This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: yn6byQDIpd4yx/27xt2zONPuoKBS2kVssl/CTF0ShPw= Subject key identifier: BA:36:EA:E3:39:6F:71:39:FD:28:0D:A7:1F:28:65:01:CF:0F:9C:5B Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2CAD Signing time: Sat 06 Dec 2025 16:21:14 +0000 Manifest this update: Sat 06 Dec 2025 16:21:14 +0000 Manifest next update: Sat 13 Dec 2025 16:21:14 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: JNZycj4rLLEvv7i0PoJKwgbWlHJAc+LVipPGVijH1+c=) 2: A20F3364D9CD11EF93ACA765C4F9AE02.roa (hash: GlYsHzeq/9zAsgZDgmAiaFOhydbYqGstJVX7MNbtJFs=) 3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: zPBNAdtnIGt+ra2FI390H36UQCaUhQl2E2/fPAphoFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Dec 6 16:21:14 2025 GMT Not After : Dec 13 16:21:14 2025 GMT Subject: CN=693457fa-956d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:7e:af:00:e0:b8:16:c8:e9:bf:61:30:0c: d9:5a:c8:4a:59:18:62:ba:e0:3c:30:67:b9:ca:ef: a8:ca:18:6b:d0:4b:13:fb:1b:30:dd:0f:71:b8:c1: 54:21:1b:aa:aa:cd:11:ff:07:b6:3c:e0:70:93:30: 2c:2b:24:d6:62:17:62:dc:fd:8e:fb:83:d9:97:2f: 00:80:d5:38:7e:48:29:b9:43:c9:af:a2:3c:78:5a: 61:6d:03:fc:ba:e3:8a:0a:7f:b3:2d:9e:14:57:dd: bb:0f:22:62:97:9b:b7:84:ac:fe:18:a7:f8:30:c4: a8:2c:c6:2e:f9:c5:8b:05:6c:7f:59:95:3c:7c:8d: 75:59:f6:61:9b:5d:58:20:b0:55:ad:1c:19:6b:af: 6e:34:d0:ef:56:8e:c0:64:fe:13:83:d4:b8:59:e5: b6:f6:13:01:a6:28:71:3d:7d:1c:d7:99:35:82:72: b2:93:ce:93:00:ae:ea:9e:ed:38:2c:fc:8b:7b:d6: be:3d:86:96:05:0b:98:09:1a:16:97:b3:b3:cf:ed: 85:e2:a5:25:df:69:a7:89:64:9e:50:b4:7d:b8:f5: d5:c6:e6:24:f8:d4:ea:83:1e:f7:6e:dd:f5:5e:08: 9f:2d:5c:a6:93:e0:f7:e6:ec:fc:f3:28:53:f3:27: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:36:EA:E3:39:6F:71:39:FD:28:0D:A7:1F:28:65:01:CF:0F:9C:5B X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:c2:66:b7:73:b3:46:a2:6b:64:71:c5:92:69:82:e9:a9: 6e:14:76:44:b4:9a:7a:fa:4a:9d:3e:da:bb:f3:ed:24:55:06: 15:8b:1a:01:f5:51:8c:55:c3:98:96:53:48:98:6f:87:a0:75: df:40:51:f6:06:42:53:a5:f2:d2:68:d9:aa:f5:1e:6b:30:99: 34:a2:8e:61:21:07:13:c5:89:79:be:46:c6:ac:e4:a1:b8:b0: 39:29:9a:c9:c7:94:84:09:8f:49:79:84:89:0f:a8:f6:8e:d5: 39:57:d8:8f:4d:8c:b2:0a:6a:1c:54:57:3e:c2:24:0f:c7:63: e2:7e:a7:36:dd:00:36:1b:bb:b5:79:11:a1:62:56:e5:90:9d: 99:b3:60:ce:ff:9b:e5:c2:c3:bf:bc:98:15:70:8c:87:38:7b: f5:0e:d3:57:de:f7:ee:5c:b3:c8:55:68:af:ab:13:1f:16:40: f9:dc:e5:91:4b:07:e8:f0:90:36:bc:28:31:8b:b3:89:47:b3: 01:c7:ae:80:96:e0:aa:6f:4a:df:b8:b4:ae:c8:67:88:16:62: ca:17:d7:a8:a1:74:83:f5:9f:0e:83:de:20:5c:62:1c:ce:d3: 31:e3:21:13:39:f3:b3:6f:88:0e:46:9d:59:5b:4a:0e:5c:15: cb:65:25:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjUxMjA2MTYyMTE0WhcNMjUxMjEzMTYyMTE0WjAYMRYwFAYD VQQDEw02OTM0NTdmYS05NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppd+rwDguBbI6b9hMAzZWshKWRhiuuA8MGe5yu+oyhhr0EsT+xsw3Q9xuMFU IRuqqs0R/we2POBwkzAsKyTWYhdi3P2O+4PZly8AgNU4fkgpuUPJr6I8eFphbQP8 uuOKCn+zLZ4UV927DyJil5u3hKz+GKf4MMSoLMYu+cWLBWx/WZU8fI11WfZhm11Y ILBVrRwZa69uNNDvVo7AZP4Tg9S4WeW29hMBpihxPX0c15k1gnKyk86TAK7qnu04 LPyLe9a+PYaWBQuYCRoWl7Ozz+2F4qUl32mniWSeULR9uPXVxuYk+NTqgx73bt31 XgifLVymk+D35uz88yhT8ydSmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo26uM5 b3E5/SgNpx8oZQHPD5xbMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGrsJmt3OzRqJrZHHFkmmC6aluFHZEtJp6+kqdPtq78+0kVQYVixoB 9VGMVcOYllNImG+HoHXfQFH2BkJTpfLSaNmq9R5rMJk0oo5hIQcTxYl5vkbGrOSh uLA5KZrJx5SECY9JeYSJD6j2jtU5V9iPTYyyCmocVFc+wiQPx2Pifqc23QA2G7u1 eRGhYlblkJ2Zs2DO/5vlwsO/vJgVcIyHOHv1DtNX3vfuXLPIVWivqxMfFkD53OWR Swfo8JA2vCgxi7OJR7MBx66AluCqb0rfuLSuyGeIFmLKF9eooXSD9Z8Og94gXGIc ztMx4yETOfOzb4gORp1ZW0oOXBXLZSVF -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:50 2025 by rpki-client