This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: r1j8QmTcCtjFHI7CLRS4tAXM7OJgoOKX8W6E+C9IauU= Subject key identifier: D0:24:B7:DE:66:4D:6F:84:4A:DF:AE:6E:3D:7F:37:83:BD:52:D6:86 Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 07:02:03 +0000 Manifest this update: Fri 19 Dec 2025 07:02:03 +0000 Manifest next update: Fri 26 Dec 2025 07:02:03 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: lZaF59knvDKrxm7Pob/8C7lmJmdjK5VChaMCUzmHjDY=) 2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: 9y0iXHRShul2Weaui/QHA5FE1MQsTrAU5mMVd8q+b7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Dec 19 07:02:03 2025 GMT Not After : Dec 26 07:02:03 2025 GMT Subject: CN=6944f86b-356e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3e:3c:de:3e:d9:14:27:82:49:84:db:46:bc: b7:18:11:cc:03:b8:56:54:d3:dc:b4:4e:cf:4a:28: 2e:92:ed:f9:8f:1c:45:03:6e:1a:3d:b1:87:f3:8d: d6:dc:80:a3:e4:77:f9:67:e2:7e:e1:03:0a:fc:15: dd:36:0a:04:44:19:ef:c5:13:bc:e5:85:82:7f:03: 53:36:21:db:09:90:15:76:48:8b:f1:be:8d:35:4b: 9f:a4:44:85:7e:3f:8c:9d:c5:d3:d3:65:6a:e7:e3: 5b:33:e4:1f:14:a5:15:ac:b1:74:75:85:09:43:d0: 27:78:7a:4a:2d:7b:dd:cd:04:64:4f:f4:d8:ca:4a: 55:bb:95:17:68:30:ae:0c:be:ed:ff:81:4d:23:34: 44:44:43:d2:4a:df:df:4d:df:7e:4e:97:b0:0b:f5: 6d:43:1f:69:7c:69:1a:bd:71:5d:a9:43:18:73:da: 53:cc:a8:58:8f:1a:75:0c:1c:e0:13:80:57:04:f7: f9:83:34:66:b8:12:e1:f0:13:06:1e:e8:49:da:de: b8:c6:0f:78:c9:00:e1:58:5d:e8:e3:a0:86:64:bc: 3f:51:8d:fb:b6:dc:1b:fb:99:22:6a:ef:46:23:9f: 5b:65:16:f6:7f:6f:12:34:22:55:29:25:17:45:31: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:B7:DE:66:4D:6F:84:4A:DF:AE:6E:3D:7F:37:83:BD:52:D6:86 X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:23:7b:c6:0e:84:66:8f:1b:62:fd:fa:7f:02:1a:d5:4a:d4: 8e:ec:f4:2d:50:6b:34:d3:8e:40:c4:5d:c8:35:6a:c3:69:9a: a7:5b:67:b8:6a:41:84:3d:db:c5:8e:ec:25:7b:71:d1:bc:7f: b3:a0:a7:3d:28:24:cc:cd:3f:69:7f:47:73:ab:0a:bd:22:5f: 21:ac:70:9e:ac:63:21:ae:06:19:b9:86:2b:20:ed:d2:97:72: ab:d7:97:6e:0d:18:ee:2a:dd:e9:cd:dd:e5:d5:f2:a8:9c:32: 80:65:9c:77:22:90:de:95:6f:37:8b:64:56:64:0f:07:91:7d: 40:3e:a2:fd:51:11:e7:88:91:e9:45:c5:e1:98:eb:1f:9b:6f: e1:de:5c:ee:72:7a:90:94:78:7f:4d:5d:64:85:0e:d6:ee:7e: 9c:1a:68:90:4a:e4:84:f9:99:0a:d3:47:94:3f:de:0a:7b:e6: 5b:eb:62:7f:5d:8e:6a:c8:87:f1:6e:c1:c3:9a:0b:8b:53:53: 6a:4c:3f:ff:ae:a6:d4:6e:85:9b:05:71:d2:a9:43:85:e2:c9: 6d:48:5b:a3:a5:55:f8:5b:b9:59:09:ea:cf:36:e0:f4:1f:3e: 6e:68:bb:fa:bf:e7:87:f0:0f:a2:55:77:f5:80:9f:27:3b:15: 65:8c:45:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNTEyMTkwNzAyMDNaFw0yNTEyMjYwNzAyMDNaMBgxFjAUBgNV BAMMDTY5NDRmODZiLTM1NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4PjzePtkUJ4JJhNtGvLcYEcwDuFZU09y0Ts9KKC6S7fmPHEUDbho9sYfzjdbc gKPkd/ln4n7hAwr8Fd02CgREGe/FE7zlhYJ/A1M2IdsJkBV2SIvxvo01S5+kRIV+ P4ydxdPTZWrn41sz5B8UpRWssXR1hQlD0Cd4ekote93NBGRP9NjKSlW7lRdoMK4M vu3/gU0jNEREQ9JK399N335Ol7AL9W1DH2l8aRq9cV2pQxhz2lPMqFiPGnUMHOAT gFcE9/mDNGa4EuHwEwYe6Ena3rjGD3jJAOFYXejjoIZkvD9Rjfu23Bv7mSJq70Yj n1tlFvZ/bxI0IlUpJRdFMYs1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0CS33mZN b4RK365uPX83g71S1oYwHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0je8YOhGaPG2L9+n8CGtVK1I7s9C1QazTTjkDEXcg1asNpmqdbZ7hq QYQ928WO7CV7cdG8f7Ogpz0oJMzNP2l/R3OrCr0iXyGscJ6sYyGuBhm5hisg7dKX cqvXl24NGO4q3enN3eXV8qicMoBlnHcikN6VbzeLZFZkDweRfUA+ov1REeeIkelF xeGY6x+bb+HeXO5yepCUeH9NXWSFDtbufpwaaJBK5IT5mQrTR5Q/3gp75lvrYn9d jmrIh/FuwcOaC4tTU2pMP/+uptRuhZsFcdKpQ4XiyW1IW6OlVfhbuVkJ6s824PQf Pm5ou/q/54fwD6JVd/WAnyc7FWWMRZo= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:53 2025 by rpki-client