This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: 9c8fQ1h1HWdQpE5+8SFECRHIG9ElCWzIUkjzryp8mDA= Subject key identifier: 8D:8F:CC:99:53:84:85:F5:D7:B4:07:80:9D:10:9E:E6:D5:A6:0F:2C Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 0476 Signing time: Thu 04 Dec 2025 22:37:38 +0000 Manifest this update: Thu 04 Dec 2025 22:37:37 +0000 Manifest next update: Thu 11 Dec 2025 22:37:37 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: nffXqtMBY/BmuPs3gc7/hr32/xlUXg+YLGEsL+Q4hrQ=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Dec 4 22:37:37 2025 GMT Not After : Dec 11 22:37:37 2025 GMT Subject: CN=69320d32-d29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:e9:02:69:87:49:98:6b:72:5b:bb:d4:06: bc:75:c4:dd:13:e9:1a:d4:eb:8b:bf:31:31:08:ec: 8f:17:3a:0f:67:75:c3:17:06:c5:2e:17:b6:06:60: 4d:9b:8e:c8:9f:c1:2c:71:6e:50:d7:7d:e0:92:aa: 17:60:55:12:20:e6:cd:dd:21:e5:29:d5:02:c7:67: ac:52:34:64:0d:23:67:7d:ea:7d:14:a0:f7:eb:78: 5c:6d:1a:cd:b9:f1:05:e5:18:ed:85:d6:84:46:e7: c3:39:7b:ad:2d:74:eb:bf:fe:41:ef:10:f6:6a:b3: e4:5a:59:66:81:7a:31:3e:f4:d6:7e:24:34:8d:76: 74:69:42:62:dc:98:76:ad:89:8d:ee:28:ec:c4:37: 74:26:1d:bd:d0:66:d7:07:8c:de:6d:cd:2b:9b:b8: c6:06:c2:3b:94:89:9a:8a:78:08:91:a6:c5:95:e2: 52:30:a3:42:f4:fd:43:ea:0f:74:66:44:61:c4:71: 86:20:34:64:9f:fa:e6:db:f4:ef:8e:9e:1f:4b:7c: b6:87:d0:06:7b:05:c4:30:77:6a:91:d8:cc:aa:89: ef:7e:2e:12:66:f5:f2:29:73:d6:76:be:7b:82:8e: 7a:83:36:e3:e4:17:9c:18:bd:e2:a4:d8:d0:5d:ce: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8F:CC:99:53:84:85:F5:D7:B4:07:80:9D:10:9E:E6:D5:A6:0F:2C X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c3:de:a3:2d:fc:78:bf:a0:e2:d9:50:d5:56:35:d0:61:42: 39:6a:4d:49:1a:fd:ad:df:f9:fa:3d:c4:a0:fb:17:5c:65:de: c3:8e:fb:88:4c:5a:0e:7d:2f:48:cb:bf:96:de:4f:d0:49:7b: a4:9f:34:70:39:a7:c5:81:0f:55:c6:d5:45:7b:ff:84:98:b6: 5e:40:13:93:ee:83:89:d8:2a:91:59:36:a9:6f:28:4a:a8:0e: 6c:fc:51:b2:d0:0d:38:f8:cb:3a:11:d5:af:27:dc:b6:50:dd: 64:64:7f:52:a6:4a:1d:88:27:6d:53:73:88:31:d3:8b:b8:34: 1c:ef:4f:66:bb:82:6b:7c:1b:ce:84:0c:28:91:53:59:30:47: e2:5c:b4:e0:b6:be:f7:3c:91:19:08:76:ee:19:ac:7f:b8:5e: f5:86:1e:b7:94:3f:26:59:1c:46:04:88:74:04:9a:e8:79:f4: ba:57:eb:ee:39:a0:9f:1c:5f:32:05:ae:fe:55:7c:a9:e6:0a: 90:b2:8b:39:86:23:cf:29:6b:d4:31:18:39:07:8e:ef:6f:f1: b6:68:77:47:16:06:e6:8e:a1:2c:72:9b:54:82:31:a2:0e:1b: 68:a1:72:2f:49:e5:c4:04:a5:64:e5:06:9f:7c:3b:c5:a1:c3: 48:af:d5:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUxMjA0MjIzNzM3WhcNMjUxMjExMjIzNzM3WjAYMRYwFAYD VQQDEw02OTMyMGQzMi1kMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpXpAmmHSZhrclu71Aa8dcTdE+ka1OuLvzExCOyPFzoPZ3XDFwbFLhe2BmBN m47In8EscW5Q133gkqoXYFUSIObN3SHlKdUCx2esUjRkDSNnfep9FKD363hcbRrN ufEF5RjthdaERufDOXutLXTrv/5B7xD2arPkWllmgXoxPvTWfiQ0jXZ0aUJi3Jh2 rYmN7ijsxDd0Jh290GbXB4zebc0rm7jGBsI7lImaingIkabFleJSMKNC9P1D6g90 ZkRhxHGGIDRkn/rm2/Tvjp4fS3y2h9AGewXEMHdqkdjMqonvfi4SZvXyKXPWdr57 go56gzbj5BecGL3ipNjQXc7VzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2PzJlT hIX117QHgJ0QnubVpg8sMB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApw96jLfx4v6Di2VDVVjXQYUI5ak1JGv2t3/n6PcSg+xdcZd7DjvuI TFoOfS9Iy7+W3k/QSXuknzRwOafFgQ9VxtVFe/+EmLZeQBOT7oOJ2CqRWTapbyhK qA5s/FGy0A04+Ms6EdWvJ9y2UN1kZH9SpkodiCdtU3OIMdOLuDQc709mu4JrfBvO hAwokVNZMEfiXLTgtr73PJEZCHbuGax/uF71hh63lD8mWRxGBIh0BJroefS6V+vu OaCfHF8yBa7+VXyp5gqQsos5hiPPKWvUMRg5B47vb/G2aHdHFgbmjqEscptUgjGi DhtooXIvSeXEBKVk5QaffDvFocNIr9Vp -----END CERTIFICATE-----Generated at Sat Dec 6 22:09:50 2025 by rpki-client