This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: 1Qu+JQnnN+Nsjve2uqR8SxQZYrfv49vA34nzDhLBmXI= Subject key identifier: 50:2B:EE:A0:24:17:6F:C0:45:02:75:91:96:B6:43:43:E2:9F:31:1B Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 0140 Signing time: Fri 05 Dec 2025 02:28:53 +0000 Manifest this update: Fri 05 Dec 2025 02:28:52 +0000 Manifest next update: Fri 12 Dec 2025 02:28:52 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: Lr4H09bHIPgbKsE7XCYBre25w4RxMtjvgOo+y586KII=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Dec 5 02:28:52 2025 GMT Not After : Dec 12 02:28:52 2025 GMT Subject: CN=69324365-4332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6c:4f:ae:9a:35:c0:8b:d5:1e:b8:bd:21:f3: b1:9e:74:50:16:45:a0:96:f9:19:24:5b:8a:54:61: 28:f7:51:ac:fd:4f:d3:d2:a5:af:ab:76:4d:a3:f9: 23:ef:5b:64:f9:b7:bf:23:82:c1:08:d6:eb:fa:a3: d6:ae:48:ae:5d:03:1f:26:75:3a:28:9d:de:9e:73: 54:b9:b4:d3:5e:82:57:8e:6a:2d:43:e7:bb:5a:ad: 62:0e:78:38:d7:66:af:ef:d5:87:04:b3:0e:4d:f1: 5a:73:25:ee:74:9b:dc:02:b2:6a:20:34:e9:43:54: 50:bc:46:27:67:ac:2a:28:a7:8b:f6:41:ac:d9:29: 22:d6:3c:21:92:0b:d2:95:04:24:9f:aa:36:73:2f: 6b:a1:09:0f:d4:80:c8:02:67:2b:81:28:79:6f:cf: eb:90:87:0c:d5:54:b4:60:4f:c5:f5:fb:3e:0c:24: b0:19:90:90:93:b0:1a:1a:a0:a8:83:c7:e0:a1:5a: 7d:63:a1:5b:7f:9a:ed:8b:68:99:e6:f7:13:77:13: 4e:c1:f8:13:95:8f:c3:50:ae:b0:db:46:79:f0:a6: 34:a7:bb:0b:82:98:a3:1b:16:c9:81:ad:2c:75:e5: f1:cc:4d:19:c3:d2:4d:15:70:3b:dc:a9:6f:50:cb: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:EE:A0:24:17:6F:C0:45:02:75:91:96:B6:43:43:E2:9F:31:1B X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:1f:90:bd:eb:34:32:74:d8:bb:9e:ce:a2:a2:36:46:74:db: f0:01:cb:d3:18:cd:f1:96:bc:0c:f5:e3:70:a8:71:2c:58:03: 5b:5d:f0:96:4b:e3:6e:cc:c6:e0:44:ec:2d:e5:9c:e9:11:22: f1:7e:4f:ef:52:0b:68:2c:a0:19:1b:95:c5:3f:04:b4:76:07: 19:f3:49:f9:ca:cc:47:1f:86:75:28:2d:bd:bd:8a:db:62:ba: a5:4c:0a:9d:be:bb:4f:9d:6f:c9:0e:5a:1e:5d:6b:30:ba:1a: d6:78:f7:1f:e1:d4:84:54:d0:14:11:5d:0b:6f:28:7d:80:67: c9:ab:37:72:79:34:18:80:ca:82:d0:2a:63:f1:93:85:53:5b: 76:b1:05:25:06:3d:75:8c:65:bf:1b:0a:3c:fd:df:43:6f:b0: d5:1f:fb:10:e7:c6:95:f8:c0:36:76:06:c7:e5:13:b2:f4:33: 9c:76:72:38:9f:99:bc:39:a7:11:8f:7f:b9:7e:2e:f0:1c:21: 60:82:47:14:b8:f4:c1:e5:be:d6:7e:8c:2f:70:5e:3b:e1:f6: 05:6d:d8:c3:08:dc:e9:c4:fc:28:8e:a0:c2:7b:e2:9d:ff:42: ce:64:bd:21:0f:ea:31:4f:9d:d4:98:7c:d1:ab:ad:15:e6:cc: 86:0b:14:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUxMjA1MDIyODUyWhcNMjUxMjEyMDIyODUyWjAYMRYwFAYD VQQDEw02OTMyNDM2NS00MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WxPrpo1wIvVHri9IfOxnnRQFkWglvkZJFuKVGEo91Gs/U/T0qWvq3ZNo/kj 71tk+be/I4LBCNbr+qPWrkiuXQMfJnU6KJ3ennNUubTTXoJXjmotQ+e7Wq1iDng4 12av79WHBLMOTfFacyXudJvcArJqIDTpQ1RQvEYnZ6wqKKeL9kGs2Ski1jwhkgvS lQQkn6o2cy9roQkP1IDIAmcrgSh5b8/rkIcM1VS0YE/F9fs+DCSwGZCQk7AaGqCo g8fgoVp9Y6Fbf5rti2iZ5vcTdxNOwfgTlY/DUK6w20Z58KY0p7sLgpijGxbJga0s deXxzE0Zw9JNFXA73KlvUMuwOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAr7qAk F2/ARQJ1kZa2Q0PinzEbMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhH5C96zQydNi7ns6iojZGdNvwAcvTGM3xlrwM9eNwqHEsWANbXfCW S+NuzMbgROwt5ZzpESLxfk/vUgtoLKAZG5XFPwS0dgcZ80n5ysxHH4Z1KC29vYrb YrqlTAqdvrtPnW/JDloeXWswuhrWePcf4dSEVNAUEV0Lbyh9gGfJqzdyeTQYgMqC 0Cpj8ZOFU1t2sQUlBj11jGW/Gwo8/d9Db7DVH/sQ58aV+MA2dgbH5ROy9DOcdnI4 n5m8OacRj3+5fi7wHCFggkcUuPTB5b7WfowvcF474fYFbdjDCNzpxPwojqDCe+Kd /0LOZL0hD+oxT53UmHzRq60V5syGCxTe -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:30 2025 by rpki-client