This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: MlbYQLovalfTw3Ydf3zKQdIj4b4vO2HjJA76Rwjdqkc= Subject key identifier: 55:DB:69:4F:56:B3:BE:E0:68:D8:1E:F3:EB:5A:1E:A9:B6:5E:5C:29 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 013A Signing time: Fri 05 Dec 2025 02:33:42 +0000 Manifest this update: Fri 05 Dec 2025 02:33:41 +0000 Manifest next update: Fri 12 Dec 2025 02:33:41 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: 3la6eIjqIhSAxOfghCvl5uQEl4Td6DCk/XcoS40UmOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Dec 5 02:33:41 2025 GMT Not After : Dec 12 02:33:41 2025 GMT Subject: CN=69324485-03bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:84:70:5b:5b:dc:a2:d4:9a:8b:2b:b5:d5:b2: 53:69:bc:3a:5c:53:6e:7d:87:18:ce:a5:09:2a:41: 4c:2f:c3:7f:9c:26:cb:40:73:89:c2:6b:46:e9:17: ec:5b:71:97:6c:4e:fe:de:79:db:8e:8e:a2:1d:36: fa:80:d0:9a:0d:51:08:a9:73:0b:5e:4c:bd:c8:a1: bf:a1:b6:60:78:a7:64:a9:d6:62:ae:25:fd:50:98: 91:30:c0:e9:57:a0:2c:67:0c:4d:a1:fd:6f:0b:d5: 4a:ab:32:be:14:29:40:49:da:f0:3f:64:b2:73:0c: 34:a8:0e:99:18:21:35:d0:a1:ba:e5:9a:c7:12:b8: 92:d9:e4:cd:e5:74:dd:aa:ba:23:13:cc:01:b9:1b: 0a:ec:95:52:74:d6:68:ce:51:45:b0:bf:d5:1f:9b: 86:be:7a:61:f2:3c:5f:29:96:f7:5c:d6:6a:59:db: 61:4c:f1:d2:d4:e8:d1:f2:10:69:bb:f9:67:8e:48: 79:b4:bd:14:fa:36:8d:a5:bf:22:7e:9d:72:48:f9: cd:52:5f:00:0e:e7:1e:a7:35:95:dd:78:a6:30:94: 64:58:07:ff:f4:1b:ae:96:12:eb:d8:e1:d6:69:12: 1c:cc:28:05:3d:d9:b9:be:54:96:7f:4f:cd:69:2a: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DB:69:4F:56:B3:BE:E0:68:D8:1E:F3:EB:5A:1E:A9:B6:5E:5C:29 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:20:69:3f:96:33:22:8a:fd:ca:eb:62:26:23:3a:4f:08:b1: bf:6e:08:d5:76:78:3e:36:97:50:0d:42:77:2e:56:c1:b4:23: c5:f5:97:83:e9:86:97:9a:3e:c9:52:ef:3b:31:a5:21:f7:77: ce:3c:47:26:4e:16:e1:b5:db:8c:39:6a:b2:72:cb:97:16:8d: 24:04:5e:f8:2a:c7:da:59:44:f7:56:30:f2:c2:b3:9a:06:a1: f0:f2:17:3f:b8:58:a9:b0:b7:48:f3:a0:4b:1f:fa:91:72:69: c7:70:56:51:f4:9b:e0:20:58:75:2f:2f:21:53:3f:82:44:04: e8:ca:33:a1:15:91:94:40:b5:28:bf:28:7e:ef:6b:56:5a:19: d2:27:a0:62:c6:58:78:e8:e0:05:ec:83:7d:22:b3:b8:27:78: f2:72:84:e6:a6:e1:06:2b:b7:17:21:21:16:c3:89:94:84:34: 8a:e8:c4:6e:82:60:41:1e:a9:62:a8:5f:b3:e0:90:20:02:08: 0a:61:60:16:3f:00:5c:2d:10:6d:31:ef:ec:d5:77:3d:a4:31: 29:24:3d:8f:04:36:34:8b:19:8e:44:d8:2c:f4:08:6b:bd:50: 74:3d:26:b9:4e:75:ce:c4:ff:20:de:1c:ed:f7:ad:0d:8e:3d: 15:9c:0e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjUxMjA1MDIzMzQxWhcNMjUxMjEyMDIzMzQxWjAYMRYwFAYD VQQDEw02OTMyNDQ4NS0wM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64RwW1vcotSaiyu11bJTabw6XFNufYcYzqUJKkFML8N/nCbLQHOJwmtG6Rfs W3GXbE7+3nnbjo6iHTb6gNCaDVEIqXMLXky9yKG/obZgeKdkqdZiriX9UJiRMMDp V6AsZwxNof1vC9VKqzK+FClASdrwP2Sycww0qA6ZGCE10KG65ZrHEriS2eTN5XTd qrojE8wBuRsK7JVSdNZozlFFsL/VH5uGvnph8jxfKZb3XNZqWdthTPHS1OjR8hBp u/lnjkh5tL0U+jaNpb8ifp1ySPnNUl8ADucepzWV3XimMJRkWAf/9BuulhLr2OHW aRIczCgFPdm5vlSWf0/NaSqOGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXbaU9W s77gaNge8+taHqm2XlwpMB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/IGk/ljMiiv3K62ImIzpPCLG/bgjVdng+NpdQDUJ3LlbBtCPF9ZeD 6YaXmj7JUu87MaUh93fOPEcmThbhtduMOWqycsuXFo0kBF74KsfaWUT3VjDywrOa BqHw8hc/uFipsLdI86BLH/qRcmnHcFZR9JvgIFh1Ly8hUz+CRAToyjOhFZGUQLUo vyh+72tWWhnSJ6Bixlh46OAF7IN9IrO4J3jycoTmpuEGK7cXISEWw4mUhDSK6MRu gmBBHqliqF+z4JAgAggKYWAWPwBcLRBtMe/s1Xc9pDEpJD2PBDY0ixmORNgs9Ahr vVB0PSa5TnXOxP8g3hzt960Njj0VnA5U -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:11 2025 by rpki-client