This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: kyqiGxJflZnmBqM0LcwIkdoCOKhB6noLa3RaAkxvomw= Subject key identifier: 48:4A:C9:C7:C7:2E:E5:0A:31:BC:E3:4F:02:CE:82:E9:94:DE:C4:71 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 022B Signing time: Fri 05 Dec 2025 00:25:51 +0000 Manifest this update: Fri 05 Dec 2025 00:25:51 +0000 Manifest next update: Fri 12 Dec 2025 00:25:51 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: JfuyWq6NKeUv+QxNNnFLlge98mAMCLOH4sLbxXfqvgU=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: zxrXFqsfD+7NRRncl+qUeb1Nz8SeSSAW+8BU/fya5cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Dec 5 00:25:51 2025 GMT Not After : Dec 12 00:25:51 2025 GMT Subject: CN=6932268f-08ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:fd:25:5b:dc:c1:1b:ed:55:68:a2:94:9d: 50:44:3c:49:06:8c:e2:8d:38:c6:d4:0a:d3:03:53: 85:14:0d:b9:eb:05:59:e5:e4:e1:00:e2:93:96:68: 5c:0c:14:24:6d:ad:e0:22:5e:4f:9d:2f:86:87:99: 7d:47:68:5b:e7:fe:4e:d1:22:ca:90:a2:c1:46:7b: 5c:1a:df:42:ba:ad:08:6e:23:16:b1:ea:f9:9a:55: 91:c9:6c:42:39:2f:65:13:26:98:e5:26:95:cb:50: 72:26:8b:36:58:70:dc:96:a7:c4:aa:46:7b:12:5d: 9b:fa:c0:00:26:78:fa:62:72:a8:e1:40:81:f1:79: 83:bb:14:45:40:56:c7:b9:5b:3d:2a:00:8e:a0:fb: 09:34:d6:43:56:00:d9:83:79:f4:e8:b7:d6:41:a7: 49:82:af:11:fd:af:48:d8:4d:2f:14:48:b1:ce:31: 70:82:a2:66:96:82:3c:d6:ca:4f:d3:69:5d:1c:8f: 59:81:10:a4:d0:1f:66:e1:a6:10:d7:eb:87:f8:9e: b7:f4:fa:b7:c8:1a:89:e9:8f:cc:6c:6b:df:0d:ca: 50:94:8a:7f:10:99:f7:86:e4:7e:79:66:80:0e:a1: 99:40:64:dd:85:2b:0c:99:45:88:9a:26:1a:c9:1a: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4A:C9:C7:C7:2E:E5:0A:31:BC:E3:4F:02:CE:82:E9:94:DE:C4:71 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:67:be:03:a7:52:6a:e2:66:72:0f:19:88:fd:df:70:3f:ff: 0e:b5:9c:99:82:b1:62:b2:5b:63:93:c7:30:de:a6:26:96:74: 31:81:84:1e:f1:23:3e:49:6b:5c:8b:28:31:6d:b8:59:6a:fb: e8:cd:87:8f:91:72:ac:13:bc:4d:a3:41:34:13:fd:b6:ba:11: c5:33:11:14:a1:75:38:1c:87:32:49:c2:12:8a:f4:fa:ea:0c: a9:f3:c3:f9:69:84:23:b0:08:88:81:0e:19:27:40:27:83:93: e8:74:ff:c7:4b:95:d2:54:12:35:89:27:fa:50:03:94:0b:1d: 6f:63:b2:00:7d:53:78:88:73:57:98:9d:fb:e2:b7:65:8d:47: f8:ca:64:b7:06:b3:42:c7:16:1c:e2:6d:86:1a:5a:50:e3:21: e9:47:8a:fa:aa:60:58:a1:f7:32:cd:0f:e5:c6:ef:67:6c:41: 9d:ab:a7:03:87:45:50:cc:a2:bd:43:35:75:ea:8e:8d:3e:6b: 24:59:af:5a:b0:3f:a1:6e:35:cd:0b:15:c5:04:67:e7:e4:be: 0d:de:3e:27:ea:d1:c8:6c:dc:25:66:81:90:7d:2e:75:94:cf: 76:07:28:e0:a1:6b:4d:e2:e2:38:3c:e4:81:10:7a:7e:7e:ef: 91:05:f0:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUxMjA1MDAyNTUxWhcNMjUxMjEyMDAyNTUxWjAYMRYwFAYD VQQDEw02OTMyMjY4Zi0wOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcj9JVvcwRvtVWiilJ1QRDxJBozijTjG1ArTA1OFFA256wVZ5eThAOKTlmhc DBQkba3gIl5PnS+Gh5l9R2hb5/5O0SLKkKLBRntcGt9Cuq0IbiMWser5mlWRyWxC OS9lEyaY5SaVy1ByJos2WHDclqfEqkZ7El2b+sAAJnj6YnKo4UCB8XmDuxRFQFbH uVs9KgCOoPsJNNZDVgDZg3n06LfWQadJgq8R/a9I2E0vFEixzjFwgqJmloI81spP 02ldHI9ZgRCk0B9m4aYQ1+uH+J639Pq3yBqJ6Y/MbGvfDcpQlIp/EJn3huR+eWaA DqGZQGTdhSsMmUWImiYayRoMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhKycfH LuUKMbzjTwLOgumU3sRxMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Z74Dp1Jq4mZyDxmI/d9wP/8OtZyZgrFisltjk8cw3qYmlnQxgYQe 8SM+SWtciygxbbhZavvozYePkXKsE7xNo0E0E/22uhHFMxEUoXU4HIcyScISivT6 6gyp88P5aYQjsAiIgQ4ZJ0Ang5PodP/HS5XSVBI1iSf6UAOUCx1vY7IAfVN4iHNX mJ374rdljUf4ymS3BrNCxxYc4m2GGlpQ4yHpR4r6qmBYofcyzQ/lxu9nbEGdq6cD h0VQzKK9QzV16o6NPmskWa9asD+hbjXNCxXFBGfn5L4N3j4n6tHIbNwlZoGQfS51 lM92ByjgoWtN4uI4POSBEHp+fu+RBfBH -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:02 2025 by rpki-client