This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: 9TrQnR3pn4JAyELUygBLrKSTyis2w6Rmo7gBgrGBgbY= Subject key identifier: 8D:1C:64:22:45:BF:79:8D:B4:D1:C2:EB:3B:59:43:34:2B:9E:F7:F1 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 0364 Signing time: Thu 04 Dec 2025 23:19:49 +0000 Manifest this update: Thu 04 Dec 2025 23:19:48 +0000 Manifest next update: Thu 11 Dec 2025 23:19:48 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: ReZmIUjvT8xyaHd6bdzyLLgPrezJQZypzMhTfWP13Xg=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Dec 4 23:19:48 2025 GMT Not After : Dec 11 23:19:48 2025 GMT Subject: CN=69321714-7cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3b:69:27:a4:6e:4b:cb:d6:b2:f6:7c:21:2c: 38:a6:2d:cc:87:93:ad:5b:d8:d7:86:90:f5:ac:69: f1:8e:6e:b5:03:bf:72:6e:e2:72:ff:c8:2e:de:85: cf:92:7b:01:6a:22:58:39:20:bb:3c:39:ed:60:ec: 83:3e:a9:84:65:b9:2e:02:2a:8f:f5:be:eb:72:d3: e8:ea:c6:1c:a3:84:08:97:bf:97:89:d4:42:57:55: ed:8e:0b:08:2a:7d:a0:05:2d:cd:47:da:bc:c7:23: b0:78:ce:b4:b0:44:88:ba:12:cc:ce:76:37:a1:04: fd:0f:13:50:c9:ea:74:44:83:3e:33:99:6a:dc:a7: f1:34:18:74:bd:32:6d:55:39:32:3d:6e:13:ac:82: 5e:fc:30:cc:2b:5a:4f:1d:96:31:19:d4:d0:93:5d: b2:0a:9e:55:5f:1f:99:0a:25:60:05:3a:ab:83:94: 5b:27:7f:b3:6c:2c:65:4a:0c:66:ba:74:6d:19:2e: fd:0a:f4:eb:fc:e8:7d:b6:36:c0:35:1f:d6:20:8c: 27:b3:c7:74:d6:c9:b8:9c:37:59:2d:cf:7c:88:1b: da:26:38:9c:51:14:04:f6:4c:af:30:95:cc:4a:64: e6:5f:7a:50:1e:9f:a4:37:31:a4:6a:7a:d8:12:27: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1C:64:22:45:BF:79:8D:B4:D1:C2:EB:3B:59:43:34:2B:9E:F7:F1 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a1:c4:fa:fb:43:a9:08:fc:27:7a:35:25:45:81:08:88:d8: 65:82:ea:00:3b:dd:6e:2e:d0:6a:81:0e:58:0c:9f:a4:5c:11: 52:78:d6:c8:d6:cb:d1:e1:9d:12:7d:62:cc:78:eb:55:b4:03: ff:81:2b:e1:2e:e6:ff:84:36:aa:1c:60:65:5c:50:a6:ff:e5: ed:58:c9:75:e5:f5:8e:56:6f:06:17:79:05:b2:38:0f:b9:1f: 25:8b:d1:c1:0c:49:80:22:af:12:3c:fa:5d:95:ce:85:fe:56: eb:25:df:34:71:44:60:9f:ad:d9:1c:a9:75:38:5f:5c:a9:3d: b0:ed:3d:c0:15:01:ec:9f:74:c2:02:ad:f1:46:e5:51:20:78: 9f:c2:6c:cf:2f:8b:0a:f0:5c:cf:b0:26:7a:aa:18:cd:6d:ee: a5:c1:72:b8:b1:4d:fe:f2:83:39:a7:c4:73:e7:5b:83:50:c4: e4:72:48:a7:5b:c4:f1:c5:cd:14:d2:7b:c9:a1:fd:a7:92:9a: e3:4d:17:f2:a5:09:cc:0d:e5:bd:40:44:14:54:1a:76:c7:81: 59:c1:aa:e8:16:cb:36:e3:4c:40:53:8b:8b:40:97:40:b4:0c: c0:be:0e:01:b3:f9:71:86:28:0d:9f:8c:60:d2:71:a2:ec:46: d7:25:a3:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUxMjA0MjMxOTQ4WhcNMjUxMjExMjMxOTQ4WjAYMRYwFAYD VQQDEw02OTMyMTcxNC03Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DtpJ6RuS8vWsvZ8ISw4pi3Mh5OtW9jXhpD1rGnxjm61A79ybuJy/8gu3oXP knsBaiJYOSC7PDntYOyDPqmEZbkuAiqP9b7rctPo6sYco4QIl7+XidRCV1XtjgsI Kn2gBS3NR9q8xyOweM60sESIuhLMznY3oQT9DxNQyep0RIM+M5lq3KfxNBh0vTJt VTkyPW4TrIJe/DDMK1pPHZYxGdTQk12yCp5VXx+ZCiVgBTqrg5RbJ3+zbCxlSgxm unRtGS79CvTr/Oh9tjbANR/WIIwns8d01sm4nDdZLc98iBvaJjicURQE9kyvMJXM SmTmX3pQHp+kNzGkanrYEicSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0cZCJF v3mNtNHC6ztZQzQrnvfxMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ocT6+0OpCPwnejUlRYEIiNhlguoAO91uLtBqgQ5YDJ+kXBFSeNbI 1svR4Z0SfWLMeOtVtAP/gSvhLub/hDaqHGBlXFCm/+XtWMl15fWOVm8GF3kFsjgP uR8li9HBDEmAIq8SPPpdlc6F/lbrJd80cURgn63ZHKl1OF9cqT2w7T3AFQHsn3TC Aq3xRuVRIHifwmzPL4sK8FzPsCZ6qhjNbe6lwXK4sU3+8oM5p8Rz51uDUMTkckin W8Txxc0U0nvJof2nkprjTRfypQnMDeW9QEQUVBp2x4FZwaroFss240xAU4uLQJdA tAzAvg4Bs/lxhigNn4xg0nGi7EbXJaOc -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:38 2025 by rpki-client