This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: ypJEVDrmUPt9X4J7Ou3vTnc4RBD9nLn2+PXYBS50V/Q= Subject key identifier: F4:9B:28:A9:2F:7D:42:44:2B:61:8A:BB:6F:BC:50:A1:28:8A:42:B2 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: E2 Signing time: Fri 05 Dec 2025 03:30:10 +0000 Manifest this update: Fri 05 Dec 2025 03:30:10 +0000 Manifest next update: Fri 12 Dec 2025 03:30:10 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: lmd0aCsSKR3+kEtdpmE2SDOeAi0eCz2UCuG0mv/OYbI=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: bXsYiFs/1LAAvnPFWc2oF5LhYtHyhSVuRh2eDok+L9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Dec 5 03:30:10 2025 GMT Not After : Dec 12 03:30:10 2025 GMT Subject: CN=693251c2-84e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:5b:d9:e9:90:89:a9:8e:3b:be:ae:36:0a: 7a:7c:09:89:87:31:1e:77:b9:5f:c6:d0:98:fb:c1: e8:05:d3:a5:ff:47:9c:63:63:e5:67:ab:e0:63:0a: 85:60:e4:2d:b5:fd:a1:ba:12:5e:26:ce:d7:d6:f0: c8:d2:93:67:c4:19:f4:0f:58:07:f3:a7:cc:e1:d9: d7:a6:a2:41:d9:93:f7:a2:73:b4:c9:9d:e1:ce:93: 46:fc:d5:07:57:f8:ba:5d:4c:00:e9:c7:76:4d:cd: ac:54:89:77:7b:64:b6:a3:da:78:a8:48:38:ac:af: f8:8a:ce:e2:a0:c9:4e:7a:5e:f0:5f:92:90:f8:18: ff:4c:1e:bf:71:15:36:b0:d5:00:f0:59:d9:34:bc: d7:69:c4:a5:8b:7c:89:d3:ba:63:e8:ff:f9:06:a1: fe:14:dc:f9:98:de:4b:d5:b2:8d:3a:96:6b:e1:a7: 39:88:b3:dd:f6:cd:8b:05:a0:66:73:0e:b8:b4:1f: aa:c5:b9:76:47:76:b0:c8:2b:25:e1:4f:3e:bf:43: b9:27:ff:23:e8:67:c0:05:00:12:84:0c:3c:a5:7f: 60:ac:0c:b6:4b:31:79:82:f3:cf:16:23:1b:3e:69: f4:8c:38:c8:67:65:ad:8a:97:96:8a:54:d1:dd:d0: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9B:28:A9:2F:7D:42:44:2B:61:8A:BB:6F:BC:50:A1:28:8A:42:B2 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:14:dc:e4:70:76:a8:81:e1:7c:03:29:80:2c:03:a2:a8:9a: 2a:b0:41:da:43:de:be:ee:a5:67:8a:59:ec:4b:6f:e5:fe:91: 81:29:91:55:10:e2:bc:dd:9a:a5:d1:70:c9:83:dd:99:c8:97: d3:94:69:45:55:ff:c5:d0:55:ea:c0:71:3e:3a:f5:a2:4a:72: 89:d7:22:5e:64:01:60:ea:ab:0e:55:07:ed:5f:d5:b5:1f:22: 12:a9:1d:17:0a:f9:92:98:8d:ea:e9:16:69:8b:8d:bd:16:81: 5b:91:76:ce:98:48:df:a7:79:97:2e:6b:ee:12:aa:f8:9d:3f: 76:4b:7b:a1:2a:13:92:85:1e:d8:e1:dc:29:cc:e5:b1:26:e7: e3:66:c0:1c:e3:06:3c:36:e9:8b:30:32:fe:40:bc:41:d7:0a: ea:f2:38:75:8f:15:70:ea:95:06:ad:c4:0d:94:88:a1:2a:37: a3:9c:52:d9:78:5e:47:f0:12:76:3b:7d:ff:78:ca:f1:af:40: ca:73:28:fa:88:1c:63:7c:a0:cd:cf:18:a5:ce:e5:40:c7:34: 44:8b:38:20:38:fb:c2:48:da:f9:7e:82:72:5e:b2:64:34:b8: b8:4b:d8:38:ca:17:19:ba:f2:4d:51:89:cd:1e:18:75:6a:7d: 66:6c:12:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUxMjA1MDMzMDEwWhcNMjUxMjEyMDMzMDEwWjAYMRYwFAYD VQQDEw02OTMyNTFjMi04NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwllb2emQiamOO76uNgp6fAmJhzEed7lfxtCY+8HoBdOl/0ecY2PlZ6vgYwqF YOQttf2huhJeJs7X1vDI0pNnxBn0D1gH86fM4dnXpqJB2ZP3onO0yZ3hzpNG/NUH V/i6XUwA6cd2Tc2sVIl3e2S2o9p4qEg4rK/4is7ioMlOel7wX5KQ+Bj/TB6/cRU2 sNUA8FnZNLzXacSli3yJ07pj6P/5BqH+FNz5mN5L1bKNOpZr4ac5iLPd9s2LBaBm cw64tB+qxbl2R3awyCsl4U8+v0O5J/8j6GfABQAShAw8pX9grAy2SzF5gvPPFiMb Pmn0jDjIZ2WtipeWilTR3dBicQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSbKKkv fUJEK2GKu2+8UKEoikKyMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzFNzkcHaogeF8AymALAOiqJoqsEHaQ96+7qVnilnsS2/l/pGBKZFV EOK83Zql0XDJg92ZyJfTlGlFVf/F0FXqwHE+OvWiSnKJ1yJeZAFg6qsOVQftX9W1 HyISqR0XCvmSmI3q6RZpi429FoFbkXbOmEjfp3mXLmvuEqr4nT92S3uhKhOShR7Y 4dwpzOWxJufjZsAc4wY8NumLMDL+QLxB1wrq8jh1jxVw6pUGrcQNlIihKjejnFLZ eF5H8BJ2O33/eMrxr0DKcyj6iBxjfKDNzxilzuVAxzREizggOPvCSNr5foJyXrJk NLi4S9g4yhcZuvJNUYnNHhh1an1mbBKP -----END CERTIFICATE-----Generated at Sat Dec 6 16:12:15 2025 by rpki-client