This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: A4yQ8Pyxdd9n1u8bcpBQkZTSOeBkAnZ2kVOdtlFSOsw= Subject key identifier: 4E:F1:9A:72:29:1B:98:F5:0E:73:91:75:61:68:87:4B:35:CD:8D:1F Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 05CF Signing time: Wed 31 Dec 2025 22:35:22 +0000 Manifest this update: Wed 31 Dec 2025 22:35:21 +0000 Manifest next update: Wed 07 Jan 2026 22:35:21 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: /xsPfTmt8VDfG2r+CYi3fEHYAT9Hqc2TOqi1HFAZE20=) 2: A240A20A9EB711F0914DBF7FC4F9AE02.roa (hash: psrGPY0f9n8CoPgbqVuyb4fxwFwRtYR1pcMoDSLQHS8=) 3: 02EA5FFC9EBC11F09AF0472DC4F9AE02.roa (hash: pWB5XmkyQkIJX6VT83Icq4ouDP45IlQtI/F1JSbGUwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 22:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Dec 31 22:35:21 2025 GMT Not After : Jan 7 22:35:21 2026 GMT Subject: CN=6955a52a-c294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:99:82:8b:7e:d3:3c:38:71:12:7f:31:0d:d0: b3:34:16:a6:70:14:72:67:ac:ed:96:f0:30:57:55: 88:6a:bd:60:7a:94:af:67:8f:10:94:0f:f3:46:e3: 54:31:5c:a6:b1:ba:a9:2a:2d:66:2b:d9:00:f7:09: 7f:e8:06:80:b8:9c:7a:fb:c3:57:9b:5a:0f:58:3e: a3:71:1b:8a:70:ea:a0:b1:f7:60:c4:c7:f2:fc:46: 3c:72:9e:d7:26:df:40:f0:0c:e6:26:f6:7e:33:4c: a3:91:d9:18:31:87:b9:d2:9b:ab:8f:10:55:ea:23: 88:78:fd:b8:4d:95:6c:4a:32:ef:c0:35:3d:3f:1e: fd:4b:fe:86:58:5c:ee:35:fd:51:66:00:12:1a:6b: 5d:fc:55:32:b7:d7:9f:a2:1e:05:bb:6a:db:67:f2: 0b:ab:c4:f0:a2:9c:b2:a2:cd:d4:11:bd:ec:76:fc: 4d:9d:11:6f:30:a9:dc:58:e2:72:71:6e:33:0d:59: 11:dc:07:f9:7e:c6:a6:7a:53:a4:11:17:44:77:7c: 6c:2c:c7:15:c7:39:b5:01:df:9b:8d:10:33:20:8a: 48:e3:09:f2:9c:71:46:3e:d9:96:b2:56:51:f1:d1: 27:f3:40:01:f5:32:58:6f:9a:08:db:63:43:ee:e7: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F1:9A:72:29:1B:98:F5:0E:73:91:75:61:68:87:4B:35:CD:8D:1F X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:86:98:6d:fc:e6:19:ba:78:7d:01:18:25:e7:37:9c:5b:aa: 8c:e6:1b:c4:14:b1:02:cc:f2:fd:34:f7:de:b4:4a:23:91:56: 6c:59:90:51:3d:2a:c4:ad:6a:4a:83:71:82:90:04:f3:84:18: 90:2e:2b:ec:56:a1:ff:ef:6a:88:bf:7c:62:7d:ab:0d:25:20: 4c:7a:74:9a:58:12:0d:90:cd:f2:54:91:c3:db:ad:8d:d4:41: 1b:38:fd:23:ba:de:16:e1:fb:9b:f4:74:14:fc:e5:15:41:3d: b2:2f:8b:0f:51:29:0b:0d:5a:2c:91:06:24:b7:f7:35:14:80: 5e:0f:a1:cd:4a:83:5f:87:bb:c9:fd:ff:f7:8b:fa:44:34:4f: 07:84:50:23:3d:1c:2c:a2:7a:2f:01:97:74:4b:6b:92:81:f5: 93:b6:02:0f:f8:ea:59:0c:9d:3c:58:f8:12:0f:0c:ed:20:e8: f2:f6:e6:b8:17:0c:05:f2:61:06:4e:d1:8c:4a:5d:30:66:1a: 05:28:5a:7c:0f:cb:97:35:11:36:a0:b7:54:de:11:0a:32:cc: 01:e0:40:a9:39:7e:47:b3:dc:97:13:a7:b9:1b:d7:7e:63:a4: e6:bf:fe:c0:ae:cb:33:eb:12:ae:48:4e:b8:21:5b:ae:95:2d: 49:71:49:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUxMjMxMjIzNTIxWhcNMjYwMTA3MjIzNTIxWjAYMRYwFAYD VQQDDA02OTU1YTUyYS1jMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5mCi37TPDhxEn8xDdCzNBamcBRyZ6ztlvAwV1WIar1gepSvZ48QlA/zRuNU MVymsbqpKi1mK9kA9wl/6AaAuJx6+8NXm1oPWD6jcRuKcOqgsfdgxMfy/EY8cp7X Jt9A8AzmJvZ+M0yjkdkYMYe50purjxBV6iOIeP24TZVsSjLvwDU9Px79S/6GWFzu Nf1RZgASGmtd/FUyt9efoh4Fu2rbZ/ILq8Twopyyos3UEb3sdvxNnRFvMKncWOJy cW4zDVkR3Af5fsamelOkERdEd3xsLMcVxzm1Ad+bjRAzIIpI4wnynHFGPtmWslZR 8dEn80AB9TJYb5oI22ND7ueaCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7xmnIp G5j1DnORdWFoh0s1zY0fMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhhpht/OYZunh9ARgl5zecW6qM5hvEFLECzPL9NPfetEojkVZsWZBR PSrErWpKg3GCkATzhBiQLivsVqH/72qIv3xifasNJSBMenSaWBINkM3yVJHD262N 1EEbOP0jut4W4fub9HQU/OUVQT2yL4sPUSkLDVoskQYkt/c1FIBeD6HNSoNfh7vJ /f/3i/pENE8HhFAjPRwsonovAZd0S2uSgfWTtgIP+OpZDJ08WPgSDwztIOjy9ua4 FwwF8mEGTtGMSl0wZhoFKFp8D8uXNRE2oLdU3hEKMswB4ECpOX5Hs9yXE6e5G9d+ Y6Tmv/7Arssz6xKuSE64IVuulS1JcUkN -----END CERTIFICATE-----Generated at Fri Jan 2 17:02:53 2026 by rpki-client