This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: HxSdZI8xnyTxRkCHGNxEkclDZ1V0JXb5tBXkinzpIwU= Subject key identifier: C0:D9:11:ED:2B:37:15:5B:74:FC:CE:35:3E:25:2C:98:2E:4C:06:A8 Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 015A Signing time: Thu 01 Jan 2026 03:47:49 +0000 Manifest this update: Thu 01 Jan 2026 03:47:48 +0000 Manifest next update: Thu 08 Jan 2026 03:47:48 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: wWqVCmJtlj16KBX8Pmp4NOq1fV1PjdiOhOkK9t0xuJM=) 2: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: Tr2BD+TjkZLpINWnT5Dv/SJcrrMfCgyU3wvXQZmqI2g=) 3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: 6O+gN+s3nYuHADI/TEqtB2x9DBi8NBjryPUz/maJeSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 03:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Jan 1 03:47:48 2026 GMT Not After : Jan 8 03:47:48 2026 GMT Subject: CN=6955ee65-b25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:dd:50:ed:c6:9f:4f:1b:14:43:47:20:3d: d2:af:e6:e7:04:4f:e0:9e:17:af:4d:54:52:e5:d6: 1a:a9:4d:2a:e5:83:aa:fc:a1:59:31:29:40:54:c8: f2:75:e2:0f:a5:3b:08:82:8b:5c:c0:d8:37:7e:0d: 03:e7:ef:29:66:41:bc:f5:04:61:88:c9:8f:c3:ff: b0:ca:28:79:0d:5a:9c:1c:52:bd:3c:a6:2a:15:ed: 0e:ed:31:a0:95:73:48:12:3e:8b:57:ec:d5:9a:47: df:01:86:65:10:df:9c:ba:df:e6:54:de:68:04:e5: 1c:b0:0c:2f:08:f5:33:91:ab:48:28:97:ef:d7:11: e4:3f:49:e6:81:65:f7:d3:c1:ff:48:cf:3a:73:3c: 65:5d:2f:42:cd:15:99:c9:fe:42:3a:31:1a:f1:c5: a6:77:4b:37:60:91:19:94:cd:ba:e9:f0:48:d8:1e: 97:20:ae:a8:12:88:42:69:e6:13:a5:7d:a5:08:85: d0:37:65:3b:94:df:c6:65:f5:66:9d:91:63:15:2e: 82:ba:fb:a9:d2:b1:3d:ad:20:dd:c4:90:78:4a:94: a1:13:26:93:ed:fd:1d:58:c0:b0:48:6a:e6:3d:8b: 71:0b:90:9f:ef:29:24:69:6e:d6:33:59:db:14:b2: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D9:11:ED:2B:37:15:5B:74:FC:CE:35:3E:25:2C:98:2E:4C:06:A8 X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:92:80:0f:46:04:38:02:b8:36:f7:23:87:b3:c7:ba:9a:e9: 85:dc:56:23:dd:03:ba:64:49:66:d3:de:5a:24:1d:4a:5d:c5: 5f:5c:ce:db:40:62:d6:ee:b7:59:fc:28:51:71:d9:08:6e:20: 52:9f:4b:d3:d4:9e:46:2d:05:f5:4d:09:23:68:b9:b4:36:4e: fd:0c:03:74:05:92:d8:e4:db:45:c1:cc:2d:74:d3:a0:99:1b: 80:e9:2e:4f:97:5c:8a:c4:2b:f2:76:e4:de:6e:34:7e:13:01: 1e:35:1e:bf:53:2f:ee:69:49:80:59:49:61:66:02:e4:bd:64: d0:21:96:51:32:36:ed:ce:67:e7:3a:17:1c:43:aa:16:bd:3b: aa:6a:6b:4e:34:d9:2b:42:c9:33:03:23:e2:e9:e2:12:15:55: 53:36:f0:65:91:48:79:13:9f:9d:e4:ef:8a:45:0b:ea:44:b5: 33:35:68:bc:de:29:30:ea:c0:ac:77:3e:81:f1:34:39:17:e7: f6:29:13:13:bc:e6:fc:36:c3:0b:ff:e3:da:12:b9:e9:c6:ef: 09:02:88:d3:07:30:92:6d:16:80:c9:77:51:44:bc:1b:a6:5f: 90:54:19:30:7d:f9:c2:6d:45:82:fc:50:2f:dd:96:bd:9d:96: a5:7c:60:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjYwMTAxMDM0NzQ4WhcNMjYwMTA4MDM0NzQ4WjAYMRYwFAYD VQQDDA02OTU1ZWU2NS1iMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVjdUO3Gn08bFENHID3Sr+bnBE/gnhevTVRS5dYaqU0q5YOq/KFZMSlAVMjy deIPpTsIgotcwNg3fg0D5+8pZkG89QRhiMmPw/+wyih5DVqcHFK9PKYqFe0O7TGg lXNIEj6LV+zVmkffAYZlEN+cut/mVN5oBOUcsAwvCPUzkatIKJfv1xHkP0nmgWX3 08H/SM86czxlXS9CzRWZyf5COjEa8cWmd0s3YJEZlM266fBI2B6XIK6oEohCaeYT pX2lCIXQN2U7lN/GZfVmnZFjFS6Cuvup0rE9rSDdxJB4SpShEyaT7f0dWMCwSGrm PYtxC5Cf7ykkaW7WM1nbFLJzhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDZEe0r NxVbdPzONT4lLJguTAaoMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEkoAPRgQ4Arg29yOHs8e6mumF3FYj3QO6ZElm095aJB1KXcVfXM7b QGLW7rdZ/ChRcdkIbiBSn0vT1J5GLQX1TQkjaLm0Nk79DAN0BZLY5NtFwcwtdNOg mRuA6S5Pl1yKxCvyduTebjR+EwEeNR6/Uy/uaUmAWUlhZgLkvWTQIZZRMjbtzmfn OhccQ6oWvTuqamtONNkrQskzAyPi6eISFVVTNvBlkUh5E5+d5O+KRQvqRLUzNWi8 3ikw6sCsdz6B8TQ5F+f2KRMTvOb8NsML/+PaErnpxu8JAojTBzCSbRaAyXdRRLwb pl+QVBkwffnCbUWC/FAv3Za9nZalfGD7 -----END CERTIFICATE-----Generated at Fri Jan 2 23:29:22 2026 by rpki-client