This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: m7waS5IZ2vzrwIeE8R0xrYCEuFR6ku7JrtZzFJB/daM= Subject key identifier: 3E:00:98:71:C1:AB:07:2C:BA:3C:CB:C2:34:CE:0E:EC:CA:F6:BA:10 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 350C Signing time: Thu 18 Dec 2025 14:16:07 +0000 Manifest this update: Thu 18 Dec 2025 14:16:07 +0000 Manifest next update: Thu 25 Dec 2025 14:16:07 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: 4M8l5cCAA8AG0BTzsqJvMc0xcvj7E4BpaJgjxJJqI40=) 2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: eRpbjrs7GTwfzhpVzYBrg6AgI/qzL8mQbPqmgl8ihsU=) 3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: jPHSUiUkbozR5N6j9xgdL/cbld0Q8j3JedxabqO04KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Dec 18 14:16:07 2025 GMT Not After : Dec 25 14:16:07 2025 GMT Subject: CN=69440ca7-e9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:c9:cd:16:7c:92:69:2b:85:6b:1e:bf:1c: a3:04:b9:c2:ca:65:b1:6a:ee:22:77:08:44:a3:10: 84:e3:b6:a1:ec:63:3e:d2:ff:68:90:75:bf:2c:65: 93:9d:51:a3:88:f5:0a:79:fc:ac:1a:d0:a8:02:61: 20:98:34:bd:d0:9f:2e:a9:3f:f9:4f:88:57:aa:26: 9d:28:65:27:96:06:e2:69:c1:74:d8:b6:41:b8:15: c2:cd:f6:99:c1:2c:88:e8:d1:08:3e:13:33:fa:cb: 96:e8:3c:bc:dc:25:6a:db:c3:e7:91:47:86:10:56: cf:d7:f4:66:d2:09:1e:9f:66:e9:3f:cf:f0:ce:1c: 04:78:78:51:a7:e0:d0:92:cb:db:99:9f:cf:d8:89: e0:f0:c2:cf:80:24:e2:29:16:88:0b:32:73:64:16: 68:c5:5e:02:34:59:0a:28:2d:89:a5:b3:14:a3:af: bd:c3:9a:b9:47:69:0c:b7:d0:48:73:82:41:99:8e: 5f:11:59:c2:10:98:ea:ac:bf:bb:31:54:51:c6:77: ab:73:e5:70:a1:f4:36:9d:16:c0:99:67:cd:72:8a: 67:17:5a:49:27:d2:8f:09:66:b3:50:ee:b8:83:4d: 0a:59:26:55:8a:13:41:20:07:2e:f1:9f:cb:98:ad: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:00:98:71:C1:AB:07:2C:BA:3C:CB:C2:34:CE:0E:EC:CA:F6:BA:10 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ba:08:79:aa:09:48:fd:96:33:31:86:ad:50:b1:2a:d0:83: be:7f:74:a7:90:b1:56:a2:00:55:ec:6f:47:c0:9e:ec:b5:d4: 39:e9:fb:8b:c2:e1:9e:cc:e3:e4:d7:ef:f1:86:26:4b:6b:94: 90:be:85:58:79:2c:35:54:3e:8e:16:15:4b:ca:80:9b:da:c3: 7b:6e:e4:ff:ab:cc:c1:70:48:fe:89:4a:a8:24:b9:0a:d2:33: 08:0e:fb:6a:8f:ef:04:1d:87:0d:03:0b:8f:40:7e:78:ab:98: a9:e4:d7:df:4e:4c:f2:56:15:0f:0a:8f:32:c5:e5:85:46:0d: 3e:d0:45:c0:4b:81:72:e0:49:4f:a7:9b:7a:c6:49:59:86:54: ee:7e:6e:19:4c:f8:52:13:d9:0c:4b:b0:1e:71:da:a1:40:2c: 34:d8:6d:97:b5:11:6b:f5:8f:9f:55:dc:65:3d:9e:da:53:41: 3d:b1:e5:e9:c9:56:88:81:c7:c6:bc:78:73:bd:4f:d9:c8:bf: 43:69:f7:94:b1:1e:73:e5:42:ed:f2:1c:9a:4e:2b:5a:de:a1: f2:25:bf:e7:bb:59:12:48:f4:c0:6d:97:b9:b2:21:bd:d7:3d: 4f:b7:df:fa:3c:e0:22:de:5c:b3:cd:d7:a3:c0:f6:d6:27:e7: 5d:cd:79:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUxMjE4MTQxNjA3WhcNMjUxMjI1MTQxNjA3WjAYMRYwFAYD VQQDDA02OTQ0MGNhNy1lOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wrJzRZ8kmkrhWsevxyjBLnCymWxau4idwhEoxCE47ah7GM+0v9okHW/LGWT nVGjiPUKefysGtCoAmEgmDS90J8uqT/5T4hXqiadKGUnlgbiacF02LZBuBXCzfaZ wSyI6NEIPhMz+suW6Dy83CVq28PnkUeGEFbP1/Rm0gken2bpP8/wzhwEeHhRp+DQ ksvbmZ/P2Ing8MLPgCTiKRaICzJzZBZoxV4CNFkKKC2JpbMUo6+9w5q5R2kMt9BI c4JBmY5fEVnCEJjqrL+7MVRRxnerc+VwofQ2nRbAmWfNcopnF1pJJ9KPCWazUO64 g00KWSZVihNBIAcu8Z/LmK1/mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4AmHHB qwcsujzLwjTODuzK9roQMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCugh5qglI/ZYzMYatULEq0IO+f3SnkLFWogBV7G9HwJ7stdQ56fuL wuGezOPk1+/xhiZLa5SQvoVYeSw1VD6OFhVLyoCb2sN7buT/q8zBcEj+iUqoJLkK 0jMIDvtqj+8EHYcNAwuPQH54q5ip5NffTkzyVhUPCo8yxeWFRg0+0EXAS4Fy4ElP p5t6xklZhlTufm4ZTPhSE9kMS7AecdqhQCw02G2XtRFr9Y+fVdxlPZ7aU0E9seXp yVaIgcfGvHhzvU/ZyL9DafeUsR5z5ULt8hyaTita3qHyJb/nu1kSSPTAbZe5siG9 1z1Pt9/6POAi3lyzzdejwPbWJ+ddzXnH -----END CERTIFICATE-----Generated at Fri Dec 19 19:25:34 2025 by rpki-client