This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json) Hash identifier: fSwM7QFqhmrvQNeydWxIYfICqdYj5xCoQQgdB2ZOCUs= Subject key identifier: 35:EF:BB:12:61:47:8D:4D:27:02:57:04:C1:78:19:FE:AA:D2:9F:55 Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Certificate serial: 3582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft Manifest number: 3530 Signing time: Sat 20 Dec 2025 14:17:27 +0000 Manifest this update: Sat 20 Dec 2025 14:17:26 +0000 Manifest next update: Sat 27 Dec 2025 14:17:26 +0000 Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: 4S9+Skjsl127NuSEjDCIyCraT+5HIBvm6TG8V1abPuY=) 2: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=) 3: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=) 4: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=) 5: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=) 6: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=) 7: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=) 8: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=) 9: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13698 (0x3582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Validity Not Before: Dec 20 14:17:26 2025 GMT Not After : Dec 27 14:17:26 2025 GMT Subject: CN=6946aff7-8434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:ca:50:0b:7a:0a:0c:89:e6:23:b1:09:50: ba:09:f8:c1:ae:2f:28:c3:2b:76:61:9a:a1:4d:eb: 64:33:48:60:f4:00:c7:2b:4d:3a:99:35:85:a1:38: 78:0f:bf:5a:b8:9f:fc:7f:34:b8:b9:c6:ee:43:12: 90:78:9f:e1:7f:6b:38:08:b2:fa:30:b9:82:ae:2b: 44:c7:70:73:29:71:47:4c:af:6f:bb:9a:78:3c:55: e3:2a:6e:52:46:ed:b1:ca:7e:a7:0b:fa:4a:27:d8: bd:0f:40:01:e3:0e:6d:31:c7:3f:ad:c4:d1:da:b3: 7b:9a:00:0a:6b:9c:a1:3c:15:1a:a8:c5:4b:3b:90: 28:82:ce:a5:2e:e2:e8:6f:69:a1:10:80:54:61:31: 4e:1a:d5:c2:77:65:f6:6c:5a:79:21:f3:6b:fb:22: 5e:e4:f8:f6:74:bd:0a:38:a3:3e:59:35:ae:1f:67: a1:21:93:32:ea:2c:62:19:27:59:eb:2a:93:c1:f4: ee:82:5b:c6:cc:20:fd:bb:31:c4:c2:37:4f:6e:b3: e1:17:c0:b3:37:82:6c:02:38:94:47:67:43:61:fd: 63:99:b6:1a:77:21:be:41:5f:60:74:39:57:ab:71: 49:57:84:3b:ca:31:d8:b2:29:fe:5a:bb:21:74:50: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:BB:12:61:47:8D:4D:27:02:57:04:C1:78:19:FE:AA:D2:9F:55 X509v3 Authority Key Identifier: keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:96:02:63:e6:3f:0f:e8:4a:49:95:98:84:f6:95:27:fe:15: 4d:93:54:04:11:b2:b2:0f:a8:87:79:4e:4e:05:ac:43:1c:a2: 0a:94:22:7c:f6:cc:9f:81:52:ee:fc:c3:64:46:8d:da:db:23: d4:00:31:4e:d0:77:32:47:fd:8e:25:5a:dd:98:a0:0b:82:4c: 63:a2:8e:26:62:e0:7c:9f:0b:bc:80:fe:57:b7:f6:d6:6f:e1: fa:bb:8a:ec:81:2e:2b:6f:5b:dc:b5:bb:51:b7:e1:4a:4d:5f: b7:22:68:d8:fd:37:f3:63:83:19:fd:00:64:22:2d:9c:85:93: 73:d3:71:8d:68:c9:8c:fe:1a:6a:b3:8a:66:fe:69:d8:29:00: 0d:57:41:f8:67:47:9e:5a:a2:89:be:04:3e:fd:09:9a:20:85: b8:3b:67:63:bd:97:46:19:06:18:ae:d6:5b:9f:68:4e:8a:4e: 3e:06:35:88:0d:74:d4:72:a2:b3:9d:e7:93:95:4f:32:1a:8a: 9b:52:32:54:60:8c:6c:01:5d:81:49:ea:12:26:c2:0d:fb:2e: 1a:db:7b:7d:ee:0d:2b:ad:19:25:42:37:7a:89:ba:3e:ff:aa: 53:d1:ed:bf:d0:47:de:7a:6f:01:4a:01:da:c6:91:0a:e8:36: 63:ab:52:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC RkZBNkQwMTgwHhcNMjUxMjIwMTQxNzI2WhcNMjUxMjI3MTQxNzI2WjAYMRYwFAYD VQQDDA02OTQ2YWZmNy04NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35vKUAt6CgyJ5iOxCVC6CfjBri8owyt2YZqhTetkM0hg9ADHK006mTWFoTh4 D79auJ/8fzS4ucbuQxKQeJ/hf2s4CLL6MLmCritEx3BzKXFHTK9vu5p4PFXjKm5S Ru2xyn6nC/pKJ9i9D0AB4w5tMcc/rcTR2rN7mgAKa5yhPBUaqMVLO5Aogs6lLuLo b2mhEIBUYTFOGtXCd2X2bFp5IfNr+yJe5Pj2dL0KOKM+WTWuH2ehIZMy6ixiGSdZ 6yqTwfTuglvGzCD9uzHEwjdPbrPhF8CzN4JsAjiUR2dDYf1jmbYadyG+QV9gdDlX q3FJV4Q7yjHYsin+WrshdFBkhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXvuxJh R41NJwJXBMF4Gf6q0p9VMB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv eXNQVTdYdXlRM0tfLW0wQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRlgJj5j8P6EpJlZiE9pUn/hVNk1QEEbKyD6iHeU5OBaxDHKIKlCJ8 9syfgVLu/MNkRo3a2yPUADFO0HcyR/2OJVrdmKALgkxjoo4mYuB8nwu8gP5Xt/bW b+H6u4rsgS4rb1vctbtRt+FKTV+3ImjY/TfzY4MZ/QBkIi2chZNz03GNaMmM/hpq s4pm/mnYKQANV0H4Z0eeWqKJvgQ+/QmaIIW4O2djvZdGGQYYrtZbn2hOik4+BjWI DXTUcqKzneeTlU8yGoqbUjJUYIxsAV2BSeoSJsIN+y4a23t97g0rrRklQjd6ibo+ /6pT0e2/0Efeem8BSgHaxpEK6DZjq1L+ -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:32 2025 by rpki-client