This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: YrDnEidlLM3e87OYiUs0q+2rdhdqjyVwkfBZOJoIxxQ= Subject key identifier: B1:E7:0A:A5:48:28:74:7B:70:33:28:3B:97:F2:E4:94:17:BA:55:03 Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: 0B Signing time: Fri 05 Dec 2025 05:48:39 +0000 Manifest this update: Fri 05 Dec 2025 05:48:38 +0000 Manifest next update: Fri 12 Dec 2025 05:48:38 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: bucCfxwYfiUzL3OoX4H6VMkKAx8VdJf3fYTZmm6Fy6U=) 2: C6B0BA0EC37D11F0A205F578C4F9AE02.roa (hash: tub+Z8WVlBzcWOU2IfPK/efOM91HFbQq95uFwNMo7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Dec 5 05:48:38 2025 GMT Not After : Dec 12 05:48:38 2025 GMT Subject: CN=69327237-24cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:e4:55:2d:e6:28:a2:48:a3:fb:2f:6e:39: c2:9e:f7:92:ef:07:3c:89:5b:47:5a:a0:7c:ba:cd: 93:4a:c5:1a:70:4b:56:c8:5e:17:0c:5c:eb:90:d9: 36:68:ec:8b:dc:d6:30:8e:6e:4c:af:ba:6f:04:1b: 06:bb:55:81:e6:18:fb:2a:34:df:98:ab:eb:73:4f: 5d:68:bc:02:42:da:0c:52:e7:9f:ec:8a:cc:7c:c7: 5c:a3:a1:76:6c:ab:83:df:0d:04:e3:64:47:68:2e: f9:ff:fb:93:2c:2a:14:c2:f1:7f:89:6e:6e:c2:cc: 40:60:1c:31:27:c1:32:9e:97:9e:1f:d6:53:73:7a: f4:3f:96:0c:c4:cb:f8:8d:bb:19:b6:81:ad:e7:53: 0d:13:77:ca:c1:1a:b8:5e:7a:93:91:b3:f4:38:75: 0e:ee:4e:ba:9e:74:a1:24:de:2d:65:73:79:29:f1: 43:d6:9c:f2:73:8a:da:6a:a8:e3:4d:11:a5:88:41: 1c:02:fd:cf:9d:26:80:03:9a:87:06:6a:b6:95:7f: 7c:93:d8:bd:a6:e2:9e:04:dd:d7:dc:26:bb:47:30: 2e:1c:3b:30:96:50:05:e1:71:1b:e4:95:be:53:d2: e2:67:31:ac:5f:15:c9:8f:fd:a6:cc:87:6e:fe:81: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E7:0A:A5:48:28:74:7B:70:33:28:3B:97:F2:E4:94:17:BA:55:03 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a6:88:b5:f0:33:65:8f:88:a4:46:a2:92:8e:7a:4e:6e:40: a2:64:fc:3e:8a:36:39:c2:ae:34:cb:75:35:be:0f:16:68:f1: 2e:a6:0d:a7:be:7a:c2:b2:e0:4c:ed:ec:ad:f6:c2:97:ef:d7: 6b:e4:af:64:5a:e1:87:32:e4:ad:c2:a5:8d:7b:d9:7c:6c:3c: f0:31:6f:a0:a8:9b:c1:51:98:55:75:f6:07:6e:a1:5d:63:6e: 2a:f3:68:35:93:f2:b5:8a:5b:c8:72:9d:db:14:3d:a2:1f:44: 79:b7:8a:97:62:e4:39:b0:43:c4:27:36:7a:31:00:48:4c:fb: 39:4b:e1:45:b5:25:52:cb:63:c0:a0:9b:f1:a3:00:5e:11:ad: ea:c7:5a:82:b1:14:e8:71:fa:80:31:52:e3:dd:d6:3e:89:3f: 14:cf:0f:f6:20:8d:77:b1:e0:35:8b:11:b2:c4:4b:f6:cc:08: f2:e1:9f:14:2d:c3:e2:b5:3e:31:5c:b3:b6:4b:8a:32:46:d9: e0:eb:80:4e:17:15:6e:73:4c:21:45:c0:eb:14:f8:2e:31:00: e9:d6:06:88:37:af:19:65:61:ea:10:e0:bf:f9:e4:42:8c:10: eb:55:9d:49:48:61:0d:ac:1f:37:fc:92:cb:fe:3f:9d:bc:d3: e0:38:4e:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNTEyMDUwNTQ4MzhaFw0yNTEyMTIwNTQ4MzhaMBgxFjAUBgNV BAMTDTY5MzI3MjM3LTI0Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJGuRVLeYookij+y9uOcKe95LvBzyJW0daoHy6zZNKxRpwS1bIXhcMXOuQ2TZo 7Ivc1jCObkyvum8EGwa7VYHmGPsqNN+Yq+tzT11ovAJC2gxS55/sisx8x1yjoXZs q4PfDQTjZEdoLvn/+5MsKhTC8X+Jbm7CzEBgHDEnwTKel54f1lNzevQ/lgzEy/iN uxm2ga3nUw0Td8rBGrheepORs/Q4dQ7uTrqedKEk3i1lc3kp8UPWnPJzitpqqONN EaWIQRwC/c+dJoADmocGaraVf3yT2L2m4p4E3dfcJrtHMC4cOzCWUAXhcRvklb5T 0uJnMaxfFcmP/abMh27+gbRHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsecKpUgo dHtwMyg7l/LklBe6VQMwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzY4MkIzOUE2QzM3QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRr TUtLZGxkZGl0NWtLY1A4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKemiLXwM2WPiKRGopKOek5uQKJk/D6KNjnCrjTLdTW+DxZo8S6mDae+ esKy4Ezt7K32wpfv12vkr2Ra4Ycy5K3CpY172XxsPPAxb6Com8FRmFV19gduoV1j birzaDWT8rWKW8hyndsUPaIfRHm3ipdi5DmwQ8QnNnoxAEhM+zlL4UW1JVLLY8Cg m/GjAF4RrerHWoKxFOhx+oAxUuPd1j6JPxTPD/YgjXex4DWLEbLES/bMCPLhnxQt w+K1PjFcs7ZLijJG2eDrgE4XFW5zTCFFwOsU+C4xAOnWBog3rxllYeoQ4L/55EKM EOtVnUlIYQ2sHzf8ksv+P5280+A4TqU= -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:44 2025 by rpki-client