This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json) Hash identifier: NsHK7M+h2X2A0uOqaprrsvlEFDrRO57m5Xq7IhToEpo= Subject key identifier: 46:57:D5:09:0C:C1:9B:95:3D:2A:05:C7:FF:64:68:B9:B9:95:24:5B Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft Manifest number: FF Signing time: Thu 25 Dec 2025 04:08:15 +0000 Manifest this update: Thu 25 Dec 2025 04:08:14 +0000 Manifest next update: Thu 01 Jan 2026 04:08:14 +0000 Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: cmbcHmENDhmA8KvxvedVZyS9SlJ8d8O7w+QclKCh/Fg=) 2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Validity Not Before: Dec 25 04:08:14 2025 GMT Not After : Jan 1 04:08:14 2026 GMT Subject: CN=694cb8ae-a3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:a6:9d:ab:31:95:4a:5c:51:ea:f6:a7:2b: d8:78:45:89:f9:69:9f:42:41:cc:ba:27:d3:e5:2b: 09:19:d5:51:d8:41:68:9d:ae:8a:92:52:ed:e8:ed: d2:9d:c6:02:27:c7:00:2d:01:de:a9:5f:ad:ba:92: 2b:e9:cb:97:8f:fc:58:c7:14:f1:a5:cb:93:05:16: 66:28:f5:2a:f1:33:61:9b:cf:5a:cd:31:66:bd:d9: 08:a2:27:37:91:c6:0d:0a:ea:8a:46:36:88:d9:8f: 73:6a:be:8c:9a:a6:d0:8e:14:de:d8:7b:8c:db:73: b9:19:2f:ff:28:fd:39:f5:1d:a5:e9:6b:29:51:73: b6:d1:30:f1:65:4f:47:c8:f6:0d:e8:9b:4e:7b:ca: ee:a3:4c:87:66:e7:68:52:d5:b9:38:f8:4f:68:9a: b2:d0:a3:db:d7:1b:a9:af:88:ed:0d:7b:87:80:3e: a1:83:c8:58:e2:05:53:45:f0:1f:a8:7d:79:30:34: 72:d8:97:0f:b4:68:c1:b9:76:aa:a6:ee:12:c7:d9: ac:fb:00:58:3e:a9:05:3e:5a:92:1b:21:58:e9:47: e0:26:64:f8:3c:c0:5f:51:f0:a2:bd:c2:8d:90:b3: 24:61:f4:7c:68:96:69:cf:40:f1:0a:37:d6:17:30: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:57:D5:09:0C:C1:9B:95:3D:2A:05:C7:FF:64:68:B9:B9:95:24:5B X509v3 Authority Key Identifier: keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0e:fd:83:a3:86:7a:a4:ea:3b:71:67:20:f5:3d:98:59:c8: 47:85:2a:3e:a7:df:ac:23:a0:13:9f:8b:a7:9f:8d:1c:8c:70: 84:e4:34:2f:4d:d2:ff:78:2e:4e:b0:b9:83:9d:5d:2b:a2:42: 22:d3:58:2b:a5:30:75:79:64:df:97:54:1e:6d:38:ea:a1:e8: 41:6d:ed:bb:bb:b2:2a:38:0d:2b:ca:f4:c0:b9:a1:d7:09:bd: 7c:92:ed:0b:7b:d0:ef:85:bb:80:b1:60:2a:8e:fd:30:4a:19: 85:1e:2b:6b:90:71:f4:f3:32:f9:71:1b:f0:8a:04:ac:b8:0e: a0:2b:d4:ab:bd:95:96:f3:ca:c9:7e:ec:07:b3:fa:8e:e2:43: ea:94:7e:21:a9:f2:21:38:24:55:8d:66:1b:96:7f:76:7e:35: 6f:97:db:33:86:4e:d9:8a:a0:bc:c1:96:3e:2d:9a:94:55:e1: fe:f2:15:0b:b1:c8:e0:32:37:23:ba:44:d4:71:92:b5:6e:25: bd:08:c5:44:d6:cd:bf:53:44:f4:50:3d:79:e3:3c:8e:e3:4a: ee:81:0c:d7:b3:6c:7f:fd:05:9c:d6:84:e6:50:d6:c9:77:d0: 90:6b:06:ec:a0:01:4d:bc:b0:e1:1a:72:5d:27:7d:ca:e5:2b: 23:e1:c8:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1 RkM0ODM0MEIwHhcNMjUxMjI1MDQwODE0WhcNMjYwMTAxMDQwODE0WjAYMRYwFAYD VQQDDA02OTRjYjhhZS1hM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDmmnasxlUpcUer2pyvYeEWJ+WmfQkHMuifT5SsJGdVR2EFona6KklLt6O3S ncYCJ8cALQHeqV+tupIr6cuXj/xYxxTxpcuTBRZmKPUq8TNhm89azTFmvdkIoic3 kcYNCuqKRjaI2Y9zar6MmqbQjhTe2HuM23O5GS//KP059R2l6WspUXO20TDxZU9H yPYN6JtOe8ruo0yHZudoUtW5OPhPaJqy0KPb1xupr4jtDXuHgD6hg8hY4gVTRfAf qH15MDRy2JcPtGjBuXaqpu4Sx9ms+wBYPqkFPlqSGyFY6UfgJmT4PMBfUfCivcKN kLMkYfR8aJZpz0DxCjfWFzDhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZX1QkM wZuVPSoFx/9kaLm5lSRbMB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0 UUZkdUFBYnp1OFpmeElOQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBADv2Do4Z6pOo7cWcg9T2YWchHhSo+p9+sI6ATn4unn40cjHCE5DQv TdL/eC5OsLmDnV0rokIi01grpTB1eWTfl1QebTjqoehBbe27u7IqOA0ryvTAuaHX Cb18ku0Le9DvhbuAsWAqjv0wShmFHitrkHH08zL5cRvwigSsuA6gK9SrvZWW88rJ fuwHs/qO4kPqlH4hqfIhOCRVjWYbln92fjVvl9szhk7ZiqC8wZY+LZqUVeH+8hUL scjgMjcjukTUcZK1biW9CMVE1s2/U0T0UD154zyO40rugQzXs2x//QWc1oTmUNbJ d9CQawbsoAFNvLDhGnJdJ33K5Ssj4ciy -----END CERTIFICATE-----Generated at Thu Dec 25 11:14:44 2025 by rpki-client