This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: n4VaTc+oQpFVZFfLw1bsP7Wd/sg1szdwHHyrJGS+G4Q= Subject key identifier: 74:E9:F7:EC:D9:5C:EA:B8:E5:AB:A1:19:53:45:0B:11:E4:D0:A0:08 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 056C Signing time: Sat 20 Dec 2025 22:46:09 +0000 Manifest this update: Sat 20 Dec 2025 22:46:09 +0000 Manifest next update: Sat 27 Dec 2025 22:46:09 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: CQ160LhyCmkVOE/kT/bYPO3JQ5dj2Uavb7cVcLqQ2yg=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 6: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Dec 20 22:46:09 2025 GMT Not After : Dec 27 22:46:09 2025 GMT Subject: CN=69472731-3853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:f8:17:17:18:23:05:74:9c:d3:2f:ae:e6: d2:b2:4d:9e:bb:b5:7d:b1:62:ea:b6:bf:dd:43:3c: de:9e:d5:ad:07:22:c2:fb:9b:45:39:82:ce:7f:ed: 71:40:47:da:8c:c9:00:18:42:46:83:1f:a7:07:9e: 32:c4:72:95:f1:ed:b6:54:77:5c:2e:d5:be:4e:8b: df:94:92:0d:3c:15:66:2e:a2:17:90:56:7e:cc:2d: 0d:d2:42:78:a3:d2:ab:27:12:ba:67:ac:a7:e5:c9: e3:9c:4b:bc:fc:7a:01:3e:77:8e:ab:06:e0:0a:1a: fc:c6:0d:71:c5:5e:27:bd:af:ee:ab:65:e1:a2:55: 6f:84:12:27:f4:98:89:ce:53:ec:b6:3e:67:5a:fc: e1:5b:09:83:eb:3e:41:da:77:33:da:13:ec:cf:6d: 07:f2:84:b1:9e:34:18:80:76:3e:61:e4:4d:5f:5c: 96:f4:fe:85:21:e6:d4:11:c0:d7:f4:a9:df:3a:51: 18:7e:c5:27:49:07:5d:60:e2:c7:68:38:2e:e9:d9: c2:11:6d:1c:66:8d:1e:48:64:5d:28:98:07:49:05: 63:7e:c4:05:cc:2a:56:df:c1:de:27:17:e0:83:bb: 79:0d:3b:8d:30:e8:c6:a9:58:98:25:6f:b2:d0:14: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E9:F7:EC:D9:5C:EA:B8:E5:AB:A1:19:53:45:0B:11:E4:D0:A0:08 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:81:5f:36:4c:f7:88:36:0e:e3:a3:d8:43:42:59:3a:3c:58: 5f:64:e7:75:11:19:48:15:0d:54:18:66:4a:6f:c4:43:51:d0: f1:93:78:cb:8d:39:7a:46:80:b6:6c:f2:4e:ae:50:19:be:47: 9e:13:6d:e6:e7:6b:64:9c:43:64:5a:2b:4d:d7:1b:4d:4a:98: 35:ed:fd:b1:c3:17:bc:12:3c:d7:6f:5f:6d:fc:5f:a1:65:3f: 28:37:64:ac:07:60:cd:97:ef:f9:8e:5e:dd:31:90:ff:a2:86: 24:26:3c:6a:21:f4:0a:7c:1a:d7:82:77:c5:b0:65:81:d0:49: b7:35:97:54:6f:85:eb:30:d6:71:ee:ac:81:e1:cf:83:7f:70: 54:3b:3c:7c:fe:65:36:03:ed:9c:9a:5e:83:fc:d8:97:a5:d7: ff:b7:bb:04:99:9b:1b:f7:ae:f5:90:36:02:f1:65:a0:f6:d2: fd:da:7e:a5:e8:3d:d9:f4:8b:25:aa:d3:cf:aa:50:6c:88:5f: 1a:f2:fd:92:b1:e9:26:a9:fe:60:11:64:fe:74:8e:c6:15:20: 11:9d:7c:b9:4f:c1:9f:ad:f4:ba:95:3c:b9:c6:fa:18:63:3f: ef:35:e2:0e:4f:22:f2:ef:95:63:e2:39:cc:86:3a:9d:ab:0e: 2a:2d:83:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUxMjIwMjI0NjA5WhcNMjUxMjI3MjI0NjA5WjAYMRYwFAYD VQQDDA02OTQ3MjczMS0zODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gL4FxcYIwV0nNMvrubSsk2eu7V9sWLqtr/dQzzentWtByLC+5tFOYLOf+1x QEfajMkAGEJGgx+nB54yxHKV8e22VHdcLtW+TovflJINPBVmLqIXkFZ+zC0N0kJ4 o9KrJxK6Z6yn5cnjnEu8/HoBPneOqwbgChr8xg1xxV4nva/uq2XholVvhBIn9JiJ zlPstj5nWvzhWwmD6z5B2ncz2hPsz20H8oSxnjQYgHY+YeRNX1yW9P6FIebUEcDX 9KnfOlEYfsUnSQddYOLHaDgu6dnCEW0cZo0eSGRdKJgHSQVjfsQFzCpW38HeJxfg g7t5DTuNMOjGqViYJW+y0BQAcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTp9+zZ XOq45auhGVNFCxHk0KAIMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfgV82TPeINg7jo9hDQlk6PFhfZOd1ERlIFQ1UGGZKb8RDUdDxk3jL jTl6RoC2bPJOrlAZvkeeE23m52tknENkWitN1xtNSpg17f2xwxe8EjzXb19t/F+h ZT8oN2SsB2DNl+/5jl7dMZD/ooYkJjxqIfQKfBrXgnfFsGWB0Em3NZdUb4XrMNZx 7qyB4c+Df3BUOzx8/mU2A+2cml6D/NiXpdf/t7sEmZsb9671kDYC8WWg9tL92n6l 6D3Z9IslqtPPqlBsiF8a8v2Ssekmqf5gEWT+dI7GFSARnXy5T8GfrfS6lTy5xvoY Yz/vNeIOTyLy75Vj4jnMhjqdqw4qLYOd -----END CERTIFICATE-----Generated at Sun Dec 21 06:20:55 2025 by rpki-client