This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: r54FUoHuzKf1JfAOnVl/WQkzhOBxZ+TdSOLQNBjHqf8= Subject key identifier: 9D:D1:84:14:35:D8:41:9E:7C:20:07:6F:D0:A0:CB:B6:5C:69:CE:FC Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 014D Signing time: Sun 07 Dec 2025 02:41:36 +0000 Manifest this update: Sun 07 Dec 2025 02:41:35 +0000 Manifest next update: Sun 14 Dec 2025 02:41:35 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: EEq8mUvT7hhpcf3ps+IHxooYI0UZ+OQYaR5DSeylB4g=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: 6O+gN+s3nYuHADI/TEqtB2x9DBi8NBjryPUz/maJeSc=) 3: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: Tr2BD+TjkZLpINWnT5Dv/SJcrrMfCgyU3wvXQZmqI2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Dec 7 02:41:35 2025 GMT Not After : Dec 14 02:41:35 2025 GMT Subject: CN=6934e960-6009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:6b:39:da:98:01:d6:64:f1:43:e8:01:84: ce:52:fe:07:1e:5f:dd:0e:f0:f1:e4:9f:dd:12:2d: 32:ed:dd:30:06:c9:50:0f:bc:a5:98:f2:b6:e6:d7: 66:4b:6d:c0:68:96:75:e1:ea:ca:4b:11:10:16:15: a0:4e:1c:4b:49:56:95:f4:e8:ef:85:35:70:8d:a4: 72:a9:e5:e6:31:86:8d:bd:51:cb:83:a8:f1:5f:26: 75:ef:82:64:1e:25:86:ff:66:9f:b5:41:8f:ed:0f: 96:9c:01:c1:26:93:1a:28:19:b5:b4:49:86:16:c2: 1e:63:17:b6:31:53:a0:0a:2f:a1:e5:67:03:c0:0c: e2:ee:50:6d:2a:57:06:1e:eb:1d:85:35:37:ce:95: 29:cc:a3:f6:8c:58:81:0a:dc:13:dc:aa:39:d1:13: 8f:64:b3:be:41:97:94:38:f5:65:5c:ef:49:bf:3c: b9:49:ab:02:80:c6:8a:80:aa:27:ff:b3:a7:3c:f9: 86:32:8a:ed:d1:3a:52:38:8d:04:f5:7a:98:f9:d0: ee:22:94:ae:51:5f:21:04:19:50:5a:f0:02:18:95: 6a:44:43:65:06:fc:39:13:4c:3c:c1:28:09:a3:97: 1a:5a:16:7c:95:b3:97:ba:df:d1:c3:3b:5b:08:ac: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:84:14:35:D8:41:9E:7C:20:07:6F:D0:A0:CB:B6:5C:69:CE:FC X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:62:ec:4c:f2:3f:bf:d2:8a:29:7f:95:a6:dc:df:3c:d0:58: bb:0d:3a:37:65:c3:5a:c6:4a:6e:ea:c9:72:59:15:85:a5:8d: 85:94:14:1f:29:1f:9e:f1:37:fd:cf:c9:c5:4d:1d:19:99:ef: bb:4d:8f:3c:9f:46:d6:fa:36:16:4d:b8:35:08:87:0a:15:af: 22:7c:60:f5:0e:32:81:23:fa:2d:15:ce:f3:e5:98:7e:2e:1e: 1e:90:09:89:f8:d0:e8:e6:fd:cd:31:bd:2b:47:7e:f8:62:b7: fe:c4:4d:09:c5:1b:49:c7:17:83:ae:c7:13:dd:33:92:8a:26: 7d:e6:cf:89:ca:4d:8b:4d:3f:50:e9:e8:46:df:5f:53:1e:5d: bb:11:15:39:e6:9f:e0:49:6d:c7:8e:45:ba:b7:15:5f:d2:e9: 43:1a:52:a3:73:48:28:da:5c:99:f1:c4:2f:15:f7:ea:76:9c: e4:79:88:c0:f2:95:d9:2a:ef:65:16:53:65:be:1a:cd:e8:71: 2c:48:12:9a:b6:28:92:c0:70:d0:8a:b1:03:8d:f3:7a:32:0c: 42:40:b9:0b:23:98:a3:e6:8a:0b:ea:ea:5e:0b:f3:dd:0c:57: b2:ca:1a:6e:c7:2f:99:b7:cc:70:e8:46:f7:f5:e9:3a:45:34: be:4a:13:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUxMjA3MDI0MTM1WhcNMjUxMjE0MDI0MTM1WjAYMRYwFAYD VQQDEw02OTM0ZTk2MC02MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5U5rOdqYAdZk8UPoAYTOUv4HHl/dDvDx5J/dEi0y7d0wBslQD7ylmPK25tdm S23AaJZ14erKSxEQFhWgThxLSVaV9OjvhTVwjaRyqeXmMYaNvVHLg6jxXyZ174Jk HiWG/2aftUGP7Q+WnAHBJpMaKBm1tEmGFsIeYxe2MVOgCi+h5WcDwAzi7lBtKlcG HusdhTU3zpUpzKP2jFiBCtwT3Ko50ROPZLO+QZeUOPVlXO9Jvzy5SasCgMaKgKon /7OnPPmGMort0TpSOI0E9XqY+dDuIpSuUV8hBBlQWvACGJVqRENlBvw5E0w8wSgJ o5caWhZ8lbOXut/RwztbCKzLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3RhBQ1 2EGefCAHb9Cgy7Zcac78MB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzYuxM8j+/0oopf5Wm3N880Fi7DTo3ZcNaxkpu6slyWRWFpY2FlBQf KR+e8Tf9z8nFTR0Zme+7TY88n0bW+jYWTbg1CIcKFa8ifGD1DjKBI/otFc7z5Zh+ Lh4ekAmJ+NDo5v3NMb0rR374Yrf+xE0JxRtJxxeDrscT3TOSiiZ95s+Jyk2LTT9Q 6ehG319THl27ERU55p/gSW3HjkW6txVf0ulDGlKjc0go2lyZ8cQvFffqdpzkeYjA 8pXZKu9lFlNlvhrN6HEsSBKatiiSwHDQirEDjfN6MgxCQLkLI5ij5ooL6upeC/Pd DFeyyhpuxy+Zt8xw6Eb39ek6RTS+ShPf -----END CERTIFICATE-----Generated at Mon Dec 8 09:31:32 2025 by rpki-client