This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: Nj+HVYQpkSYs4yN2QAC2nXGVMTVvnfNl6Mz5ybr51UQ= Subject key identifier: ED:CB:C2:75:57:66:97:CC:08:8F:76:17:26:33:C5:B6:E2:F6:52:7B Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 4082 Signing time: Sat 06 Dec 2025 14:43:44 +0000 Manifest this update: Sat 06 Dec 2025 14:43:44 +0000 Manifest next update: Sat 13 Dec 2025 14:43:44 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: 2ENRRz6QGO9H5k/P3b9pOqH6aqgf8j3iHoN9M4rcWuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Dec 6 14:43:44 2025 GMT Not After : Dec 13 14:43:44 2025 GMT Subject: CN=69344120-2fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:4f:92:c0:cd:e7:0b:8a:20:3e:20:1e:ef: ad:99:a8:cb:c6:9e:dc:fa:25:e6:64:5e:ac:4e:fb: dc:9a:a1:c0:48:7a:5c:d7:7e:9d:61:87:70:fc:46: 05:7f:33:66:cd:ec:27:c3:29:cd:20:99:3d:b2:fa: 56:9a:60:07:db:82:1e:ef:f2:b7:f0:b1:d9:fe:8d: 6c:81:9a:a9:3f:60:ec:45:b2:9b:c5:ff:e0:5c:cc: 8e:b9:7c:75:41:94:33:68:f4:48:99:1d:f6:e1:3d: 38:22:6e:26:8a:d3:fb:43:ea:3d:0d:29:0a:b7:22: bb:0a:54:7d:70:9f:48:55:4b:96:c2:34:28:01:9a: 20:bd:aa:8b:1c:6a:8b:eb:39:28:09:8c:da:34:d8: ab:4c:e7:7f:7c:9c:3b:28:a4:94:92:de:5a:0c:55: 7e:19:a1:c7:4a:3d:7d:0b:11:06:e9:97:14:ac:a4: 0e:cc:7d:ed:66:51:7f:55:9f:14:3e:9a:01:d1:97: f5:d7:53:6c:82:0c:12:ae:d1:e3:06:4d:93:14:39: b5:c4:10:1e:4a:f0:d5:52:4a:8c:3e:14:f0:9c:c7: 41:3d:d2:4d:b5:7c:fd:f1:e5:91:27:4b:81:ae:14: 48:9f:b6:8e:3e:0a:76:92:63:5f:98:e7:df:a1:5a: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:C2:75:57:66:97:CC:08:8F:76:17:26:33:C5:B6:E2:F6:52:7B X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0e:8a:3e:4b:a2:89:35:48:fc:2a:70:b4:b3:30:f0:b5:7e: ed:d5:38:35:b2:3b:4f:95:99:b3:c1:35:09:94:0a:a2:d7:23: 65:5a:05:23:bf:dc:00:b5:62:3a:42:dd:f6:7a:f7:27:3a:e4: 26:3f:f5:a6:85:3e:34:17:b3:ea:5e:a5:87:61:38:49:99:30: 92:dc:21:9b:72:67:5f:ff:07:37:9b:37:08:24:5f:da:72:8e: d1:d3:e4:a2:19:cb:cd:ba:59:fd:93:ff:aa:74:5d:d7:24:20: f6:2d:57:e8:ce:20:5c:49:5a:0d:2b:8c:be:3b:5d:4a:05:e5: 8c:0f:2a:a3:18:b5:dd:c8:e1:9b:d3:55:0e:39:38:55:08:62: ba:25:2f:68:4f:5f:08:6c:87:23:60:71:21:d9:30:fb:6b:eb: 99:dc:81:d1:d6:14:72:36:ad:e4:f8:7a:e2:99:7d:0f:08:10: ac:35:d1:58:ec:07:df:9c:51:40:1a:46:72:2a:e0:48:6d:9e: ae:27:79:59:dd:bb:3d:32:9f:7e:ef:4e:ed:9a:63:28:09:c6: 71:d1:ae:ca:86:79:cd:41:40:2f:a9:45:81:1f:95:ba:e2:dd: 67:c8:01:a3:21:7b:ce:e6:c0:e1:c7:1c:da:a9:8f:77:e3:34: 9d:39:1e:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUxMjA2MTQ0MzQ0WhcNMjUxMjEzMTQ0MzQ0WjAYMRYwFAYD VQQDEw02OTM0NDEyMC0yZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxlPksDN5wuKID4gHu+tmajLxp7c+iXmZF6sTvvcmqHASHpc136dYYdw/EYF fzNmzewnwynNIJk9svpWmmAH24Ie7/K38LHZ/o1sgZqpP2DsRbKbxf/gXMyOuXx1 QZQzaPRImR324T04Im4mitP7Q+o9DSkKtyK7ClR9cJ9IVUuWwjQoAZogvaqLHGqL 6zkoCYzaNNirTOd/fJw7KKSUkt5aDFV+GaHHSj19CxEG6ZcUrKQOzH3tZlF/VZ8U PpoB0Zf111NsggwSrtHjBk2TFDm1xBAeSvDVUkqMPhTwnMdBPdJNtXz98eWRJ0uB rhRIn7aOPgp2kmNfmOffoVoHGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3LwnVX ZpfMCI92FyYzxbbi9lJ7MB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMDoo+S6KJNUj8KnC0szDwtX7t1Tg1sjtPlZmzwTUJlAqi1yNlWgUj v9wAtWI6Qt32evcnOuQmP/WmhT40F7PqXqWHYThJmTCS3CGbcmdf/wc3mzcIJF/a co7R0+SiGcvNuln9k/+qdF3XJCD2LVfoziBcSVoNK4y+O11KBeWMDyqjGLXdyOGb 01UOOThVCGK6JS9oT18IbIcjYHEh2TD7a+uZ3IHR1hRyNq3k+HrimX0PCBCsNdFY 7AffnFFAGkZyKuBIbZ6uJ3lZ3bs9Mp9+707tmmMoCcZx0a7KhnnNQUAvqUWBH5W6 4t1nyAGjIXvO5sDhxxzaqY934zSdOR4Q -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:44 2025 by rpki-client