This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json) Hash identifier: eH+XhlPsiVmRks/3JeeHbOnFJOSVv/4JIu58uA2h4/o= Subject key identifier: D1:33:F7:6E:E8:CC:AE:8C:0D:4D:07:6E:75:7D:D0:FF:63:70:E2:A4 Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft Manifest number: 02D5 Signing time: Sun 21 Dec 2025 00:36:46 +0000 Manifest this update: Sun 21 Dec 2025 00:36:45 +0000 Manifest next update: Sun 28 Dec 2025 00:36:45 +0000 Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: 5Rovw40E0az9nOwX2DU9d9Wewe/vuWez5AvHuKHRzF8=) 2: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: xW+yKhl4DzZnOJoS6Xn0l4WHvXiDoALnGTFCf25+bew=) 3: 7C754058415411ED8133414DC4F9AE02.roa (hash: gLcQ/guwMKYVAXT6wLKnevx2zWGWLwzZoBVoVJPP2CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Validity Not Before: Dec 21 00:36:45 2025 GMT Not After : Dec 28 00:36:45 2025 GMT Subject: CN=6947411e-ebf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:06:c2:9f:fa:c6:0f:57:9c:0d:a2:07:1d: 7f:63:0e:b2:8d:b4:6c:e2:b4:74:52:0a:36:aa:a8: e0:f2:b6:5f:0b:04:6a:51:1a:07:04:97:84:33:cb: 1a:30:31:70:cc:f9:41:f1:ba:2b:0c:1e:c5:1c:04: f4:48:fa:44:1f:9c:0f:71:70:1b:94:5c:52:22:eb: f7:2e:8e:8b:3d:1a:70:ab:b3:73:74:7a:86:dc:bb: 79:46:3a:0f:dd:fd:c8:a5:7e:42:b6:cd:8d:4e:d2: 32:c2:46:78:7e:4a:af:63:4d:ed:99:b8:f8:cb:a9: 31:33:ff:0f:64:43:af:31:31:1f:85:22:2a:73:c0: 30:c4:86:a8:8e:d4:17:8f:ed:26:23:fc:e1:9f:53: ae:f0:db:df:d2:11:38:25:f3:71:e5:fe:79:f8:53: 97:ea:fb:8e:5d:97:21:e1:b0:8d:82:df:5a:75:34: ec:84:a7:b1:64:ff:66:73:c8:e0:7e:bf:1e:a0:5c: 1c:b4:de:73:8d:2a:92:10:56:64:34:3c:32:eb:39: f7:d6:35:a8:79:3f:17:00:a6:3e:e3:1e:ba:e7:fe: 51:19:9a:b7:a0:31:4c:c9:e2:76:18:48:ec:e3:39: 0c:38:e0:98:5f:35:2b:73:3d:9c:f9:74:a0:63:4b: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:33:F7:6E:E8:CC:AE:8C:0D:4D:07:6E:75:7D:D0:FF:63:70:E2:A4 X509v3 Authority Key Identifier: keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1a:52:e0:a3:43:59:0e:d3:01:43:57:e0:d7:f1:da:7b:a6: 4f:65:a3:d4:1a:24:9b:21:5b:23:3b:d8:8d:8f:55:31:53:54: a0:28:86:7a:dd:4d:d9:fb:ba:39:a8:12:9e:fa:b4:c7:51:1b: 6c:a1:72:30:03:e4:f3:29:40:22:ee:b1:71:e3:08:bd:99:86: 9d:9b:cd:6c:0c:ce:cd:0d:82:d6:a2:9c:32:85:6f:d1:51:ec: 78:2b:dd:15:5b:82:b9:c4:d6:fc:5c:48:2e:88:c1:87:ec:c8: 7e:1a:a0:06:e2:2a:2c:ae:80:a6:53:d5:a6:3a:90:26:30:e2: 29:de:b7:13:58:fb:c6:e7:8c:bb:b8:e1:57:75:e5:f8:05:58: b5:31:b6:e2:37:ad:16:71:c4:47:6f:42:38:59:3a:18:b8:be: e5:c6:19:ae:b8:53:06:54:4b:25:fc:47:cd:ee:1f:59:23:bc: b7:f7:a3:18:be:17:94:c3:5e:6a:c3:3b:4d:db:76:49:a4:b8: 49:9f:3d:ce:7f:4c:a5:bb:16:33:89:b4:90:50:d9:9b:67:80: 50:0f:7e:0c:e3:38:b7:94:5e:3a:0c:40:bc:3f:1b:96:de:83: 48:8b:1d:de:a3:91:12:bd:d4:63:ee:c1:3a:d3:0b:aa:1a:c8: e2:48:f2:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB QzNBNzIxRDIwHhcNMjUxMjIxMDAzNjQ1WhcNMjUxMjI4MDAzNjQ1WjAYMRYwFAYD VQQDDA02OTQ3NDExZS1lYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhAGwp/6xg9XnA2iBx1/Yw6yjbRs4rR0Ugo2qqjg8rZfCwRqURoHBJeEM8sa MDFwzPlB8borDB7FHAT0SPpEH5wPcXAblFxSIuv3Lo6LPRpwq7NzdHqG3Lt5RjoP 3f3IpX5Cts2NTtIywkZ4fkqvY03tmbj4y6kxM/8PZEOvMTEfhSIqc8AwxIaojtQX j+0mI/zhn1Ou8Nvf0hE4JfNx5f55+FOX6vuOXZch4bCNgt9adTTshKexZP9mc8jg fr8eoFwctN5zjSqSEFZkNDwy6zn31jWoeT8XAKY+4x665/5RGZq3oDFMyeJ2GEjs 4zkMOOCYXzUrcz2c+XSgY0vrYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEz927o zK6MDU0HbnV90P9jcOKkMB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1 NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjJERS8xNzY3OTRENDE1NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3 S2hIdVM2NHVDSDZzT25JZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRGlLgo0NZDtMBQ1fg1/Hae6ZPZaPUGiSbIVsjO9iNj1UxU1SgKIZ6 3U3Z+7o5qBKe+rTHURtsoXIwA+TzKUAi7rFx4wi9mYadm81sDM7NDYLWopwyhW/R Uex4K90VW4K5xNb8XEguiMGH7Mh+GqAG4iosroCmU9WmOpAmMOIp3rcTWPvG54y7 uOFXdeX4BVi1MbbiN60WccRHb0I4WToYuL7lxhmuuFMGVEsl/EfN7h9ZI7y396MY vheUw15qwztN23ZJpLhJnz3Of0yluxYzibSQUNmbZ4BQD34M4zi3lF46DEC8PxuW 3oNIix3eo5ESvdRj7sE60wuqGsjiSPJq -----END CERTIFICATE-----Generated at Mon Dec 22 14:38:09 2025 by rpki-client