This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: mE09CO74n5g7q48r/2wOFpun9Ru8JwPa4nqtOzbMUwA= Subject key identifier: E3:85:FE:90:FB:67:39:F2:8C:48:81:75:0D:50:86:8B:08:15:B0:4D Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 3502 Signing time: Sat 06 Dec 2025 14:48:40 +0000 Manifest this update: Sat 06 Dec 2025 14:48:40 +0000 Manifest next update: Sat 13 Dec 2025 14:48:40 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: gZaWYAwzBwwEvtJAnXhfCvBTIYpgAthBF8Shgin9VAc=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13600 (0x3520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Dec 6 14:48:40 2025 GMT Not After : Dec 13 14:48:40 2025 GMT Subject: CN=69344248-ec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:2a:01:1b:8f:e7:62:ec:50:53:4a:09:fb: 3d:e7:c8:e4:61:25:33:e1:a0:da:24:a8:cb:f5:a6: 00:9c:9d:06:a9:91:a2:d5:dc:da:68:9f:7f:f5:0f: 57:0a:73:4c:4d:c6:7e:50:10:85:57:6e:e8:ae:41: cb:32:49:39:1e:dd:be:9e:b9:fb:04:d1:e6:7f:a7: 58:fd:17:48:9e:af:b5:56:1f:db:dd:ad:9a:0b:a6: c4:f9:59:4e:c2:ae:6e:ba:64:a2:6d:1c:58:77:ed: e3:e7:19:3a:e7:25:70:44:06:0c:39:2e:ff:2e:04: e5:b7:2d:23:10:3e:b2:53:b5:9f:13:82:47:48:d3: ac:d9:02:cf:b7:c9:62:e5:08:4e:3d:d9:8c:1f:a0: 13:5b:34:12:24:60:84:f1:37:30:8e:64:8c:52:1d: e4:3b:6a:1a:bf:9f:83:f7:44:1d:25:99:87:29:3d: 98:db:90:84:83:60:26:4e:03:e8:a8:89:4a:91:23: e4:74:cd:35:f2:4d:80:b0:dd:9f:47:af:32:da:61: f0:68:90:78:58:28:68:2f:7f:32:55:9a:7f:dd:82: ad:20:9a:86:ec:f5:4f:17:f6:6e:89:ba:eb:8c:cb: 7d:4e:48:03:94:bd:bf:75:25:b4:b9:9b:bc:b9:e5: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:85:FE:90:FB:67:39:F2:8C:48:81:75:0D:50:86:8B:08:15:B0:4D X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:26:a7:4a:1b:df:85:96:c2:24:4a:fe:b7:bb:cf:cb:1a: c0:ba:d6:6d:59:a0:63:9d:76:a5:5a:ea:22:6d:f0:82:51:bd: 14:cc:50:8e:82:86:c0:d7:39:ea:50:73:a3:25:ea:d6:c2:b2: c1:ad:95:85:6b:3c:00:5d:cd:7f:e8:f5:b9:7e:b8:78:bd:02: 4e:41:17:63:ce:c9:fd:ad:fa:10:db:c7:08:ec:8a:3a:84:fa: 11:9c:1e:b3:dd:f7:63:15:7e:3c:f0:58:34:53:e9:39:20:ff: cf:ed:10:af:74:8d:95:4e:19:22:90:77:a3:43:dd:32:bf:2e: f4:14:0a:96:08:b0:e0:b1:f4:9f:df:c7:a0:c3:1c:72:d1:59: 47:17:87:94:d7:3e:08:d1:bf:f2:6c:aa:9e:a6:c0:1b:8a:57: 16:41:46:b4:b1:ed:ab:b3:78:d6:e1:d7:9c:7c:e6:e7:0a:d2: f4:47:d9:6c:a2:4b:4b:0f:4e:54:fd:82:84:89:dd:ef:57:38: 72:72:99:8e:2f:30:f8:ab:56:e3:d1:da:68:9b:5e:61:76:62: 9f:ba:63:86:2d:4f:73:75:55:5f:25:be:65:a2:29:3f:bc:b6: 67:4f:59:37:8a:56:18:e8:97:b3:e1:fc:83:3e:2a:48:75:6d: 2f:f7:d7:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUxMjA2MTQ0ODQwWhcNMjUxMjEzMTQ0ODQwWjAYMRYwFAYD VQQDEw02OTM0NDI0OC1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3icqARuP52LsUFNKCfs958jkYSUz4aDaJKjL9aYAnJ0GqZGi1dzaaJ9/9Q9X CnNMTcZ+UBCFV27orkHLMkk5Ht2+nrn7BNHmf6dY/RdInq+1Vh/b3a2aC6bE+VlO wq5uumSibRxYd+3j5xk65yVwRAYMOS7/LgTlty0jED6yU7WfE4JHSNOs2QLPt8li 5QhOPdmMH6ATWzQSJGCE8TcwjmSMUh3kO2oav5+D90QdJZmHKT2Y25CEg2AmTgPo qIlKkSPkdM018k2AsN2fR68y2mHwaJB4WChoL38yVZp/3YKtIJqG7PVPF/Zuibrr jMt9TkgDlL2/dSW0uZu8ueVNswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOF/pD7 ZznyjEiBdQ1QhosIFbBNMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8oianShvfhZbCJEr+t7vPyxrAutZtWaBjnXalWuoibfCCUb0UzFCO gobA1znqUHOjJerWwrLBrZWFazwAXc1/6PW5frh4vQJOQRdjzsn9rfoQ28cI7Io6 hPoRnB6z3fdjFX488Fg0U+k5IP/P7RCvdI2VThkikHejQ90yvy70FAqWCLDgsfSf 38egwxxy0VlHF4eU1z4I0b/ybKqepsAbilcWQUa0se2rs3jW4decfObnCtL0R9ls oktLD05U/YKEid3vVzhycpmOLzD4q1bj0dpom15hdmKfumOGLU9zdVVfJb5loik/ vLZnT1k3ilYY6Jez4fyDPipIdW0v99ft -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:03 2025 by rpki-client