This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: cutM4JN8BrU1MIemhUTb9Fy4pkPlumnTQjSX3QFCI1w= Subject key identifier: 0E:54:2A:DB:21:B9:8C:2A:99:C0:30:FF:C0:25:AA:7C:B8:9D:31:53 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1082 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 1072 Signing time: Sat 06 Dec 2025 14:23:29 +0000 Manifest this update: Sat 06 Dec 2025 14:23:28 +0000 Manifest next update: Sat 13 Dec 2025 14:23:28 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: orSbyEI1GTSqOiZQVbyQXxjfvFvQBCQiryhgSGwbjKg=) 2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: 7YuoX9OkBSRUQiHpsiuHEMGmDB7ygNEWHmpkRA4QfgE=) 3: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: Mjf+9MFV/8wopOF7hLs3Tt14yZvRKLf5RcXcRhi35uI=) 4: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: vv5/sNroDyn31EV1FuwDRkKZ1Ky/CQIEoorZo83v9h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4226 (0x1082) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Dec 6 14:23:28 2025 GMT Not After : Dec 13 14:23:28 2025 GMT Subject: CN=69343c60-3b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:30:60:91:a0:41:be:d8:39:67:4d:3e:7b: d5:95:56:7d:d7:f2:cb:46:76:00:29:45:97:35:dd: b8:dd:ee:5b:5c:1c:d6:c4:25:25:d6:dd:0c:4d:64: b8:8f:b1:1c:c0:8e:51:e2:ab:75:34:47:dd:27:be: 20:69:73:ef:19:d7:0d:5d:80:e8:1f:2d:2f:dd:db: 36:a9:b9:28:90:24:81:86:cf:be:7f:bf:6a:96:d5: 6d:d9:9f:74:ca:fe:b3:74:d7:f7:d5:d7:8e:0e:3a: 44:80:a5:2f:48:5c:d6:a1:09:54:30:1f:39:2c:b2: e4:2d:99:b8:a6:18:37:2f:50:6a:aa:bc:92:11:91: 06:8b:9f:e0:b7:35:18:36:35:0b:a5:7b:2c:9a:09: 27:40:12:7c:34:ff:64:58:9d:15:21:3a:f4:53:3e: 87:a3:d6:3d:f4:89:dc:c0:0a:e7:7d:e7:5c:9d:f6: ba:11:e0:45:c6:d8:6d:d6:f2:a9:c9:16:1d:86:65: 34:b8:6b:8e:ca:26:f7:3b:e9:22:5f:86:80:7a:ee: 2f:e3:d9:9c:75:a3:9a:ba:33:da:29:20:ac:8f:87: 1b:4d:be:33:54:c9:e5:57:31:6b:2e:2c:a5:6c:27: 3d:d4:97:3a:a4:6c:dc:96:10:8c:57:0e:e3:4c:38: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:2A:DB:21:B9:8C:2A:99:C0:30:FF:C0:25:AA:7C:B8:9D:31:53 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c2:8a:88:ee:38:87:71:35:d2:b8:a4:ce:70:f0:65:df:d2: 53:16:6c:fc:df:e3:67:22:b1:11:51:df:85:8f:d2:f1:94:db: a7:a3:63:04:a7:82:f7:35:b2:c7:41:ba:43:64:d6:3c:f5:6c: d4:1a:b4:34:19:7b:e6:20:a1:f2:6f:cd:d6:8f:1d:dd:51:98: 89:73:cb:4e:92:6b:b2:5c:e9:47:48:15:e4:f3:81:0b:e6:88: dc:a6:b0:4c:22:82:ea:32:29:ab:0e:52:d0:58:ab:c2:b0:a6: e4:3b:a6:32:e7:6b:63:a4:af:1b:b6:31:d8:15:03:d2:a7:05: d3:1f:57:c5:94:be:d7:24:75:f2:c1:f1:31:8c:07:78:77:bf: 00:d0:43:c7:c4:b8:71:57:85:e5:93:ec:3b:0c:b2:41:14:3d: e5:82:39:9b:d5:bb:25:9c:05:c7:3c:12:68:5b:32:bb:13:dc: 31:f3:ec:8c:84:4f:c0:f7:b0:5f:7e:a5:5d:65:04:c5:66:b2: 7c:b9:54:4f:f3:fe:9e:0e:8b:2c:ad:53:99:35:3c:e7:5a:41: b9:be:43:96:4a:35:e5:6b:93:3d:e1:f3:fe:6b:4b:b4:12:75: 7a:14:ba:80:e3:67:53:84:d9:58:cc:3d:ae:f1:b4:25:b4:9b: f9:b7:d3:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjUxMjA2MTQyMzI4WhcNMjUxMjEzMTQyMzI4WjAYMRYwFAYD VQQDEw02OTM0M2M2MC0zYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8swYJGgQb7YOWdNPnvVlVZ91/LLRnYAKUWXNd243e5bXBzWxCUl1t0MTWS4 j7EcwI5R4qt1NEfdJ74gaXPvGdcNXYDoHy0v3ds2qbkokCSBhs++f79qltVt2Z90 yv6zdNf31deODjpEgKUvSFzWoQlUMB85LLLkLZm4phg3L1BqqrySEZEGi5/gtzUY NjULpXssmgknQBJ8NP9kWJ0VITr0Uz6Ho9Y99IncwArnfedcnfa6EeBFxtht1vKp yRYdhmU0uGuOyib3O+kiX4aAeu4v49mcdaOaujPaKSCsj4cbTb4zVMnlVzFrLiyl bCc91Jc6pGzclhCMVw7jTDjONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5UKtsh uYwqmcAw/8Alqny4nTFTMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4woqI7jiHcTXSuKTOcPBl39JTFmz83+NnIrERUd+Fj9LxlNuno2ME p4L3NbLHQbpDZNY89WzUGrQ0GXvmIKHyb83Wjx3dUZiJc8tOkmuyXOlHSBXk84EL 5ojcprBMIoLqMimrDlLQWKvCsKbkO6Yy52tjpK8btjHYFQPSpwXTH1fFlL7XJHXy wfExjAd4d78A0EPHxLhxV4Xlk+w7DLJBFD3lgjmb1bslnAXHPBJoWzK7E9wx8+yM hE/A97BffqVdZQTFZrJ8uVRP8/6eDossrVOZNTznWkG5vkOWSjXla5M94fP+a0u0 EnV6FLqA42dThNlYzD2u8bQltJv5t9MK -----END CERTIFICATE-----Generated at Sun Dec 7 03:25:21 2025 by rpki-client