This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: yH5MY3O6BnoyOyDJZjShgO+P05x1YI05UHzPFnl0wGs= Subject key identifier: 25:19:D3:37:D7:0B:6C:DC:B7:DB:1C:8F:E5:B7:42:7C:2C:AF:54:78 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 34F8 Signing time: Sat 06 Dec 2025 14:31:30 +0000 Manifest this update: Sat 06 Dec 2025 14:31:29 +0000 Manifest next update: Sat 13 Dec 2025 14:31:29 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: QK5oVmsrDRCjAdRwN7dL/8bTr+m+sfoknNbeQuol6Bk=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: WAqkzYiOMG3eVsSlxconspeITWeLsHW6M6BKW5GBoNA=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: 7XJqHJEnhdUplCJ4iz+cv5gM2kcVkpUwLnhh4FUX6U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Dec 6 14:31:29 2025 GMT Not After : Dec 13 14:31:29 2025 GMT Subject: CN=69343e42-369b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:2a:eb:27:4c:c2:cd:8d:55:48:c7:c2:a5: 51:7b:3a:f6:87:03:f6:2c:81:7c:71:c5:9a:56:10: e8:35:e5:14:3f:3b:c7:e3:28:09:85:43:8c:15:2c: 77:b7:7a:ef:e9:ef:51:28:2d:14:26:19:76:50:9b: 05:73:66:40:3c:cb:84:b7:0e:8c:ef:d0:76:32:75: f8:92:c7:90:b7:ad:4b:f2:37:d0:53:96:cf:60:84: 44:14:2b:2a:61:31:77:85:00:f5:2a:f8:fc:44:14: 86:88:19:e6:cb:83:38:3a:24:50:98:67:36:35:21: 45:40:51:5d:87:1a:c7:e4:8b:99:66:40:b1:15:c1: 1f:04:44:d6:c2:42:5e:2c:c5:78:99:b5:5b:e8:17: 05:9e:37:07:58:94:3b:19:d5:dd:bd:01:46:18:c1: ba:47:c0:0d:c2:a7:b2:4f:fa:53:1e:b9:26:91:70: 19:77:56:c8:87:43:c4:7d:f7:73:24:09:bc:f2:87: 97:45:7b:06:54:ff:8c:40:49:8e:5b:65:b9:b7:f9: d5:c8:5f:84:01:8e:d8:54:8a:e9:54:02:04:e3:19: 24:f5:e6:c2:9e:8f:98:5c:e8:1f:58:45:72:71:aa: d9:38:27:49:cc:a1:f3:8a:8d:54:e7:02:1f:b8:4e: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:19:D3:37:D7:0B:6C:DC:B7:DB:1C:8F:E5:B7:42:7C:2C:AF:54:78 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:62:f3:83:d7:0b:b0:58:73:04:c8:c6:65:53:76:39:f2:76: de:8b:e1:6a:ec:8a:8d:b7:be:5e:1a:ae:ae:b4:ff:5b:3f:4f: 43:d0:87:b9:ba:01:4b:bd:f5:2a:85:00:9f:64:1b:0a:f7:4c: ae:dc:d1:0c:ad:fd:c8:6c:50:17:d6:e9:e8:6c:8e:17:3e:d0: bc:6d:7e:e8:88:a9:04:43:26:fc:16:b5:58:68:1e:00:09:d1: b8:37:f5:2b:ac:ca:c0:8a:93:4e:30:22:43:0f:cd:4f:aa:2d: 0e:b9:ae:a9:c4:9c:2e:e6:87:bf:c3:59:3e:ff:11:2e:a9:ea: 53:9c:fb:84:14:b5:24:48:2b:e5:d7:29:6a:cf:78:eb:ab:2c: eb:9f:55:33:7c:84:99:9e:3b:cb:cf:81:22:b3:a4:60:c7:18: e6:d5:55:38:5e:81:cb:88:77:bd:a8:f3:cf:85:8b:0d:0e:ac: 20:cc:30:b1:bf:51:57:4c:90:e4:9b:7f:a9:53:73:0c:d9:07: ed:4f:c3:82:ff:79:42:03:8f:38:4f:40:bf:e2:87:df:48:1d: b7:0e:72:10:60:88:08:8f:72:ac:3f:4d:68:55:cd:0b:d0:10: 75:d7:44:49:8e:33:f0:62:a9:c2:3b:77:a4:bb:5d:f7:b8:93: 9f:63:15:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUxMjA2MTQzMTI5WhcNMjUxMjEzMTQzMTI5WjAYMRYwFAYD VQQDEw02OTM0M2U0Mi0zNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W4q6ydMws2NVUjHwqVRezr2hwP2LIF8ccWaVhDoNeUUPzvH4ygJhUOMFSx3 t3rv6e9RKC0UJhl2UJsFc2ZAPMuEtw6M79B2MnX4kseQt61L8jfQU5bPYIREFCsq YTF3hQD1Kvj8RBSGiBnmy4M4OiRQmGc2NSFFQFFdhxrH5IuZZkCxFcEfBETWwkJe LMV4mbVb6BcFnjcHWJQ7GdXdvQFGGMG6R8ANwqeyT/pTHrkmkXAZd1bIh0PEffdz JAm88oeXRXsGVP+MQEmOW2W5t/nVyF+EAY7YVIrpVAIE4xkk9ebCno+YXOgfWEVy carZOCdJzKHzio1U5wIfuE7FlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUZ0zfX C2zct9scj+W3Qnwsr1R4MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjYvOD1wuwWHMEyMZlU3Y58nbei+Fq7IqNt75eGq6utP9bP09D0Ie5 ugFLvfUqhQCfZBsK90yu3NEMrf3IbFAX1unobI4XPtC8bX7oiKkEQyb8FrVYaB4A CdG4N/UrrMrAipNOMCJDD81Pqi0Oua6pxJwu5oe/w1k+/xEuqepTnPuEFLUkSCvl 1ylqz3jrqyzrn1UzfISZnjvLz4Eis6Rgxxjm1VU4XoHLiHe9qPPPhYsNDqwgzDCx v1FXTJDkm3+pU3MM2QftT8OC/3lCA484T0C/4offSB23DnIQYIgIj3KsP01oVc0L 0BB110RJjjPwYqnCO3eku133uJOfYxV7 -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:08 2025 by rpki-client