This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json) Hash identifier: PkMw5/qGeaC94l3N4QRJKBKZSqFXBczJiTBm+9nzw0Q= Subject key identifier: E8:26:84:8C:29:52:A5:CA:4D:21:C0:DE:DD:03:6A:46:75:22:9B:46 Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft Manifest number: 0C31 Signing time: Sat 06 Dec 2025 18:01:14 +0000 Manifest this update: Sat 06 Dec 2025 18:01:13 +0000 Manifest next update: Sat 13 Dec 2025 18:01:13 +0000 Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: L//8hwRQVaKFLecZWlY3jIv2bL7sNPzc+G8/FsI/uYI=) 2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: ELFkrkGvrGXpvAeGB34G/wdhCkAvgz4ejLB+gQtN8Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Validity Not Before: Dec 6 18:01:13 2025 GMT Not After : Dec 13 18:01:13 2025 GMT Subject: CN=69346f6a-9347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:55:f7:2c:1f:43:5b:4d:18:61:6f:80:b6: 0b:07:a5:3a:1d:8c:8d:27:23:38:50:9a:80:5f:ef: 8a:94:64:d3:76:3e:e8:da:40:e7:32:36:7f:0b:55: 8d:33:bd:a4:16:d0:25:ae:c5:eb:ae:01:36:0f:81: 01:b7:a0:0b:6d:84:76:a6:77:64:4f:e9:82:cc:bb: b6:22:64:7d:33:1c:83:70:b9:83:08:38:40:2c:8e: 7e:91:7c:4d:0d:a8:e1:cd:b8:5d:8f:81:5a:99:7b: 19:2c:0c:22:0d:6c:07:01:b6:bb:b2:4d:a1:2b:33: a3:50:4a:e4:3b:0b:b6:df:1e:95:8c:98:a6:2e:87: 1a:71:24:cc:07:35:4b:02:a3:9d:59:51:26:99:8f: 72:c3:aa:41:d2:60:50:f5:8f:75:1f:ba:2f:f0:17: 1f:db:c1:a8:75:6b:b5:1f:9c:53:36:72:2a:d1:d5: 28:6b:bc:8a:29:9a:a0:a2:6c:26:29:d0:4c:1b:86: 26:2b:08:2f:89:bc:21:65:78:c6:5f:7f:b4:69:50: 83:9d:21:bf:b1:49:18:64:9f:b9:b7:1e:16:d3:2a: cd:42:db:2d:4f:3f:b9:63:b7:40:ab:a9:5b:1f:0e: ad:b3:8a:50:8c:98:29:96:cb:58:36:06:83:6a:31: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:26:84:8C:29:52:A5:CA:4D:21:C0:DE:DD:03:6A:46:75:22:9B:46 X509v3 Authority Key Identifier: keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d4:0b:a8:aa:cf:93:f7:5d:10:54:4e:2e:26:9e:be:9d:3b: 1b:56:a1:f7:c9:9f:2a:8b:0d:f6:b6:0e:86:4d:35:0d:78:c4: 12:f6:a5:d5:73:6d:02:27:52:c7:7b:54:1b:07:d1:52:84:e8: b5:4a:85:c9:eb:8b:fe:57:35:c1:a6:5f:5c:1e:27:ac:f9:09: 16:4c:82:9b:b4:bb:25:46:31:99:14:02:37:1a:06:30:60:5f: 3d:36:70:9c:a2:d3:0a:3c:7d:86:12:a2:0e:51:ce:1e:f6:fe: 6c:b0:17:b1:e7:42:e5:fd:74:c1:66:4d:bd:ba:d5:1b:05:00: 8d:77:ef:68:f2:fd:61:04:60:df:c6:12:6d:ee:81:c1:43:ce: 91:9c:5b:87:33:8e:a6:03:ab:c0:a4:ca:86:d7:75:f6:c6:17: 3d:66:b3:53:55:55:5b:fd:99:60:24:05:4f:63:4f:82:81:fe: 44:c4:1d:f2:ff:52:36:18:47:e6:b3:88:f2:f4:bb:be:cb:d3: 0a:ed:ab:db:c1:a9:6d:a8:1a:16:e8:d7:b2:c3:33:31:28:bd: 5e:dc:1c:e3:43:e1:85:f3:4c:2b:42:5d:cf:8c:19:24:6d:65: 0f:09:c8:d8:bc:a6:88:c3:dd:0d:57:85:c3:22:36:77:41:63: 0d:a5:dc:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix NTU1RDJCRDQwHhcNMjUxMjA2MTgwMTEzWhcNMjUxMjEzMTgwMTEzWjAYMRYwFAYD VQQDEw02OTM0NmY2YS05MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vFV9ywfQ1tNGGFvgLYLB6U6HYyNJyM4UJqAX++KlGTTdj7o2kDnMjZ/C1WN M72kFtAlrsXrrgE2D4EBt6ALbYR2pndkT+mCzLu2ImR9MxyDcLmDCDhALI5+kXxN Dajhzbhdj4FamXsZLAwiDWwHAba7sk2hKzOjUErkOwu23x6VjJimLocacSTMBzVL AqOdWVEmmY9yw6pB0mBQ9Y91H7ov8Bcf28GodWu1H5xTNnIq0dUoa7yKKZqgomwm KdBMG4YmKwgvibwhZXjGX3+0aVCDnSG/sUkYZJ+5tx4W0yrNQtstTz+5Y7dAq6lb Hw6ts4pQjJgplstYNgaDajFaZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgmhIwp UqXKTSHA3t0DakZ1IptGMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjJCRi8xMDM5QkM0MDFBREIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIw YWFXUnRNVXRKTXNWVmRLOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+1Auoqs+T910QVE4uJp6+nTsbVqH3yZ8qiw32tg6GTTUNeMQS9qXV c20CJ1LHe1QbB9FShOi1SoXJ64v+VzXBpl9cHies+QkWTIKbtLslRjGZFAI3GgYw YF89NnCcotMKPH2GEqIOUc4e9v5ssBex50Ll/XTBZk29utUbBQCNd+9o8v1hBGDf xhJt7oHBQ86RnFuHM46mA6vApMqG13X2xhc9ZrNTVVVb/ZlgJAVPY0+Cgf5ExB3y /1I2GEfms4jy9Lu+y9MK7avbwaltqBoW6NeywzMxKL1e3BzjQ+GF80wrQl3PjBkk bWUPCcjYvKaIw90NV4XDIjZ3QWMNpdy4 -----END CERTIFICATE-----Generated at Mon Dec 8 01:21:00 2025 by rpki-client