This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: Up+ReC6lyz6hwFPf4ZJEko80e88ikmpRewFyjfzD3PA= Subject key identifier: 93:7C:9D:B0:E3:EA:28:9C:38:77:A9:12:D9:C9:51:C7:B9:74:14:D8 Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 030B Signing time: Thu 04 Dec 2025 23:31:48 +0000 Manifest this update: Thu 04 Dec 2025 23:31:47 +0000 Manifest next update: Thu 11 Dec 2025 23:31:47 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: o1/KrPRYWd1cpYhhvrwg5QRd7dQIvy09v+roZhOJu/Q=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 42NoXRc68AJI33l+b1k0SiSR1RteYpJ6pHpYeUhh2BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: Dec 4 23:31:47 2025 GMT Not After : Dec 11 23:31:47 2025 GMT Subject: CN=693219e3-00e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:25:8e:b8:96:0d:53:45:8b:74:03:1a:c6: e9:58:cc:55:02:07:d0:2d:e8:fe:d1:3b:0f:09:bd: 4a:ef:1e:b1:21:1a:f5:36:55:2a:50:a8:c9:0a:3f: c0:62:63:71:b2:33:6f:e4:22:e3:63:d6:76:34:27: d0:da:c4:14:b6:84:0d:3e:3b:61:9d:80:1c:b8:6a: 23:8f:ec:ac:03:57:6a:92:3d:5e:6f:91:a4:62:56: 1c:b3:4c:8c:16:da:0b:aa:ed:ea:1a:5a:fa:a1:a5: 32:e8:34:80:7e:77:b0:95:4e:b2:6f:1f:47:3a:d1: a2:d8:cd:c4:9c:e1:60:49:dd:28:a8:7b:7b:00:e0: b7:4d:17:dc:9e:7c:cf:07:cd:e2:65:f5:bd:21:9c: f5:be:f6:ff:07:bf:82:91:84:eb:ce:7a:d0:5e:22: 49:be:2f:a7:c1:54:9b:aa:51:2e:f1:01:0a:91:bd: 8f:72:39:30:47:81:7d:ec:34:fe:6e:73:8c:ef:8f: 54:14:82:6c:af:9f:1d:b0:11:3b:0e:07:58:77:0c: 67:c1:cd:af:a9:80:99:5c:39:b3:1a:66:1d:15:73: 25:8d:7c:76:7b:fe:eb:f2:bb:51:ac:2a:12:3a:e7: 9e:ad:1f:cd:8f:21:06:57:71:16:8b:88:31:dc:98: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:9D:B0:E3:EA:28:9C:38:77:A9:12:D9:C9:51:C7:B9:74:14:D8 X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7d:0d:36:3f:9c:3c:e0:64:11:0a:dc:68:44:e7:27:bd:fc: be:94:83:73:c5:8e:cf:51:85:e3:d0:b8:d7:4f:2b:5e:61:9c: f5:e9:de:e0:52:b2:dc:8a:19:c0:5b:99:00:d1:2d:3e:2a:bf: a2:cb:c5:6b:be:3b:5f:97:97:c2:5e:3e:9c:1d:65:ce:42:6a: 5d:bd:d2:eb:ad:9a:c7:84:7a:4b:86:40:78:af:05:0c:9a:32: 61:b2:83:b4:b9:eb:67:71:66:aa:25:90:68:05:82:e8:6e:c7: 9d:11:06:0b:fb:af:08:68:74:5b:d4:ef:11:95:9d:2b:74:b4: 8e:38:0a:8b:f7:34:e5:5d:76:fc:5f:9a:77:11:c0:37:26:dd: 0e:bd:b3:38:42:bb:f2:ff:e0:d3:5b:96:67:3e:db:fb:98:97: fb:77:51:bb:0f:b1:e4:0c:6f:52:ea:11:b4:c6:68:b8:df:43: 5f:a0:6c:c4:78:44:41:2b:31:2a:31:0e:29:0f:12:60:f4:b7: d1:f7:8c:e1:7c:e3:fc:f6:2e:e1:ff:6b:10:c5:f5:ae:6a:9d: 9d:1b:0b:11:c4:23:a7:f9:02:a0:0d:5c:c8:5d:fb:d8:8e:a8: 72:56:68:f8:4c:78:ca:c5:68:e5:46:68:62:2b:5f:7c:cd:ab: fc:63:e3:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjUxMjA0MjMzMTQ3WhcNMjUxMjExMjMzMTQ3WjAYMRYwFAYD VQQDEw02OTMyMTllMy0wMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw0ljriWDVNFi3QDGsbpWMxVAgfQLej+0TsPCb1K7x6xIRr1NlUqUKjJCj/A YmNxsjNv5CLjY9Z2NCfQ2sQUtoQNPjthnYAcuGojj+ysA1dqkj1eb5GkYlYcs0yM FtoLqu3qGlr6oaUy6DSAfnewlU6ybx9HOtGi2M3EnOFgSd0oqHt7AOC3TRfcnnzP B83iZfW9IZz1vvb/B7+CkYTrznrQXiJJvi+nwVSbqlEu8QEKkb2PcjkwR4F97DT+ bnOM749UFIJsr58dsBE7DgdYdwxnwc2vqYCZXDmzGmYdFXMljXx2e/7r8rtRrCoS OueerR/NjyEGV3EWi4gx3Jg+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN8nbDj 6iicOHepEtnJUce5dBTYMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAufQ02P5w84GQRCtxoROcnvfy+lINzxY7PUYXj0LjXTyteYZz16d7g UrLcihnAW5kA0S0+Kr+iy8Vrvjtfl5fCXj6cHWXOQmpdvdLrrZrHhHpLhkB4rwUM mjJhsoO0uetncWaqJZBoBYLobsedEQYL+68IaHRb1O8RlZ0rdLSOOAqL9zTlXXb8 X5p3EcA3Jt0OvbM4Qrvy/+DTW5ZnPtv7mJf7d1G7D7HkDG9S6hG0xmi430NfoGzE eERBKzEqMQ4pDxJg9LfR94zhfOP89i7h/2sQxfWuap2dGwsRxCOn+QKgDVzIXfvY jqhyVmj4THjKxWjlRmhiK198zav8Y+M+ -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:50 2025 by rpki-client