This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: 4HCrNoTOhqP3Ef2cLA/Ozf9Ah3K62vdFEf6BG74EGYk= Subject key identifier: 7B:B1:0B:C0:A3:5C:DA:D0:EB:57:1D:26:2F:09:CE:30:BD:6E:A7:3E Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 62 Signing time: Fri 05 Dec 2025 04:56:59 +0000 Manifest this update: Fri 05 Dec 2025 04:56:58 +0000 Manifest next update: Fri 12 Dec 2025 04:56:58 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: z0CO+d+58vwtPFAzXvW/8WRwNy7imOXMkbf49pVC5ds=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Dec 5 04:56:58 2025 GMT Not After : Dec 12 04:56:58 2025 GMT Subject: CN=6932661a-4be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:a9:7c:f6:c1:5b:53:6d:26:67:7f:cf:bd: e6:ba:ad:38:bd:2e:c4:1a:ed:e4:41:cd:3c:5f:42: 95:93:76:12:a6:f6:68:52:f1:22:55:28:aa:ba:be: de:3d:dd:ec:1f:46:4a:fd:f0:fb:f7:b4:93:57:2b: 2b:f4:29:65:99:cd:0e:04:ae:de:c4:e6:4d:3e:1c: 97:72:45:89:00:e0:d1:8e:21:d2:c7:da:51:26:5f: 0c:b7:02:01:8e:7a:0d:1b:ec:04:4d:fa:b7:33:e7: de:7e:3a:ec:ba:6b:97:d0:bc:74:65:1f:72:04:33: ea:f1:f2:bc:ee:99:56:0e:14:df:de:e6:f8:3d:76: d2:2e:7d:4c:96:b1:d1:4b:26:ac:61:e6:9f:3b:33: e3:dd:8e:81:02:32:cc:a5:22:c0:55:90:5c:c1:b0: 2a:81:8d:bc:62:7f:7f:d7:6b:14:20:78:b4:d8:0a: be:ca:4c:0c:90:38:34:b4:bf:30:94:88:72:7d:be: 9e:1d:31:72:ea:f2:1d:05:9b:71:52:0b:cd:84:7e: 1b:31:26:a1:c0:ea:f8:e5:58:3f:d5:7f:c5:03:50: f7:24:b7:3d:da:8b:a0:4d:ca:bb:e8:b0:80:3a:7f: 6a:1b:4c:b3:77:ed:22:7d:aa:77:dc:82:44:8d:1c: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:0B:C0:A3:5C:DA:D0:EB:57:1D:26:2F:09:CE:30:BD:6E:A7:3E X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fa:10:43:a2:74:50:f5:0e:4b:7d:b1:7e:eb:79:38:79:61: e5:31:0f:11:9e:94:8b:37:34:cb:46:c3:05:46:20:78:e4:80: 9d:f9:6a:0a:46:02:4e:17:26:1c:ea:d4:9f:9d:6d:da:ce:b4: 43:c0:f7:9f:73:e3:9d:f7:07:c7:09:16:42:e7:85:9c:f2:5d: 95:d1:aa:d3:b5:4b:71:79:a5:f0:fa:02:82:43:01:2f:72:53: 7f:14:3a:b9:52:20:56:84:e6:66:36:b8:fe:99:c0:a9:4e:8e: 77:b9:af:03:ad:5d:c3:69:f2:36:2b:e5:17:4c:1a:cd:5d:45: 2a:3d:97:ee:1f:2f:1c:2f:de:5f:a3:50:ad:56:4a:14:88:65: 24:2d:de:e2:ca:e9:03:9c:81:5d:e6:2a:c3:9c:a8:c7:c1:54: 56:f6:93:00:a8:89:90:f5:54:a9:5f:ad:a6:4a:8c:67:7d:14: fb:54:7b:79:24:b3:a2:80:aa:33:13:f3:c3:bc:ee:b7:06:a1: 37:9c:e9:a4:e7:f1:83:62:ad:57:ab:ea:40:0b:54:60:32:c2: 91:ad:3d:21:14:d2:18:4b:d1:01:e9:78:f6:6e:3a:3d:5a:bc: 14:ec:5b:f8:71:06:41:29:ed:28:60:6e:3f:6e:20:6d:5a:d2: 17:ca:ec:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTEyMDUwNDU2NThaFw0yNTEyMTIwNDU2NThaMBgxFjAUBgNV BAMTDTY5MzI2NjFhLTRiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVKal89sFbU20mZ3/Pvea6rTi9LsQa7eRBzTxfQpWTdhKm9mhS8SJVKKq6vt49 3ewfRkr98Pv3tJNXKyv0KWWZzQ4Ert7E5k0+HJdyRYkA4NGOIdLH2lEmXwy3AgGO eg0b7ARN+rcz595+Ouy6a5fQvHRlH3IEM+rx8rzumVYOFN/e5vg9dtIufUyWsdFL Jqxh5p87M+PdjoECMsylIsBVkFzBsCqBjbxif3/XaxQgeLTYCr7KTAyQODS0vzCU iHJ9vp4dMXLq8h0Fm3FSC82EfhsxJqHA6vjlWD/Vf8UDUPcktz3ai6BNyrvosIA6 f2obTLN37SJ9qnfcgkSNHKMdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe7ELwKNc 2tDrVx0mLwnOML1upz4wHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/6EEOidFD1Dkt9sX7reTh5YeUxDxGelIs3NMtGwwVGIHjkgJ35agpG Ak4XJhzq1J+dbdrOtEPA959z4533B8cJFkLnhZzyXZXRqtO1S3F5pfD6AoJDAS9y U38UOrlSIFaE5mY2uP6ZwKlOjne5rwOtXcNp8jYr5RdMGs1dRSo9l+4fLxwv3l+j UK1WShSIZSQt3uLK6QOcgV3mKsOcqMfBVFb2kwCoiZD1VKlfraZKjGd9FPtUe3kk s6KAqjMT88O87rcGoTec6aTn8YNirVer6kALVGAywpGtPSEU0hhL0QHpePZuOj1a vBTsW/hxBkEp7Shgbj9uIG1a0hfK7J0= -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:12 2025 by rpki-client