6:9e: 31:04:a3:2c:03:d0:60:7f:d9:2b:b0:6b:d7:62:92:b3:22:4a: e0:5b:14:f0:d6:dd:38:67:37:26:ab:3a:da:d8:3b:f0:8b:3a: e5:d6:c2:66:10:6f:70:04:30:fe:65:13:cf:00:0e:cc:85:36: 3f:19:92:1c:48:dd:6b:c8:9b:b0:b0:e3:1b:31:c6:63:56:d4: ce:9f:e6:91:8e:34:65:74:e4:3f:00:89:3f:e9:ee:28:26:b0: 3d:c4:37:d3:e2:aa:64:ec:e0:72:82:45:d1:ea:5f:22:f0:50: 87:f5:be:ed:eb:6c:c3:c0:f5:a1:de:86:35:f9:e5:1e:4e:f6: 78:73:4c:51:e7:61:20:d3:e5:c1:8e:af:31:7c:c3:8c:fc:82: 00:fe:7d:75:43:8c:09:e5:fd:7a:b7:40:a5:3b:4e:f6:e5:d6: bf:82:c9:88:83:d8:11:b0:cd:62:43:64:e3:b5:67:80:ad:82: 5d:b3:67:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUxMjA1MDExMDIyWhcNMjUxMjEyMDExMDIyWjAYMRYwFAYD VQQDEw02OTMyMzBmZS02MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdaZyS+hizV1zVutNk+zCHQWNZK1PMulNbxCRwL6qJrO4urN6TzRWeZ/0o/C hbDY+pFp2E4JSgLdG6+dOaVaYuPRS+Fcv6cUVWlZYIkX2PVRwO5JKVHYYRUWRW1G +ckd3SCaL9UUrjgzBs86gONPv/vDboJ7MmJNb13ZiM9VC198z0PFRFStvlQyykGS GobOCum6Dgjc7WEXdoGgFUJe6yX0KDwDr8fOFwpj4mO1KWvghLmH/HUxzG9aIN/F AtiA0+SoyXfz8wYVgKEVQrCUkPywJ7j9Du44dfUwmyqnmDGdloABnTQL7x3wv5NN VP7P0+YfS4MFLza3ViuOwKUPrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeoz3GC 6AwHaRn6MPKwU60tP/B1MB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyIVHQXbx54PbJa0XkJDjsioNWiyNLOxX23Ail+SHvo98MK4Tx2+lI sjjHVoLwIu6U9dfBuWjoK93Wt36wPrwuxEgtlvlbtp4xBKMsA9Bgf9krsGvXYpKz IkrgWxTw1t04Zzcmqzra2Dvwizrl1sJmEG9wBDD+ZRPPAA7MhTY/GZIcSN1ryJuw sOMbMcZjVtTOn+aRjjRldOQ/AIk/6e4oJrA9xDfT4qpk7OBygkXR6l8i8FCH9b7t 62zDwPWh3oY1+eUeTvZ4c0xR52Eg0+XBjq8xfMOM/IIA/n11Q4wJ5f16t0ClO072 5da/gsmIg9gRsM1iQ2TjtWeArYJds2f2 -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:56 2025 by rpki-client