This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: 642RvUkJUIIOF25rqAJnb8uRP2SwbqQ+Q8BJ7LbwVls= Subject key identifier: 8A:50:87:F1:40:4E:0B:31:13:A0:2F:51:84:CF:A6:57:17:C0:BF:52 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1C31 Signing time: Sat 06 Dec 2025 15:52:17 +0000 Manifest this update: Sat 06 Dec 2025 15:52:16 +0000 Manifest next update: Sat 13 Dec 2025 15:52:16 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: dfxXTP8xw1ZzgBqHBMVPnCFFjxJTgVofS1Va5FnINRo=) 2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: alPFbBRcOswykY6CDpgLiaSVoTM2OjUAdTBuklnb8AI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7218 (0x1c32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Dec 6 15:52:16 2025 GMT Not After : Dec 13 15:52:16 2025 GMT Subject: CN=69345131-869c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fd:2f:31:61:78:da:c1:3c:dc:8e:46:45:1e: ba:44:0c:6f:80:79:1a:17:7c:01:2b:b4:e0:1b:b0: b4:34:58:78:5d:e9:5f:67:66:5d:1b:24:84:ed:3d: 75:d5:fd:d8:99:d5:cf:72:71:3d:6c:5c:4f:de:60: c9:8a:67:69:13:72:81:6c:10:f3:ba:92:f5:85:b8: 72:1a:e8:c2:32:e1:dc:0e:08:c5:58:a2:c3:63:e9: 9d:0f:91:4b:b6:3d:e5:cc:29:cc:18:d3:b2:59:df: c2:ca:83:8a:cc:1d:8a:dd:fb:fa:e5:9e:4e:81:82: a6:51:b5:02:3a:3a:df:f0:bd:1e:6c:1d:d5:69:5f: 2c:72:2a:54:70:49:b3:d2:3e:50:f0:04:9e:1b:02: 0e:47:52:21:80:cb:9e:e7:5f:14:b7:46:ba:16:d1: f3:f8:fa:0f:3f:1b:77:b7:84:90:49:27:48:de:59: 36:36:52:d0:86:ac:74:67:15:fc:3a:07:95:0f:fd: 90:b0:f4:56:ad:cc:5e:e9:75:41:05:15:df:e9:0e: c8:70:ff:6e:c6:43:32:24:7b:ec:2d:30:a3:de:83: fe:b2:df:bb:40:ab:17:9f:20:7d:1b:da:0d:a9:10: 12:42:e9:3b:65:83:1e:09:d3:af:0d:d5:fb:00:36: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:87:F1:40:4E:0B:31:13:A0:2F:51:84:CF:A6:57:17:C0:BF:52 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ea:9e:91:5f:e5:ff:1d:45:a4:02:09:19:3d:3c:18:0d:38: 6b:ea:6b:12:cf:15:8b:01:9c:85:89:bc:d7:eb:8f:e6:d0:a5: 4f:99:80:e2:cc:12:84:73:f7:22:1f:7d:db:f2:43:62:b2:ce: 4c:e2:9e:49:d6:a2:55:02:0b:44:44:ac:82:6d:92:66:16:12: b2:50:2f:db:2b:a2:72:31:e5:6d:cd:29:78:ee:13:a4:5c:12: e6:35:9b:e7:08:a3:bc:24:73:a1:5c:df:3b:26:34:b7:e7:cf: 06:16:3b:b3:39:72:a2:a1:ca:76:5e:30:61:1e:b8:97:04:e1: a6:4d:61:17:11:59:53:4c:38:31:2e:9a:6c:ff:1a:f4:fa:a3: df:7a:27:24:27:36:65:1f:cf:89:86:52:5c:47:87:9b:21:57: c4:6f:75:82:4f:85:bf:09:70:ba:fa:c9:50:10:36:04:0e:5d: c5:63:49:e8:df:77:af:81:8f:90:d2:12:0a:bf:0b:d9:63:f7: a7:92:86:3a:6f:05:6f:05:57:ac:49:88:c6:24:4b:c2:cb:a3: 26:ac:f7:d0:f1:7f:cc:bf:d5:1a:92:ab:25:f6:3f:fe:88:66: f0:3d:41:12:33:36:81:99:9d:1c:d3:b4:33:cc:1d:62:48:fd: 49:28:2e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUxMjA2MTU1MjE2WhcNMjUxMjEzMTU1MjE2WjAYMRYwFAYD VQQDEw02OTM0NTEzMS04NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6P0vMWF42sE83I5GRR66RAxvgHkaF3wBK7TgG7C0NFh4XelfZ2ZdGySE7T11 1f3YmdXPcnE9bFxP3mDJimdpE3KBbBDzupL1hbhyGujCMuHcDgjFWKLDY+mdD5FL tj3lzCnMGNOyWd/CyoOKzB2K3fv65Z5OgYKmUbUCOjrf8L0ebB3VaV8scipUcEmz 0j5Q8ASeGwIOR1IhgMue518Ut0a6FtHz+PoPPxt3t4SQSSdI3lk2NlLQhqx0ZxX8 OgeVD/2QsPRWrcxe6XVBBRXf6Q7IcP9uxkMyJHvsLTCj3oP+st+7QKsXnyB9G9oN qRASQuk7ZYMeCdOvDdX7ADbTfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpQh/FA TgsxE6AvUYTPplcXwL9SMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo6p6RX+X/HUWkAgkZPTwYDThr6msSzxWLAZyFibzX64/m0KVPmYDi zBKEc/ciH33b8kNiss5M4p5J1qJVAgtERKyCbZJmFhKyUC/bK6JyMeVtzSl47hOk XBLmNZvnCKO8JHOhXN87JjS3588GFjuzOXKiocp2XjBhHriXBOGmTWEXEVlTTDgx Lpps/xr0+qPfeickJzZlH8+JhlJcR4ebIVfEb3WCT4W/CXC6+slQEDYEDl3FY0no 33evgY+Q0hIKvwvZY/enkoY6bwVvBVesSYjGJEvCy6MmrPfQ8X/Mv9Uakqsl9j/+ iGbwPUESMzaBmZ0c07QzzB1iSP1JKC7f -----END CERTIFICATE-----Generated at Sun Dec 7 07:03:48 2025 by rpki-client