This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: XQOMrpPbbk14JZCqt89Lcbh4uTxkpJmfBWNfSfcpC3s= Subject key identifier: 0E:5F:E2:E3:13:D9:B2:42:24:87:35:DF:81:B0:75:0B:A4:A0:D5:B3 Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2CC8 Signing time: Sat 20 Dec 2025 16:32:37 +0000 Manifest this update: Sat 20 Dec 2025 16:32:37 +0000 Manifest next update: Sat 27 Dec 2025 16:32:37 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: hrjMyUAxMLAiTC6z/ndvGdxlaoLmcVupVlVQxfaaXmk=) 2: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: l8bKIhbaIQRpxj2EnLxKodO5Lts0S1PNvx/Q9UGbIdM=) 3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: duvvU3RUwkrsIo0/zHzxCyo+TK7pJnD32sQeSK2L5Jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Dec 20 16:32:37 2025 GMT Not After : Dec 27 16:32:37 2025 GMT Subject: CN=6946cfa5-dd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:67:1c:29:8b:a4:1b:a6:7e:1b:50:25:28: e7:62:1f:a0:9b:c9:af:25:98:f2:bf:53:8b:0f:48: 9d:79:19:48:41:96:3f:d8:61:a2:f4:c1:bb:f4:b5: 75:62:40:3b:4d:c2:97:af:5e:5b:51:8e:d6:51:e2: a0:8f:b3:0d:c9:d5:33:7f:ab:cd:ac:d1:c6:8f:c4: 83:66:d1:2b:82:d7:a9:85:76:34:cb:dd:55:58:7b: ca:a8:c5:94:8d:3a:c6:06:02:4f:9d:65:8f:7e:64: 3d:85:7a:ce:9c:46:76:e7:0a:73:ee:d8:b5:6e:67: d1:7c:0a:62:0a:f0:a6:99:2f:e2:49:1b:f9:7d:30: 0c:36:5d:47:a2:95:49:ef:78:56:57:ad:13:ad:ea: 7e:91:5b:86:03:78:2e:0e:0a:56:af:e8:b0:25:7a: d0:b3:c1:2f:c9:c4:90:1d:dc:a6:4f:ce:27:54:8f: a8:bb:ed:75:c5:fa:1a:72:83:f8:b3:42:5f:02:af: b0:65:d1:b0:2b:08:e6:58:94:ee:a3:ff:f2:40:b0: 53:a0:43:9c:6a:21:8f:c0:03:44:dc:64:d4:1f:e5: 10:48:4e:89:27:a1:0e:0e:5f:86:74:f8:cf:97:e1: 19:fe:9c:5f:b7:f0:de:f1:b5:0c:99:4a:80:ff:09: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:E2:E3:13:D9:B2:42:24:87:35:DF:81:B0:75:0B:A4:A0:D5:B3 X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:0d:44:5f:7b:27:af:b9:36:3c:09:10:6d:d7:c8:91:0c:68: 8d:ee:0d:9e:3a:62:e2:86:85:4d:b1:f2:6c:1f:4d:68:dc:f1: 80:7b:b2:49:17:10:ac:21:73:a1:10:68:71:fa:2d:49:7a:db: 8d:b3:d4:ae:19:b5:90:e4:30:c6:4f:2b:81:4a:1d:14:60:79: f1:53:4e:3f:f1:dc:fe:a1:49:f8:e5:45:be:73:30:ca:d8:72: 05:7a:cc:35:d4:12:e5:d7:9f:6a:35:31:0e:3d:09:f0:9f:91: 5a:86:5e:97:c9:06:04:40:69:34:b2:d2:e9:71:da:ec:26:a9: af:ac:12:22:0c:83:17:54:fd:47:a7:9a:4d:6a:b5:a8:d1:c3: ad:b0:4d:35:52:35:3c:63:49:cb:bf:1e:9c:23:a5:ae:b7:d2: 05:8c:fe:fb:86:ff:db:5e:87:81:9c:47:33:e9:b9:ae:1d:d1: 42:55:c1:fa:aa:32:7e:f4:2d:ff:9c:a9:fb:60:74:c0:51:db: 3c:21:e8:9a:01:ef:9e:fe:76:15:4f:c6:0e:e8:cb:a0:0c:92: 9c:5e:6d:a6:cc:0e:c2:04:13:19:d9:02:fa:dd:82:65:6a:57: ac:04:d5:c5:d7:66:8e:55:c2:51:c5:2b:a7:80:76:34:ce:65: 40:e1:1b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjUxMjIwMTYzMjM3WhcNMjUxMjI3MTYzMjM3WjAYMRYwFAYD VQQDDA02OTQ2Y2ZhNS1kZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCtnHCmLpBumfhtQJSjnYh+gm8mvJZjyv1OLD0ideRlIQZY/2GGi9MG79LV1 YkA7TcKXr15bUY7WUeKgj7MNydUzf6vNrNHGj8SDZtErgtephXY0y91VWHvKqMWU jTrGBgJPnWWPfmQ9hXrOnEZ25wpz7ti1bmfRfApiCvCmmS/iSRv5fTAMNl1HopVJ 73hWV60Trep+kVuGA3guDgpWr+iwJXrQs8EvycSQHdymT84nVI+ou+11xfoacoP4 s0JfAq+wZdGwKwjmWJTuo//yQLBToEOcaiGPwANE3GTUH+UQSE6JJ6EODl+GdPjP l+EZ/pxft/De8bUMmUqA/wld9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5f4uMT 2bJCJIc134GwdQukoNWzMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoDURfeyevuTY8CRBt18iRDGiN7g2eOmLihoVNsfJsH01o3PGAe7JJ FxCsIXOhEGhx+i1JetuNs9SuGbWQ5DDGTyuBSh0UYHnxU04/8dz+oUn45UW+czDK 2HIFesw11BLl159qNTEOPQnwn5Fahl6XyQYEQGk0stLpcdrsJqmvrBIiDIMXVP1H p5pNarWo0cOtsE01UjU8Y0nLvx6cI6Wut9IFjP77hv/bXoeBnEcz6bmuHdFCVcH6 qjJ+9C3/nKn7YHTAUds8IeiaAe+e/nYVT8YO6MugDJKcXm2mzA7CBBMZ2QL63YJl alesBNXF12aOVcJRxSungHY0zmVA4Rt1 -----END CERTIFICATE-----Generated at Sun Dec 21 20:57:32 2025 by rpki-client