This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json) Hash identifier: EW7RcWqks+OVTAb49P5xQs2JrHyPcHA7rS1Df60OmD8= Subject key identifier: 5F:C0:EC:26:C1:3C:9F:9D:A3:CA:6C:B6:BA:3C:D6:ED:61:F6:1E:36 Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Certificate serial: 13ED39368D451569AD9558633131B8A4F12F84A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft Manifest number: 06A6 Signing time: Sat 06 Dec 2025 14:21:29 +0000 Manifest this update: Sat 06 Dec 2025 14:16:29 +0000 Manifest next update: Sun 07 Dec 2025 16:12:29 +0000 Files and hashes: 1: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: TFtm5/BFF3wNni2WglPp/4h8euNWCnisy3C7rHJjMRM=) 2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=) 3: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=) 4: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=) 5: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 16:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ed:39:36:8d:45:15:69:ad:95:58:63:31:31:b8:a4:f1:2f:84:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Validity Not Before: Dec 6 14:16:29 2025 GMT Not After : Dec 7 16:12:29 2025 GMT Subject: CN=5FC0EC26C13C9F9DA3CA6CB6BA3CD6ED61F61E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:e4:56:a9:64:68:3b:d1:6b:e0:80:85:42: 3f:a3:74:06:09:0b:6c:b3:89:ae:85:29:92:4d:01: 2f:85:50:87:cb:aa:00:b3:4a:3f:c5:21:1b:46:1c: e4:4c:2a:2d:4a:fc:36:f1:3f:91:f6:35:72:f5:5a: 02:32:f3:bd:1e:e1:05:ec:6d:c1:eb:27:30:ff:5e: c9:09:9c:d9:8d:30:85:97:ab:1a:6d:07:f9:ab:06: 9d:83:47:a3:2e:5d:0f:79:31:74:b4:ec:d3:3b:c9: ff:36:a5:14:8e:4c:77:c2:a2:a1:45:d4:60:0b:79: 90:4c:44:1d:77:b3:f3:29:01:fa:6f:eb:4c:f8:23: 06:8e:33:ea:b1:05:e5:8c:53:cd:64:37:b9:f2:ac: d4:8b:23:1a:d1:93:12:a3:6b:9a:3a:33:2b:6f:db: f5:c9:07:48:84:2e:2c:75:9e:ac:59:a1:da:a3:25: d6:43:ae:cb:78:2e:e1:49:c8:6a:16:83:97:cc:3d: 64:57:da:d0:cf:19:e2:b7:0d:cc:95:0f:9b:89:e3: 6e:a5:7b:85:07:18:e7:bd:a9:5f:ac:e7:ab:fc:61: 2a:79:98:ee:6e:07:d3:9e:e4:73:f3:9f:b3:08:1d: 56:d8:60:f9:4d:38:a6:a6:2d:ea:7a:35:23:d8:99: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C0:EC:26:C1:3C:9F:9D:A3:CA:6C:B6:BA:3C:D6:ED:61:F6:1E:36 X509v3 Authority Key Identifier: keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:91:f4:15:8d:12:f2:d5:24:49:36:af:40:99:2d:4f:09:f3: 19:49:cf:9e:99:1d:d7:a2:7f:47:e0:32:e5:de:b2:31:02:dd: 37:b4:2e:fd:b5:82:f6:61:db:50:cd:d1:67:fa:e2:ba:57:43: 15:25:9a:bf:a0:98:93:c3:7f:d8:aa:5b:17:6a:8d:0a:92:30: 0c:e5:16:fa:2e:34:1d:fb:b7:ef:80:b8:e8:c4:70:f2:e5:73: 7a:f8:0e:00:fa:6b:45:06:96:8e:c5:96:8e:bf:aa:ff:be:a2: 39:68:3f:9d:4d:5a:80:e9:46:44:18:d0:b9:a2:58:ea:6e:da: 5f:c3:72:1a:55:fa:4b:92:45:55:5d:df:98:31:04:4b:69:05: 38:1f:71:40:74:03:e4:ff:e3:d0:a4:b8:b7:89:5d:0d:3f:fd: 2d:09:78:30:36:02:ac:61:64:53:fd:66:05:60:63:78:6a:12: ea:59:9c:af:5e:8e:4f:3e:dd:50:87:24:17:c0:8f:55:67:ef: 46:06:7c:66:55:ed:56:74:21:28:3c:97:3b:69:24:3e:c1:dd: 4a:94:a5:96:23:1c:14:e3:ca:42:68:a5:39:02:c4:e3:e0:34: 4d:47:1c:1b:59:8a:ff:84:81:2a:55:e5:32:93:7f:fc:49:b2: 57:85:bd:e1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE+05No1FFWmtlVhjMTG4pPEvhKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MTIwNjE0MTYyOVoX DTI1MTIwNzE2MTIyOVowMzExMC8GA1UEAxMoNUZDMEVDMjZDMTNDOUY5REEzQ0E2 Q0I2QkEzQ0Q2RUQ2MUY2MUUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdW5FapZGg70WvggIVCP6N0BgkLbLOJroUpkk0BL4VQh8uqALNKP8UhG0Yc 5EwqLUr8NvE/kfY1cvVaAjLzvR7hBextwesnMP9eyQmc2Y0whZerGm0H+asGnYNH oy5dD3kxdLTs0zvJ/zalFI5Md8KioUXUYAt5kExEHXez8ykB+m/rTPgjBo4z6rEF 5YxTzWQ3ufKs1IsjGtGTEqNrmjozK2/b9ckHSIQuLHWerFmh2qMl1kOuy3gu4UnI ahaDl8w9ZFfa0M8Z4rcNzJUPm4njbqV7hQcY572pX6znq/xhKnmY7m4H057kc/Of swgdVthg+U04pqYt6no1I9iZJIsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRfwOwm wTyfnaPKbLa6PNbtYfYeNjAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT 4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEApJH0FY0S8tUkSTavQJktTwnzGUnPnpkd16J/R+Ay5d6yMQLd N7Qu/bWC9mHbUM3RZ/riuldDFSWav6CYk8N/2KpbF2qNCpIwDOUW+i40Hfu374C4 6MRw8uVzevgOAPprRQaWjsWWjr+q/76iOWg/nU1agOlGRBjQuaJY6m7aX8NyGlX6 S5JFVV3fmDEES2kFOB9xQHQD5P/j0KS4t4ldDT/9LQl4MDYCrGFkU/1mBWBjeGoS 6lmcr16OTz7dUIckF8CPVWfvRgZ8ZlXtVnQhKDyXO2kkPsHdSpSlliMcFOPKQmil OQLE4+A0TUccG1mK/4SBKlXlMpN//EmyV4W94Q== -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:12 2025 by rpki-client