This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: 8ZRucnnfLtrt6iN6EOK/SN5adnOGURrqhfSBMqVTwHM= Subject key identifier: 49:81:2F:FA:93:B5:DC:BA:A2:B9:53:0C:BC:76:B5:5D:BE:09:01:9A Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 0488 Signing time: Fri 05 Dec 2025 00:37:32 +0000 Manifest this update: Fri 05 Dec 2025 00:37:32 +0000 Manifest next update: Fri 12 Dec 2025 00:37:32 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: YTv0im8w0DFqV1ETAH1aI0yI/VFdarWP47BenBcNcbU=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: wYrjUP6ABXM9BKVFoyMoT84PmJsIQ6eyebTIC1QQGZ0=) 4: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: k9zWu2QJsnTRLP5WsBWNL6UAK85169EhgA+nfe0CwrY=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: hroMg7e8nFXh4Bq6R1BL3suX2BZ1hZT6N2FbEkOK+8A=) 6: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: /aQYygAsI5fV2mFcfHBoburj5j4bXjYX8PU+kzkSJik=) 7: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: Pw1VfyFxavHvFST5T+H3g0H5LvyxMCtjtqjSFSOsHV4=) 8: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: LQAzx13tozFHaI0HVuth0BIpfSl3xV9vs2/iuXhYbao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Dec 5 00:37:32 2025 GMT Not After : Dec 12 00:37:32 2025 GMT Subject: CN=6932294c-afe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:57:e1:5f:62:da:d7:00:e8:8e:91:65:a8: f7:a1:bf:54:50:eb:ff:8f:cd:92:af:05:35:5b:cb: da:20:7c:2b:0d:98:03:92:5c:39:61:b4:8b:be:c6: f0:8f:42:20:04:fd:69:d9:0f:12:85:99:e8:e0:d4: f7:a3:44:bb:29:1f:6a:28:fe:49:f4:1f:d2:d1:4d: f2:bf:47:37:9e:6a:fb:02:59:4a:63:f9:56:85:ee: a6:2d:89:6b:af:4e:d6:99:9d:6d:7c:7d:74:88:08: cc:e9:23:be:3d:27:21:66:d8:dc:7d:01:61:70:57: e0:cd:1d:00:9b:3b:67:d8:26:52:a1:a3:df:be:2e: 5b:13:ca:b0:fd:8e:e5:a2:4e:60:80:fe:0f:fe:e7: 6c:7c:8d:56:94:a6:94:04:23:4b:b9:80:b2:4c:ae: 79:3c:54:f5:eb:97:f4:06:21:2a:4b:2e:e4:01:c3: 8f:56:3b:59:fa:18:95:f3:75:ee:8b:e8:63:42:53: 23:bd:50:0b:db:f4:2b:89:29:12:48:44:9b:a3:56: 8e:b3:3e:63:df:00:97:ab:62:84:0c:31:ed:21:00: 11:09:86:1a:51:3f:5b:6a:34:36:a0:15:e4:7a:b0: cc:b5:c4:2d:ce:70:8b:cd:7a:62:94:6d:1c:72:52: c0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:81:2F:FA:93:B5:DC:BA:A2:B9:53:0C:BC:76:B5:5D:BE:09:01:9A X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:bb:3b:2a:1a:e1:d9:ea:ab:4e:27:87:ac:08:b6:43:79:c8: 44:49:54:14:40:ee:16:98:42:ef:8d:40:bc:4e:cf:87:3e:02: 2e:5c:9b:ca:5e:14:18:e3:61:9b:1e:b0:27:de:60:a1:12:6e: c6:b5:a1:d1:fa:5c:29:fc:a4:39:c6:da:66:50:2b:d9:03:96: 13:40:dd:f3:01:37:07:04:95:6b:67:07:5b:4c:f1:fd:d1:11: a5:e8:98:b9:3d:c8:cc:19:c1:f7:80:1f:79:e5:91:7f:6f:5e: 1f:2a:b5:c0:0a:8a:37:d3:28:26:36:79:96:67:61:71:3c:2a: bc:5f:6e:a0:92:b4:71:10:5a:ad:d4:d5:e8:24:61:af:08:6e: f9:b3:e1:95:9f:10:0a:31:2d:f8:2c:64:5f:bb:96:d1:fa:32: d2:bb:de:88:19:cc:02:ba:db:fc:cf:11:e2:aa:41:a2:58:b1: eb:8c:86:82:71:b3:2f:ef:4d:98:02:6c:00:59:f1:ba:44:5b: e3:cd:dd:0c:04:4e:66:6a:40:ce:dd:73:10:73:7e:55:0c:01: 8c:d8:ce:a5:ff:a8:89:0b:0c:44:75:61:14:a3:05:77:62:29: 23:79:90:aa:a1:d5:b2:4c:8b:d6:09:5e:10:18:95:fa:c6:47: 00:60:cf:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUxMjA1MDAzNzMyWhcNMjUxMjEyMDAzNzMyWjAYMRYwFAYD VQQDEw02OTMyMjk0Yy1hZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPlX4V9i2tcA6I6RZaj3ob9UUOv/j82SrwU1W8vaIHwrDZgDklw5YbSLvsbw j0IgBP1p2Q8ShZno4NT3o0S7KR9qKP5J9B/S0U3yv0c3nmr7AllKY/lWhe6mLYlr r07WmZ1tfH10iAjM6SO+PSchZtjcfQFhcFfgzR0Amztn2CZSoaPfvi5bE8qw/Y7l ok5ggP4P/udsfI1WlKaUBCNLuYCyTK55PFT165f0BiEqSy7kAcOPVjtZ+hiV83Xu i+hjQlMjvVAL2/QriSkSSESbo1aOsz5j3wCXq2KEDDHtIQARCYYaUT9bajQ2oBXk erDMtcQtznCLzXpilG0cclLAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmBL/qT tdy6orlTDLx2tV2+CQGaMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpuzsqGuHZ6qtOJ4esCLZDechESVQUQO4WmELvjUC8Ts+HPgIuXJvK XhQY42GbHrAn3mChEm7GtaHR+lwp/KQ5xtpmUCvZA5YTQN3zATcHBJVrZwdbTPH9 0RGl6Ji5PcjMGcH3gB955ZF/b14fKrXACoo30ygmNnmWZ2FxPCq8X26gkrRxEFqt 1NXoJGGvCG75s+GVnxAKMS34LGRfu5bR+jLSu96IGcwCutv8zxHiqkGiWLHrjIaC cbMv702YAmwAWfG6RFvjzd0MBE5makDO3XMQc35VDAGM2M6l/6iJCwxEdWEUowV3 YikjeZCqodWyTIvWCV4QGJX6xkcAYM+z -----END CERTIFICATE-----Generated at Sat Dec 6 17:44:18 2025 by rpki-client