This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: ldLBCcahBBd+zbLLm3j0tp3C2ngLu5f31Ow/lsqiGdI= Subject key identifier: DF:F0:91:92:00:23:AD:85:87:47:46:D1:D6:24:A8:C0:AA:71:BD:34 Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03FA Signing time: Thu 04 Dec 2025 22:56:13 +0000 Manifest this update: Thu 04 Dec 2025 22:56:12 +0000 Manifest next update: Thu 11 Dec 2025 22:56:12 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: l4ShuN0VOEUsT3qKyAKnDdcqheP6xJuFF33wrdJdfLo=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Dec 4 22:56:12 2025 GMT Not After : Dec 11 22:56:12 2025 GMT Subject: CN=6932118d-63ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:1e:1e:eb:1f:1d:e9:2c:4e:28:a5:b0:36: 3c:72:bf:89:0a:0c:32:20:d8:5b:82:57:ef:9e:16: ec:db:fc:67:ca:74:ce:60:4f:30:c8:fe:a6:85:3c: dc:9f:e2:6c:4f:50:66:03:92:fd:0b:ed:57:90:40: 16:34:0a:b3:fe:1b:3f:7c:65:86:1a:fb:68:fc:a8: 42:88:58:0e:8b:82:8c:6b:70:86:1c:27:c2:0f:85: 3e:0a:11:97:53:02:61:be:56:6e:25:35:fa:44:3f: 7a:43:f2:d0:e9:be:2d:5e:07:8d:fa:91:48:32:cb: 64:eb:b3:34:13:44:28:d5:04:7a:a6:95:4c:dd:31: 0d:2e:0f:92:98:40:ea:c5:43:24:25:63:80:6f:5e: 58:7a:22:a5:52:d5:b7:ed:c2:ce:e0:33:3c:7b:e2: d5:c1:04:1f:82:46:aa:04:bd:ab:d9:d1:96:ed:e5: ea:9a:17:2d:29:e6:fd:b7:35:7b:da:98:d6:62:e1: 11:88:be:78:06:58:92:66:1d:d1:3c:bc:21:f3:6e: 79:34:90:f9:5e:81:c2:c2:6b:cc:07:6d:98:b4:91: e6:9e:36:94:be:aa:72:2b:4d:52:b0:e5:62:bb:e7: 9a:62:c0:78:75:0f:9f:61:38:55:6a:bc:65:04:5e: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F0:91:92:00:23:AD:85:87:47:46:D1:D6:24:A8:C0:AA:71:BD:34 X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4c:f9:45:13:c2:e3:04:f2:6e:71:0c:76:5d:8a:e1:ed:00: 6a:99:ab:ee:ef:fa:4c:54:9e:29:1b:14:71:1d:a1:84:e4:72: 46:d6:1a:ea:14:18:8a:1d:c2:46:39:4c:4c:10:53:0c:26:62: 6a:af:ba:0d:92:7a:d1:b0:55:d8:ff:b6:6f:f5:13:f4:a4:c9: d5:76:3b:6f:c1:e5:a9:c8:f5:69:e2:51:f0:d0:df:4b:df:94: e5:f9:a0:90:39:c7:a6:c4:04:d2:70:20:6e:20:c4:d9:a3:ab: 71:8a:4b:8d:6d:2f:15:ad:72:ba:5c:8b:be:ab:a0:17:a7:80: 3c:ff:92:36:76:2f:68:e5:7a:fd:66:76:6f:81:2f:f8:b7:64: da:d1:89:85:4c:4e:a1:54:1c:ef:18:d7:e9:fe:66:5b:51:a7: 07:43:a3:56:45:5f:35:9c:3e:2a:ff:48:2b:57:2d:cf:76:f7: 31:e8:6a:98:ef:b7:48:fc:d5:d9:74:55:90:d1:fa:f7:18:26: a5:02:f6:0c:cb:fb:ce:e4:4b:0e:be:e6:10:98:c9:e6:da:aa: 86:36:aa:b4:cd:14:46:6a:66:bc:82:43:b6:0f:4e:95:4c:9a: 8e:2a:95:17:60:bf:60:91:e0:49:e6:fd:a6:1f:64:8e:c0:52: a7:65:ae:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUxMjA0MjI1NjEyWhcNMjUxMjExMjI1NjEyWjAYMRYwFAYD VQQDEw02OTMyMTE4ZC02M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuYeHusfHeksTiilsDY8cr+JCgwyINhbglfvnhbs2/xnynTOYE8wyP6mhTzc n+JsT1BmA5L9C+1XkEAWNAqz/hs/fGWGGvto/KhCiFgOi4KMa3CGHCfCD4U+ChGX UwJhvlZuJTX6RD96Q/LQ6b4tXgeN+pFIMstk67M0E0Qo1QR6ppVM3TENLg+SmEDq xUMkJWOAb15YeiKlUtW37cLO4DM8e+LVwQQfgkaqBL2r2dGW7eXqmhctKeb9tzV7 2pjWYuERiL54BliSZh3RPLwh8255NJD5XoHCwmvMB22YtJHmnjaUvqpyK01SsOVi u+eaYsB4dQ+fYThVarxlBF73bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/wkZIA I62Fh0dG0dYkqMCqcb00MB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZTPlFE8LjBPJucQx2XYrh7QBqmavu7/pMVJ4pGxRxHaGE5HJG1hrq FBiKHcJGOUxMEFMMJmJqr7oNknrRsFXY/7Zv9RP0pMnVdjtvweWpyPVp4lHw0N9L 35Tl+aCQOcemxATScCBuIMTZo6txikuNbS8VrXK6XIu+q6AXp4A8/5I2di9o5Xr9 ZnZvgS/4t2Ta0YmFTE6hVBzvGNfp/mZbUacHQ6NWRV81nD4q/0grVy3Pdvcx6GqY 77dI/NXZdFWQ0fr3GCalAvYMy/vO5EsOvuYQmMnm2qqGNqq0zRRGama8gkO2D06V TJqOKpUXYL9gkeBJ5v2mH2SOwFKnZa6V -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:48 2025 by rpki-client