This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: iA7zM3vhtunMqEU0BwdR9YIRY3CY4cN16u/643PTCJ4= Subject key identifier: 9A:AD:A1:57:9D:13:E7:BD:E5:20:DC:45:CB:EB:91:E7:83:7F:75:90 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0564 Signing time: Thu 04 Dec 2025 22:06:27 +0000 Manifest this update: Thu 04 Dec 2025 22:06:26 +0000 Manifest next update: Thu 11 Dec 2025 22:06:26 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: 39rdjsNb8CWq8wsrvq9LIoCKBqy6o/l/ZFayUxFjC24=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Dec 4 22:06:26 2025 GMT Not After : Dec 11 22:06:26 2025 GMT Subject: CN=693205e3-f8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:39:04:c5:c4:5b:5d:17:68:fd:49:c5:b0: 6a:e3:fd:0a:92:ba:f2:9d:b1:be:42:43:28:85:df: 84:fb:b0:03:18:95:be:8d:a6:7d:c1:1e:9b:76:b4: 39:85:5c:25:b6:5c:c6:7f:91:4f:69:bd:41:c0:3d: 87:7a:58:68:f1:f3:2a:7f:c5:9f:5a:f5:a3:1b:ed: 4b:61:d2:5c:13:f4:e5:d1:1b:15:86:4d:21:37:dd: 01:ce:b7:1d:72:4f:3b:bb:14:04:fc:8b:f6:39:e0: 57:c2:30:1e:c7:de:83:04:4a:fb:b3:c5:ab:d6:4a: 63:b6:12:16:d1:7b:87:99:21:32:97:67:3c:6f:a3: 6f:75:e7:67:97:d7:13:9f:32:1c:fd:df:96:d9:d5: b7:e0:9b:ef:84:3e:17:6c:5f:c3:0d:f8:19:b2:9b: 77:c1:4e:77:95:06:34:c5:32:35:92:3d:52:28:b0: 38:0c:29:f9:d9:11:8a:d6:c2:7e:59:7b:af:64:d9: 9b:67:45:94:21:aa:5a:14:c8:0b:9c:13:ba:6a:a3: 69:03:d0:ab:9f:c0:a8:b8:61:5a:fa:79:2c:50:60: 14:d6:76:0b:59:20:09:aa:a6:88:9b:76:d2:5c:8a: 1a:7e:8f:24:8f:3a:07:27:8d:f9:fa:1f:8c:7b:be: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AD:A1:57:9D:13:E7:BD:E5:20:DC:45:CB:EB:91:E7:83:7F:75:90 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:7b:cb:73:3a:ac:b9:68:b0:60:19:01:43:a0:74:ce:7d:33: d2:c3:3f:2a:0d:44:97:a8:3f:f8:5b:30:be:ed:f9:94:2d:ed: 9e:8e:d8:04:1e:87:bb:82:d3:96:fe:13:04:e7:df:16:8e:0b: 76:8f:ae:a9:63:e9:a7:f9:20:63:94:22:f1:26:e2:1f:eb:42: 57:70:27:f7:f2:e7:5c:e7:6e:41:0d:cb:eb:04:62:27:ee:92: 06:70:21:6a:7e:f3:63:12:cd:1f:19:79:26:36:2a:1c:46:1a: 27:a9:25:9b:ff:19:23:fb:55:d4:f8:17:69:36:d9:91:c5:05: fa:6e:4d:dd:cc:e0:69:94:dd:86:db:5d:cd:04:40:34:b5:e1: 0e:dc:68:2f:1c:1e:0f:b3:f8:97:a2:b8:1d:5b:97:7c:83:28: 90:98:45:a8:e6:9a:55:59:3e:0c:46:45:60:74:79:9f:18:f8: 4e:40:d3:91:ea:78:c4:42:57:0f:20:53:ec:51:69:4f:0f:32: f1:c2:c1:d3:dd:10:17:1f:0e:5d:cb:0c:4d:57:98:85:ec:ed: bf:c1:77:fc:22:b1:ad:d6:ab:5e:d2:7a:40:36:12:6d:83:7a: b4:8e:35:17:d5:6e:d8:b4:c7:4c:82:08:aa:6b:79:e7:43:19: 35:6b:ff:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUxMjA0MjIwNjI2WhcNMjUxMjExMjIwNjI2WjAYMRYwFAYD VQQDEw02OTMyMDVlMy1mOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XY5BMXEW10XaP1JxbBq4/0KkrrynbG+QkMohd+E+7ADGJW+jaZ9wR6bdrQ5 hVwltlzGf5FPab1BwD2Helho8fMqf8WfWvWjG+1LYdJcE/Tl0RsVhk0hN90Bzrcd ck87uxQE/Iv2OeBXwjAex96DBEr7s8Wr1kpjthIW0XuHmSEyl2c8b6Nvdednl9cT nzIc/d+W2dW34JvvhD4XbF/DDfgZspt3wU53lQY0xTI1kj1SKLA4DCn52RGK1sJ+ WXuvZNmbZ0WUIapaFMgLnBO6aqNpA9Crn8CouGFa+nksUGAU1nYLWSAJqqaIm3bS XIoafo8kjzoHJ435+h+Me74IpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqtoVed E+e95SDcRcvrkeeDf3WQMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEe8tzOqy5aLBgGQFDoHTOfTPSwz8qDUSXqD/4WzC+7fmULe2ejtgE Hoe7gtOW/hME598Wjgt2j66pY+mn+SBjlCLxJuIf60JXcCf38udc525BDcvrBGIn 7pIGcCFqfvNjEs0fGXkmNiocRhonqSWb/xkj+1XU+BdpNtmRxQX6bk3dzOBplN2G 213NBEA0teEO3GgvHB4Ps/iXorgdW5d8gyiQmEWo5ppVWT4MRkVgdHmfGPhOQNOR 6njEQlcPIFPsUWlPDzLxwsHT3RAXHw5dywxNV5iF7O2/wXf8IrGt1qte0npANhJt g3q0jjUX1W7YtMdMggiqa3nnQxk1a/9M -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:35 2025 by rpki-client