This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: 1elbVmUqWhTVPD9RUAPAzK5BQ4j5gEj3BgB3ELFuiAw= Subject key identifier: A2:B9:49:F0:F5:F2:FD:14:50:9D:6A:6C:CC:B4:E9:0C:7B:15:EF:73 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 09B4 Signing time: Thu 04 Dec 2025 19:14:28 +0000 Manifest this update: Thu 04 Dec 2025 19:14:27 +0000 Manifest next update: Thu 11 Dec 2025 19:14:27 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: jxS76XWuDbjvjWU1rtAEB1T0qWxOJ0nnxKpSuWZ9v3g=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: Y4bw++TnnqHhnQXoIqONS+4c30WzzpJSk4du/GajLxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Dec 4 19:14:27 2025 GMT Not After : Dec 11 19:14:27 2025 GMT Subject: CN=6931dd93-f16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bb:5b:5e:c3:b3:b2:41:27:94:0a:18:a4:62: 86:ea:42:12:85:1d:5c:e2:78:89:30:c9:a7:62:36: ff:6a:c5:ee:ba:05:5b:56:37:88:62:aa:e5:7a:fa: 20:41:ba:50:14:41:ac:e5:2b:da:6f:f3:bb:b1:f9: fc:ae:6b:eb:93:73:f3:29:69:fd:9e:1d:66:fb:5f: 07:19:b3:9c:14:eb:f7:93:1a:b7:da:d3:7f:50:cc: 22:1e:cc:1b:8e:78:8c:9d:e7:e0:37:ad:12:32:66: 24:e6:ee:8e:de:81:7c:c2:d3:74:15:fa:6a:49:f2: 54:38:b3:d3:a4:95:2b:12:64:96:5c:e5:58:f9:ce: 3d:56:26:27:cd:8f:6f:7a:dc:8e:a4:e6:7d:62:dc: ae:db:9a:0e:a7:7d:77:0f:65:c9:8d:c1:69:63:64: 6f:b2:a5:e9:09:8b:17:8e:2a:9f:2c:56:87:cb:f8: 97:48:c7:fe:62:9a:c1:f2:29:0b:46:cc:90:9a:f9: 7a:02:25:a6:d7:37:50:ad:39:5f:7a:48:7f:9b:4d: 2c:40:8d:4c:56:b7:03:39:21:eb:fc:f8:47:4e:e9: 39:10:b2:c4:24:99:0e:1a:27:92:71:c4:93:85:02: ce:c6:83:b8:88:ba:44:20:a3:83:df:d4:d5:a8:a1: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B9:49:F0:F5:F2:FD:14:50:9D:6A:6C:CC:B4:E9:0C:7B:15:EF:73 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:64:f8:1f:0c:8f:61:3c:43:72:71:29:f8:0c:2e:33:7d:f1: e2:4f:18:55:cd:51:2b:e9:de:ba:a4:ce:cd:e1:b0:7f:4e:ff: 7e:6b:ca:20:e9:4a:69:98:60:fa:d3:12:35:d3:af:7e:54:70: d5:f8:10:3a:eb:c4:e3:97:6a:ff:04:50:54:37:cf:96:bc:36: 72:bb:01:f2:fb:06:db:c1:d5:2e:57:63:01:bc:3b:4e:38:5c: de:be:61:8c:0d:be:c8:61:bd:f6:a4:cc:6e:e8:89:fd:58:3a: a1:02:c6:d3:d6:b2:44:ae:01:d7:b3:9a:5c:e0:69:7a:7f:39: f8:2a:07:6d:98:a4:5f:61:c6:41:7c:dd:3d:78:47:5e:06:6e: 5e:4c:a7:2e:31:ad:e4:93:3b:b1:61:98:89:a2:1c:b6:0c:5c: e9:71:c5:17:2b:d4:2e:59:4c:de:33:a8:2e:03:f6:d2:cb:df: 81:69:98:73:2c:8c:da:35:e7:81:5d:60:ea:c0:e1:15:f1:14: ef:51:a0:22:fb:72:88:45:7f:28:be:66:e7:4c:13:b6:23:e1: 54:9e:58:69:c3:63:3c:63:c5:05:36:b8:7e:c2:ec:44:d6:b1: 37:b7:e6:eb:bb:c8:03:5e:c7:75:c1:c4:92:2c:c5:4d:22:de: 50:b2:31:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjUxMjA0MTkxNDI3WhcNMjUxMjExMTkxNDI3WjAYMRYwFAYD VQQDEw02OTMxZGQ5My1mMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17tbXsOzskEnlAoYpGKG6kIShR1c4niJMMmnYjb/asXuugVbVjeIYqrlevog QbpQFEGs5Svab/O7sfn8rmvrk3PzKWn9nh1m+18HGbOcFOv3kxq32tN/UMwiHswb jniMnefgN60SMmYk5u6O3oF8wtN0FfpqSfJUOLPTpJUrEmSWXOVY+c49ViYnzY9v etyOpOZ9Ytyu25oOp313D2XJjcFpY2RvsqXpCYsXjiqfLFaHy/iXSMf+YprB8ikL RsyQmvl6AiWm1zdQrTlfekh/m00sQI1MVrcDOSHr/PhHTuk5ELLEJJkOGieSccST hQLOxoO4iLpEIKOD39TVqKE0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK5SfD1 8v0UUJ1qbMy06Qx7Fe9zMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADZPgfDI9hPENycSn4DC4zffHiTxhVzVEr6d66pM7N4bB/Tv9+a8og 6UppmGD60xI1069+VHDV+BA668Tjl2r/BFBUN8+WvDZyuwHy+wbbwdUuV2MBvDtO OFzevmGMDb7IYb32pMxu6In9WDqhAsbT1rJErgHXs5pc4Gl6fzn4KgdtmKRfYcZB fN09eEdeBm5eTKcuMa3kkzuxYZiJohy2DFzpccUXK9QuWUzeM6guA/bSy9+BaZhz LIzaNeeBXWDqwOEV8RTvUaAi+3KIRX8ovmbnTBO2I+FUnlhpw2M8Y8UFNrh+wuxE 1rE3t+bru8gDXsd1wcSSLMVNIt5QsjFJ -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:31 2025 by rpki-client