This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: i0ev3phG8KfsTW7z/TD9+OsrINXt7RE1NGLOh1gL91c= Subject key identifier: 73:8D:EA:C3:B8:5C:41:27:FE:17:2A:03:FF:83:00:ED:8B:99:EA:C3 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0DB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D50 Signing time: Thu 04 Dec 2025 17:34:20 +0000 Manifest this update: Thu 04 Dec 2025 17:34:19 +0000 Manifest next update: Thu 11 Dec 2025 17:34:19 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: uskWenq63cPnvGO7fo67KMWnCpK2m4OSVVW27OtQeK4=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: 0Xwi/bmW9haZc7tjAjEkhhMp/mPsR+cSlzidnrV+hJs=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: r/UrHR4/pq4iERDjBjufQuU/vYCRg4tIHiAlT6J6epA=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /zMIu4aAire5r9mqMzQqAKINeMM11LU3wVsWK0GAqus=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 2NctsSqYgRdhlX1YbDvI69B+W9MaM7MaZOBeltGDVHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Dec 4 17:34:19 2025 GMT Not After : Dec 11 17:34:19 2025 GMT Subject: CN=6931c61c-390d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:a2:40:7a:e2:9a:46:49:e7:12:e2:3d:f2: 41:7a:64:2f:8c:b6:e2:75:c8:be:57:ce:60:87:89: bb:92:30:30:4e:c2:6c:a4:ee:f8:42:a2:e1:a9:0f: 62:6d:38:f6:01:c8:37:50:89:82:b4:d4:7a:8e:1d: a0:a8:7c:00:33:df:0d:6b:7b:b9:13:e1:d3:7a:73: 58:5e:dc:0d:0e:21:cc:41:85:22:fe:33:a3:3e:54: 9a:15:a0:0d:9d:5e:80:85:df:09:45:c9:a1:bd:f6: 6b:fe:6a:58:95:b0:46:59:ad:bf:0d:c1:d2:90:3e: a9:f2:2e:78:9b:46:2f:85:59:66:81:62:75:6c:b3: 8a:b0:ca:74:bf:7a:75:fc:20:d4:2f:f5:67:7e:04: a1:6e:9f:35:bb:20:a3:00:50:07:2f:98:51:cf:f3: a6:ca:e1:8f:6d:15:de:a6:17:98:ba:f5:17:a6:4e: ea:6d:20:36:f7:07:b4:e7:37:8a:4c:55:bc:60:07: 06:3e:98:4e:10:6f:58:4b:81:da:21:ab:ac:a2:fd: 3a:ff:9c:95:78:cf:b8:c5:4d:c4:23:23:49:f9:45: b3:82:a3:00:ac:89:34:30:a3:1e:fc:62:9c:df:b4: a1:68:c4:4b:55:ac:fa:32:9d:5d:5e:bb:68:c7:ef: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:EA:C3:B8:5C:41:27:FE:17:2A:03:FF:83:00:ED:8B:99:EA:C3 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ea:63:8a:81:a6:96:62:66:05:5f:6b:32:17:32:ad:41:90: 05:30:a7:77:74:74:05:35:91:1b:b0:88:26:30:68:6a:43:b1: a3:db:07:eb:e8:21:00:46:1c:8d:94:42:cd:aa:12:7f:5d:e9: d2:00:6e:fb:8d:c3:89:4c:e6:b2:09:65:54:cf:3a:86:1e:96: 88:2b:ef:b8:62:1b:01:19:0e:5d:8b:61:37:5b:0a:e5:8a:83: 3e:35:1a:62:96:f4:ae:d7:7b:8a:0f:a8:ec:ba:75:d3:14:a8: de:81:2e:ef:94:06:d9:6e:40:cf:4d:42:f4:df:04:15:7f:34: eb:9d:34:b6:9e:fd:a4:54:1c:d1:b5:99:b0:33:31:6f:67:92: da:ee:86:78:ab:d5:49:04:13:9c:73:5a:79:2b:af:63:28:f6: 87:d7:51:d1:f5:c0:1f:ed:83:82:a2:af:a4:0d:f2:84:0b:8d: 2d:52:71:61:c8:99:64:76:0b:91:88:8c:c0:3b:8c:86:1d:13: 56:2d:9b:3c:33:d5:b2:67:21:7e:4f:be:a2:8c:7f:e5:29:dc: b3:93:0f:9c:17:22:a2:e3:2e:a2:ec:3d:36:4f:e5:ae:e0:0b: a5:2a:7c:a8:ee:8e:52:ce:76:26:a8:e8:2d:61:31:8b:a2:d0: e7:5d:2a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUxMjA0MTczNDE5WhcNMjUxMjExMTczNDE5WjAYMRYwFAYD VQQDEw02OTMxYzYxYy0zOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuriiQHrimkZJ5xLiPfJBemQvjLbidci+V85gh4m7kjAwTsJspO74QqLhqQ9i bTj2Acg3UImCtNR6jh2gqHwAM98Na3u5E+HTenNYXtwNDiHMQYUi/jOjPlSaFaAN nV6Ahd8JRcmhvfZr/mpYlbBGWa2/DcHSkD6p8i54m0YvhVlmgWJ1bLOKsMp0v3p1 /CDUL/VnfgShbp81uyCjAFAHL5hRz/OmyuGPbRXepheYuvUXpk7qbSA29we05zeK TFW8YAcGPphOEG9YS4HaIausov06/5yVeM+4xU3EIyNJ+UWzgqMArIk0MKMe/GKc 37ShaMRLVaz6Mp1dXrtox+/oAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHON6sO4 XEEn/hcqA/+DAO2LmerDMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn6mOKgaaWYmYFX2syFzKtQZAFMKd3dHQFNZEbsIgmMGhqQ7Gj2wfr 6CEARhyNlELNqhJ/XenSAG77jcOJTOayCWVUzzqGHpaIK++4YhsBGQ5di2E3Wwrl ioM+NRpilvSu13uKD6jsunXTFKjegS7vlAbZbkDPTUL03wQVfzTrnTS2nv2kVBzR tZmwMzFvZ5La7oZ4q9VJBBOcc1p5K69jKPaH11HR9cAf7YOCoq+kDfKEC40tUnFh yJlkdguRiIzAO4yGHRNWLZs8M9WyZyF+T76ijH/lKdyzkw+cFyKi4y6i7D02T+Wu 4AulKnyo7o5SznYmqOgtYTGLotDnXSrR -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:55 2025 by rpki-client