This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: 0ZaHHBIEM10vjFSIQCg9mGNUSetRXB6v0KPe2EXr748= Subject key identifier: EF:2E:40:84:AD:29:AD:A8:C2:87:BF:4F:2A:0B:60:12:5E:6C:62:6C Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D3B Signing time: Sat 06 Dec 2025 17:26:06 +0000 Manifest this update: Sat 06 Dec 2025 17:26:05 +0000 Manifest next update: Sat 13 Dec 2025 17:26:05 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: kJy/jffu7QmjM7eF11ZFWaIOzk9Wr5BLvwDs934gveI=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: eWcvHOUT67GedsanEfBHjHteAl5xPcgw0p372As4/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Dec 6 17:26:05 2025 GMT Not After : Dec 13 17:26:05 2025 GMT Subject: CN=6934672e-bdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:b7:c7:af:17:43:c8:87:2f:92:19:b9:f3: 8f:b6:5f:10:7a:ba:a2:b2:2a:ab:f5:c2:db:6d:b6: 13:5e:d5:62:7c:42:52:e5:2f:eb:3a:ad:30:a5:9a: 9b:0e:68:d2:0d:1a:f0:14:bd:9c:44:c4:8f:fb:a1: 96:e4:86:97:eb:d0:ce:5a:e9:cf:cf:cf:30:c1:8d: 4b:77:00:e6:5a:95:af:5b:4f:cc:06:15:7c:5f:11: 14:68:d8:63:c5:46:d8:c5:62:b9:5a:b4:c7:7a:80: b9:f4:f4:3b:6e:82:cd:c2:bf:d5:41:3f:fa:35:14: 18:bf:d9:55:62:45:a0:53:fc:d3:df:83:3a:00:43: 71:e4:02:4e:49:48:9e:6f:75:ce:01:ca:ef:c9:31: 15:2f:e9:30:b9:40:dd:c8:62:fc:ee:86:78:bc:c4: f5:91:c3:45:8d:70:b0:5d:5d:8c:f2:e2:0b:82:d2: 6e:cc:70:6b:42:06:ac:29:27:21:84:66:bf:97:af: d3:a2:72:2f:37:55:b5:a4:e3:79:06:6d:a7:ad:ff: 40:d8:a9:b1:50:d7:02:16:75:bd:1f:8c:5f:50:ca: db:76:d0:82:7b:9a:c2:95:8b:d4:51:e2:67:86:13: 37:92:d4:6a:a4:2a:69:29:29:42:84:59:d5:86:60: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2E:40:84:AD:29:AD:A8:C2:87:BF:4F:2A:0B:60:12:5E:6C:62:6C X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b9:89:5c:eb:e4:bb:76:69:89:21:17:fc:06:93:38:4c:3f: 34:5f:b1:1f:ee:29:c3:88:a6:8d:79:3b:f7:c1:62:63:b3:15: 7d:fc:12:9f:ba:c1:08:48:50:20:76:ef:b3:4a:58:17:10:8d: d7:f6:a5:2f:59:cc:1e:f1:45:a3:6f:b1:d8:b2:5a:de:11:8c: 20:b7:2c:1e:d3:42:ec:86:80:b8:db:ac:ef:10:73:fd:f1:14: d3:90:13:47:f2:28:a7:b0:be:42:71:ed:86:f4:3d:3b:06:82: 31:81:82:2b:40:7f:05:d1:c6:da:d8:17:4c:12:ed:c1:1b:8f: 31:58:21:2b:ec:50:27:9b:ff:61:6d:d2:23:fb:75:f7:c9:f4: 2d:48:98:bc:78:39:8b:c4:bd:c6:40:9f:49:37:45:c6:8d:c4: 3d:b9:a1:62:76:7e:c6:6f:0d:f3:f9:92:f0:3a:27:81:ec:af: 6a:40:9d:4b:db:e8:0a:3e:24:f4:14:3b:fa:19:93:dc:fc:4c: d6:2e:70:14:ae:7b:f3:13:60:a3:65:72:b7:07:82:b1:97:9e: 53:62:96:3b:a9:a8:65:2c:9a:c3:f5:32:a7:96:82:cd:b4:01: 7d:40:46:fc:2a:a3:44:93:2e:eb:78:ca:e6:cb:16:cc:9b:90: 28:3f:da:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUxMjA2MTcyNjA1WhcNMjUxMjEzMTcyNjA1WjAYMRYwFAYD VQQDEw02OTM0NjcyZS1iZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8q3x68XQ8iHL5IZufOPtl8Qerqisiqr9cLbbbYTXtVifEJS5S/rOq0wpZqb DmjSDRrwFL2cRMSP+6GW5IaX69DOWunPz88wwY1LdwDmWpWvW0/MBhV8XxEUaNhj xUbYxWK5WrTHeoC59PQ7boLNwr/VQT/6NRQYv9lVYkWgU/zT34M6AENx5AJOSUie b3XOAcrvyTEVL+kwuUDdyGL87oZ4vMT1kcNFjXCwXV2M8uILgtJuzHBrQgasKSch hGa/l6/TonIvN1W1pON5Bm2nrf9A2KmxUNcCFnW9H4xfUMrbdtCCe5rClYvUUeJn hhM3ktRqpCppKSlChFnVhmBsAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8uQISt Ka2owoe/TyoLYBJebGJsMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIuYlc6+S7dmmJIRf8BpM4TD80X7Ef7inDiKaNeTv3wWJjsxV9/BKf usEISFAgdu+zSlgXEI3X9qUvWcwe8UWjb7HYslreEYwgtywe00LshoC426zvEHP9 8RTTkBNH8iinsL5Cce2G9D07BoIxgYIrQH8F0cba2BdMEu3BG48xWCEr7FAnm/9h bdIj+3X3yfQtSJi8eDmLxL3GQJ9JN0XGjcQ9uaFidn7Gbw3z+ZLwOieB7K9qQJ1L 2+gKPiT0FDv6GZPc/EzWLnAUrnvzE2CjZXK3B4Kxl55TYpY7qahlLJrD9TKnloLN tAF9QEb8KqNEky7reMrmyxbMm5AoP9pO -----END CERTIFICATE-----Generated at Sun Dec 7 00:40:08 2025 by rpki-client