This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: 60gFiak4UZ/jHwpFZpbThBqBF868APzYBF4mNVu6Msg= Subject key identifier: 3D:AB:A4:6B:0E:A9:C2:A9:B0:AB:7E:6A:F7:9C:B8:28:60:0B:AA:D7 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 19D8A86178B43D06BA30E1F8242EAECBDF277CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 06A3 Signing time: Sat 06 Dec 2025 07:51:29 +0000 Manifest this update: Sat 06 Dec 2025 07:46:29 +0000 Manifest next update: Sun 07 Dec 2025 08:16:29 +0000 Files and hashes: 1: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) 2: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) 3: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 4: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 5: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 6: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) 7: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) 8: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: Uroz7HxXUO2XvelynNWWw9XV5hKQxE8COei4KOApVII=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 08:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d8:a8:61:78:b4:3d:06:ba:30:e1:f8:24:2e:ae:cb:df:27:7c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Dec 6 07:46:29 2025 GMT Not After : Dec 7 08:16:29 2025 GMT Subject: CN=3DABA46B0EA9C2A9B0AB7E6AF79CB828600BAAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:73:2f:55:ec:25:e0:6c:73:b2:75:26:c6: 15:02:39:92:72:72:a5:22:42:38:b0:c6:b1:3a:74: ad:f3:21:79:7f:0d:82:0c:f8:db:67:c3:10:e3:08: 8b:bf:fa:46:f4:b7:9a:5d:42:3b:3b:3f:7a:7b:5a: 66:47:8a:8e:5b:51:d3:ff:54:2a:b6:d3:47:3f:62: db:9b:78:94:b8:4c:1a:d8:2a:23:ae:76:98:22:b8: ed:0a:3d:49:ac:24:4f:5e:b6:03:bc:79:75:5b:83: 68:f1:c4:61:95:0c:80:75:b2:a4:55:bd:4e:a1:2f: 61:3c:a8:66:4b:50:c4:a2:a3:0b:a2:a7:67:63:b8: 0c:2b:79:2f:d6:70:0b:14:03:45:c8:f2:0c:37:f1: dd:a3:f2:dc:b7:ee:1a:7e:6f:7f:88:b6:bd:53:0a: fb:54:2c:9c:4f:aa:32:24:57:75:ed:32:f8:4e:88: 01:31:30:ab:2c:9c:97:1d:eb:6e:67:3a:ff:34:1b: 03:5a:a6:9a:44:ed:61:0c:35:97:6a:10:cc:c2:b5: 59:23:ad:ac:67:0c:0e:e1:db:a3:4b:5b:4f:d0:2a: d1:97:b5:f6:af:60:12:0e:2b:73:de:e1:0e:72:7a: 63:7b:7f:85:2a:d0:64:c6:64:8f:5c:ae:1c:6e:d9: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:A4:6B:0E:A9:C2:A9:B0:AB:7E:6A:F7:9C:B8:28:60:0B:AA:D7 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1a:99:cb:53:3e:5c:9a:e3:0c:66:ea:c1:79:07:48:fe:64: 3f:cf:3a:84:27:6e:20:bd:25:2c:73:03:3f:a6:66:53:1f:58: 77:00:c5:04:dc:f8:f9:f4:ab:b5:55:01:b4:cb:29:39:d7:22: 13:4f:37:ca:08:9a:46:17:71:fd:29:f6:df:83:c8:37:a9:02: 12:11:b1:93:56:86:1d:d3:61:38:0f:46:17:39:bc:d2:e6:ff: 39:9d:e1:7d:9f:15:3a:25:8a:99:9c:0d:99:6d:ac:76:0b:a4: 59:3d:09:1b:a1:30:ea:96:c0:d0:c5:b9:ec:4c:98:81:61:89: d6:ad:d7:47:24:ac:ed:1b:d5:32:40:11:83:c8:5a:46:a2:55: e9:6d:2e:40:94:ec:87:f4:3f:05:da:35:e4:ed:0f:49:f6:d9: 5f:2e:db:95:b4:2b:49:11:10:d3:71:5a:59:3f:a5:94:60:91: ba:68:18:9c:6f:df:d5:29:27:5a:14:5b:a3:8c:50:1d:73:ef: 13:6e:88:b9:42:c6:88:c2:94:9c:4f:ff:04:d4:ec:ff:4b:b8: d0:eb:85:12:a9:96:7f:10:ba:ae:9b:97:33:b8:fd:62:fd:a8: 1c:1b:f3:6c:50:15:ca:19:14:16:19:a0:da:43:a2:70:43:6b: 38:aa:87:f4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGdioYXi0PQa6MOH4JC6uy98nfPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MTIwNjA3NDYyOVoX DTI1MTIwNzA4MTYyOVowMzExMC8GA1UEAxMoM0RBQkE0NkIwRUE5QzJBOUIwQUI3 RTZBRjc5Q0I4Mjg2MDBCQUFENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH7cy9V7CXgbHOydSbGFQI5knJypSJCOLDGsTp0rfMheX8Nggz422fDEOMI i7/6RvS3ml1COzs/entaZkeKjltR0/9UKrbTRz9i25t4lLhMGtgqI652mCK47Qo9 SawkT162A7x5dVuDaPHEYZUMgHWypFW9TqEvYTyoZktQxKKjC6KnZ2O4DCt5L9Zw CxQDRcjyDDfx3aPy3LfuGn5vf4i2vVMK+1QsnE+qMiRXde0y+E6IATEwqyyclx3r bmc6/zQbA1qmmkTtYQw1l2oQzMK1WSOtrGcMDuHbo0tbT9Aq0Ze19q9gEg4rc97h DnJ6Y3t/hSrQZMZkj1yuHG7Z6RkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ9q6Rr DqnCqbCrfmr3nLgoYAuq1zAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAHBqZy1M+XJrjDGbqwXkHSP5kP886hCduIL0lLHMDP6ZmUx9Y dwDFBNz4+fSrtVUBtMspOdciE083ygiaRhdx/Sn234PIN6kCEhGxk1aGHdNhOA9G Fzm80ub/OZ3hfZ8VOiWKmZwNmW2sdgukWT0JG6Ew6pbA0MW57EyYgWGJ1q3XRySs 7RvVMkARg8haRqJV6W0uQJTsh/Q/Bdo15O0PSfbZXy7blbQrSREQ03FaWT+llGCR umgYnG/f1SknWhRbo4xQHXPvE26IuULGiMKUnE//BNTs/0u40OuFEqmWfxC6rpuX M7j9Yv2oHBvzbFAVyhkUFhmg2kOicENrOKqH9A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:19 2025 by rpki-client