This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: DUaAB2lvLSdrr8RHtb+FWrWLKh2q4unM9BT4S5gXrGA= Subject key identifier: F4:03:11:A9:A8:F2:FC:8F:F8:98:19:23:C8:AA:54:C9:6F:71:37:F5 Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 047D Signing time: Thu 18 Dec 2025 23:28:03 +0000 Manifest this update: Thu 18 Dec 2025 23:28:03 +0000 Manifest next update: Thu 25 Dec 2025 23:28:03 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: /6/UB3sCK8ci/jJolssVcONDOTHYajQQX2YgUhM2ieQ=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Dec 18 23:28:03 2025 GMT Not After : Dec 25 23:28:03 2025 GMT Subject: CN=69448e03-15c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:0a:ac:3b:b5:65:28:e0:78:82:88:22:77: 45:54:5c:8e:97:d4:79:d9:ef:98:16:d0:ec:23:fb: 08:e5:e3:ff:52:dc:fa:b6:9a:58:97:57:31:fb:94: 41:31:43:9b:34:1c:47:9b:2f:cb:cc:8b:c1:c7:6b: f6:e8:21:80:cd:77:8f:3c:29:00:69:63:63:f2:39: 28:96:78:d9:c5:f3:b0:23:2f:85:ee:4b:49:21:f4: 68:1c:dc:a4:05:fc:cb:a1:ab:9b:59:8a:ef:3d:d5: 83:a5:08:4a:a6:1d:24:a7:35:ef:f4:6a:5b:cd:96: c5:db:4f:86:35:6d:02:55:ed:4e:55:e8:fd:e6:ec: d8:0a:eb:ea:b3:59:a9:c6:37:f5:0a:bf:60:54:50: 38:b5:a8:35:43:bf:a0:72:5f:ea:69:2b:1b:55:fb: fd:e7:01:4d:de:c7:d6:37:f0:38:30:ff:3e:79:81: d5:83:9d:f7:9f:3f:b8:98:ee:31:7b:d4:f5:cd:88: f8:31:e4:bd:c7:68:4b:b0:66:91:08:42:8d:f8:b5: b5:09:bc:a7:87:a3:7e:1d:cd:78:3f:fd:46:7f:aa: 73:20:f1:d4:9b:a8:fc:37:f2:45:62:a4:bd:1c:24: ae:7c:84:a2:9a:b2:8c:d4:d5:87:ed:f0:27:34:9f: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:03:11:A9:A8:F2:FC:8F:F8:98:19:23:C8:AA:54:C9:6F:71:37:F5 X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7b:d1:fc:6d:45:a8:5d:7c:66:9e:99:99:df:ef:a0:31:5d: 79:56:5f:e2:29:9a:14:e6:63:06:46:0e:ea:c8:e5:64:76:69: a3:a9:d7:c5:f1:9a:ba:6f:4e:8b:0d:93:48:bb:2a:94:57:8a: 03:82:ad:7a:fd:1e:c6:90:a1:55:70:fe:32:2a:08:a7:8a:06: f2:f6:16:7e:11:78:fa:8c:6b:00:14:3b:6c:64:ae:a4:4f:f4: 61:5f:4f:9c:4c:5f:19:37:24:d3:08:dc:27:c0:4c:1c:91:31: e6:a5:f7:80:51:e9:17:ad:ca:63:8a:30:b1:50:13:73:78:c5: f7:3e:f9:c9:e1:80:7b:a4:f0:11:f2:33:5a:cb:36:b2:8e:e6: 75:b3:96:a4:10:2e:30:1d:b6:c4:6d:03:a3:46:72:1e:f1:64: b0:db:f1:c7:ee:80:ce:d7:3f:44:36:eb:9c:f4:1d:b6:c9:f5: 28:f6:05:0a:06:8b:b7:ae:a6:27:92:dc:31:e8:dd:18:ef:0f: dc:5d:bb:0f:90:f6:d6:87:c7:c5:ad:00:0a:e0:51:b7:de:8d: ed:a2:bf:c4:2f:a6:53:1f:d0:20:ee:24:34:a9:29:e6:0d:bc: 83:1b:d2:51:88:65:c7:5f:7f:d6:18:80:42:e6:18:4c:86:f8: 57:b3:20:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUxMjE4MjMyODAzWhcNMjUxMjI1MjMyODAzWjAYMRYwFAYD VQQDDA02OTQ0OGUwMy0xNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MEKrDu1ZSjgeIKIIndFVFyOl9R52e+YFtDsI/sI5eP/Utz6tppYl1cx+5RB MUObNBxHmy/LzIvBx2v26CGAzXePPCkAaWNj8jkolnjZxfOwIy+F7ktJIfRoHNyk BfzLoaubWYrvPdWDpQhKph0kpzXv9GpbzZbF20+GNW0CVe1OVej95uzYCuvqs1mp xjf1Cr9gVFA4tag1Q7+gcl/qaSsbVfv95wFN3sfWN/A4MP8+eYHVg533nz+4mO4x e9T1zYj4MeS9x2hLsGaRCEKN+LW1Cbynh6N+Hc14P/1Gf6pzIPHUm6j8N/JFYqS9 HCSufISimrKM1NWH7fAnNJ/vWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQDEamo 8vyP+JgZI8iqVMlvcTf1MB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHe9H8bUWoXXxmnpmZ3++gMV15Vl/iKZoU5mMGRg7qyOVkdmmjqdfF 8Zq6b06LDZNIuyqUV4oDgq16/R7GkKFVcP4yKginigby9hZ+EXj6jGsAFDtsZK6k T/RhX0+cTF8ZNyTTCNwnwEwckTHmpfeAUekXrcpjijCxUBNzeMX3PvnJ4YB7pPAR 8jNayzayjuZ1s5akEC4wHbbEbQOjRnIe8WSw2/HH7oDO1z9ENuuc9B22yfUo9gUK Bou3rqYnktwx6N0Y7w/cXbsPkPbWh8fFrQAK4FG33o3tor/EL6ZTH9Ag7iQ0qSnm DbyDG9JRiGXHX3/WGIBC5hhMhvhXsyBq -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:57 2025 by rpki-client