This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: /AG2qKlgYSE6uHGAgsrDA34P6So1ToxHx/BW3XhY95o= Subject key identifier: 60:EE:56:4C:3A:68:2E:40:92:71:6F:AB:B8:B8:8A:45:D7:6E:C1:E0 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 06E3 Signing time: Thu 04 Dec 2025 20:57:29 +0000 Manifest this update: Thu 04 Dec 2025 20:57:28 +0000 Manifest next update: Thu 11 Dec 2025 20:57:28 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: RYaxLppt3nkXgOuLeiR5Ckr/whcYjMf03eQve+GJoHQ=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Dec 4 20:57:28 2025 GMT Not After : Dec 11 20:57:28 2025 GMT Subject: CN=6931f5b8-1dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:a4:d1:e7:24:b1:8f:7c:57:ca:82:c8:87: bf:97:2f:02:d7:ff:8c:54:b1:cd:a8:e6:9f:36:71: e5:58:81:d8:79:d0:4f:8a:91:27:97:ab:04:d7:64: 5c:98:e4:1c:cc:a5:5f:ea:54:e6:e2:d3:dc:c1:a3: 1f:4e:6b:16:58:5e:cf:85:40:cf:01:6a:a9:a5:d5: 9b:bd:de:e1:27:cc:75:44:ba:d8:0a:e0:58:34:9e: 34:93:3d:2b:6d:21:86:69:00:25:dc:fc:85:3a:09: 70:00:28:c9:bb:06:5c:aa:e5:93:ea:d8:48:89:6f: 17:0c:b7:c6:4f:4d:d4:24:07:c4:4a:7b:78:9c:76: 53:99:55:b6:c7:79:74:e4:05:e3:64:08:5a:89:ce: 44:16:d9:a5:01:aa:8a:b7:5d:75:c8:7f:69:1b:55: d7:77:e9:4c:f7:82:69:12:d2:00:96:e8:ed:4b:7b: 8a:d7:39:55:79:a8:76:ba:7b:3b:ab:7f:32:d6:2e: e4:d1:2b:a3:91:b2:35:da:1d:75:9e:24:a5:43:04: 25:08:d1:72:2a:57:28:fd:0a:62:18:f0:bd:20:dc: 07:4e:f1:9f:23:37:74:a9:01:32:20:41:b3:d7:b6: 58:e6:f8:47:19:0a:71:eb:4a:1c:11:5c:ae:0e:45: a9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:56:4C:3A:68:2E:40:92:71:6F:AB:B8:B8:8A:45:D7:6E:C1:E0 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5e:f9:5a:9d:3f:b1:58:28:45:e5:2b:c7:47:fd:d6:47:24: 1a:73:ae:c7:20:a6:fc:a2:36:d0:ef:78:d5:15:d6:33:4c:57: fe:01:0c:40:3d:68:d6:43:cf:4d:fa:db:7f:24:47:c3:13:f4: 52:9e:1e:f9:e0:dc:84:21:0b:85:95:8b:44:71:43:4f:8e:20: 46:55:84:c9:b6:01:27:1d:2a:62:27:1d:5c:cb:e4:b2:d1:05: 2b:13:19:bf:6b:aa:ca:49:87:4a:ae:37:12:28:96:28:e7:45: f4:03:f8:05:1c:42:1f:b4:69:cf:2a:97:f0:5c:69:31:a6:f0: e8:b0:b4:5c:fe:56:1d:f0:dc:cf:17:c9:f4:10:46:61:bd:5e: c2:3b:80:6d:26:35:69:40:63:5d:86:30:2d:de:b4:ad:99:50: 49:98:8c:95:5c:29:c0:4c:e7:95:e1:d9:f0:0f:16:97:52:4d: a0:58:72:ff:d9:00:cd:e4:df:18:af:b0:db:c3:fc:41:36:cb: 02:1c:51:a0:61:13:2e:d7:bc:6a:3e:68:e3:c8:29:c6:11:c1: f0:a4:c7:7f:fa:7f:29:28:03:af:a1:cd:ea:a7:4a:b3:1b:b1: 1a:31:47:15:de:9e:6a:8b:69:e9:de:aa:7d:9d:fa:a4:19:75: 7b:71:a7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUxMjA0MjA1NzI4WhcNMjUxMjExMjA1NzI4WjAYMRYwFAYD VQQDEw02OTMxZjViOC0xZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26Kk0ecksY98V8qCyIe/ly8C1/+MVLHNqOafNnHlWIHYedBPipEnl6sE12Rc mOQczKVf6lTm4tPcwaMfTmsWWF7PhUDPAWqppdWbvd7hJ8x1RLrYCuBYNJ40kz0r bSGGaQAl3PyFOglwACjJuwZcquWT6thIiW8XDLfGT03UJAfESnt4nHZTmVW2x3l0 5AXjZAhaic5EFtmlAaqKt111yH9pG1XXd+lM94JpEtIAlujtS3uK1zlVeah2uns7 q38y1i7k0SujkbI12h11niSlQwQlCNFyKlco/QpiGPC9INwHTvGfIzd0qQEyIEGz 17ZY5vhHGQpx60ocEVyuDkWpbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDuVkw6 aC5AknFvq7i4ikXXbsHgMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeXvlanT+xWChF5SvHR/3WRyQac67HIKb8ojbQ73jVFdYzTFf+AQxA PWjWQ89N+tt/JEfDE/RSnh754NyEIQuFlYtEcUNPjiBGVYTJtgEnHSpiJx1cy+Sy 0QUrExm/a6rKSYdKrjcSKJYo50X0A/gFHEIftGnPKpfwXGkxpvDosLRc/lYd8NzP F8n0EEZhvV7CO4BtJjVpQGNdhjAt3rStmVBJmIyVXCnATOeV4dnwDxaXUk2gWHL/ 2QDN5N8Yr7Dbw/xBNssCHFGgYRMu17xqPmjjyCnGEcHwpMd/+n8pKAOvoc3qp0qz G7EaMUcV3p5qi2np3qp9nfqkGXV7cafV -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:53 2025 by rpki-client