This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: WI6Wyj/hukf7KatOLArsOBFWAjaSqU2JW3WtAXwhcUU= Subject key identifier: 71:0A:8E:EB:62:20:87:86:01:D4:9C:8F:7E:AE:0C:46:E6:FF:77:C1 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 13E0A460A8E11C67ADB8CA712A8C0190B00C6100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 03EB Signing time: Sat 20 Dec 2025 12:20:32 +0000 Manifest this update: Sat 20 Dec 2025 12:15:32 +0000 Manifest next update: Sun 21 Dec 2025 12:57:32 +0000 Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 2: 3130332e3233382e3133302e302f32342d3234203d3e20383334.roa (hash: f8rYNV2fCrUmWY2adNyUtiSMrLXxjKV2WCDP7pGIB8Y=) 3: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: ssFVvYGMvqh/+KS+mSg6BLAPv/LmWw2uJ0w+hCD+9HM=) 4: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 5: 3130332e3233382e3133312e302f32342d3234203d3e2039333034.roa (hash: xJHD6oJOmKsdm6y2bTs9H7Pd88grt6jIjKGTOKL3muY=) 6: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=) 7: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 8: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: iePGe9T2LA42zdlsMC0OBhMqCfwBJ5LDY/yEOVKS4Ac=) 9: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e0:a4:60:a8:e1:1c:67:ad:b8:ca:71:2a:8c:01:90:b0:0c:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Dec 20 12:15:32 2025 GMT Not After : Dec 21 12:57:32 2025 GMT Subject: CN=710A8EEB6220878601D49C8F7EAE0C46E6FF77C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:02:be:81:34:41:56:fa:47:36:3a:7d:28: d1:de:2d:c1:51:a0:3f:2d:c7:24:7f:3c:91:09:08: 1d:dc:e7:15:e4:2f:b1:9d:98:fc:31:0d:9a:78:f8: 88:fd:b9:63:80:5a:3d:04:5b:9c:9a:d2:fe:c5:c0: 9b:98:d2:19:02:f6:9a:78:66:eb:4d:e2:d5:9c:06: d7:4d:a9:6f:50:7b:fd:b2:05:9b:08:e8:ee:2f:5c: a0:83:6d:ee:7f:6e:bf:f7:5f:08:0c:6b:97:68:53: 1d:9e:2b:a5:cf:59:78:6f:ec:9e:97:4b:a0:c0:9a: f7:1c:cc:19:62:dc:82:db:3f:d9:e5:63:5b:03:6e: c7:51:e2:cb:d2:b2:c2:94:f5:5b:0c:01:5f:38:c5: a1:58:43:88:c4:d2:ba:ce:c7:bd:af:06:24:3b:6c: f0:9e:e6:01:ea:22:20:79:92:0d:d4:ea:8f:a8:f2: f6:5b:7d:86:7d:ca:26:31:65:d7:8c:f6:fd:f0:3c: f2:bd:72:dd:11:fb:28:b7:57:6c:fd:2b:6e:f0:2a: 62:ed:e4:2b:fc:3a:e1:3a:dd:46:9a:d9:ff:e5:86: a5:65:ce:06:51:ce:f8:f6:af:eb:2e:10:9e:1e:d4: 1b:7d:30:0b:ad:08:5b:aa:be:b8:a5:70:73:48:69: 2f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0A:8E:EB:62:20:87:86:01:D4:9C:8F:7E:AE:0C:46:E6:FF:77:C1 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:b7:3a:52:8b:fd:ae:f3:ac:95:f9:b1:a8:20:5a:62:e4: 9f:dc:23:ab:79:40:cc:01:94:37:15:e5:6c:4b:a5:ab:c6:6f: 23:f6:d2:81:32:90:c2:67:0b:4f:dc:0f:a4:2a:6d:24:28:11: 4f:8d:8d:c7:83:7f:f8:45:09:7a:79:fc:b3:b6:8f:49:22:29: 62:2c:d8:bf:04:00:54:7d:fc:93:ee:ea:a4:15:38:e8:38:d9: 84:34:50:ef:35:b5:80:e7:74:f6:06:cb:77:43:9f:0e:8c:12: 43:20:b5:96:56:9c:b0:37:0a:d8:53:cd:3f:15:aa:29:5e:e3: 8a:79:f1:c3:df:26:bd:9a:c6:bd:7d:c2:5d:aa:8d:20:87:14: 99:3d:85:b1:a1:06:39:ea:73:a3:61:f3:9d:12:26:1d:71:cb: b8:f2:80:2d:86:38:39:aa:46:d3:17:23:eb:09:4e:04:33:61: 8a:00:1c:d3:bc:21:77:3c:71:be:4a:67:02:c8:ac:7a:74:bc: 43:5c:bc:af:c7:c9:a0:47:54:6d:93:d8:64:b2:9b:aa:57:92: 74:29:f7:f3:c4:98:ac:00:4d:9b:4e:43:07:a6:e5:ce:a5:a2: f0:67:ad:64:ac:5a:9d:ca:c6:9f:58:f2:64:7a:90:59:3e:27: 89:8d:cf:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE+CkYKjhHGetuMpxKowBkLAMYQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MTIyMDEyMTUzMloX DTI1MTIyMTEyNTczMlowMzExMC8GA1UEAxMoNzEwQThFRUI2MjIwODc4NjAxRDQ5 QzhGN0VBRTBDNDZFNkZGNzdDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYsAr6BNEFW+kc2On0o0d4twVGgPy3HJH88kQkIHdznFeQvsZ2Y/DENmnj4 iP25Y4BaPQRbnJrS/sXAm5jSGQL2mnhm603i1ZwG102pb1B7/bIFmwjo7i9coINt 7n9uv/dfCAxrl2hTHZ4rpc9ZeG/snpdLoMCa9xzMGWLcgts/2eVjWwNux1Hiy9Ky wpT1WwwBXzjFoVhDiMTSus7Hva8GJDts8J7mAeoiIHmSDdTqj6jy9lt9hn3KJjFl 14z2/fA88r1y3RH7KLdXbP0rbvAqYu3kK/w64TrdRprZ/+WGpWXOBlHO+Pav6y4Q nh7UG30wC60IW6q+uKVwc0hpLzECAwEAAaOCAhswggIXMB0GA1UdDgQWBBRxCo7r YiCHhgHUnI9+rgxG5v93wTAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAI4a3OlKL/a7zrJX5saggWmLkn9wjq3lAzAGUNxXlbEulq8Zv I/bSgTKQwmcLT9wPpCptJCgRT42Nx4N/+EUJenn8s7aPSSIpYizYvwQAVH38k+7q pBU46DjZhDRQ7zW1gOd09gbLd0OfDowSQyC1llacsDcK2FPNPxWqKV7jinnxw98m vZrGvX3CXaqNIIcUmT2FsaEGOepzo2HznRImHXHLuPKALYY4OapG0xcj6wlOBDNh igAc07whdzxxvkpnAsisenS8Q1y8r8fJoEdUbZPYZLKbqleSdCn388SYrABNm05D B6blzqWi8GetZKxancrGn1jyZHqQWT4niY3P8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:55 2025 by rpki-client