This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json) Hash identifier: iJ1oP9BGzzQoGpmozuIRSTu2E/28nDsJYiXnCck4lIQ= Subject key identifier: 88:BC:1F:E2:C4:3D:D5:17:69:C7:9E:B9:1C:D4:99:33:85:3A:98:74 Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft Manifest number: 0276 Signing time: Thu 04 Dec 2025 23:57:13 +0000 Manifest this update: Thu 04 Dec 2025 23:57:12 +0000 Manifest next update: Thu 11 Dec 2025 23:57:12 +0000 Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: O5fH3K5dvwFG/azdoYZz8/UKx3Q1Q0bhCBZ75NVNm2I=) 2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: Dec 4 23:57:12 2025 GMT Not After : Dec 11 23:57:12 2025 GMT Subject: CN=69321fd9-84f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:b3:41:73:cd:47:79:e3:26:00:a0:65:6a: 81:6e:2f:1d:24:d3:71:18:3d:2a:f2:82:32:11:20: 81:f0:3c:e7:a2:99:82:64:89:7f:a2:5e:9d:df:7a: a7:2c:90:30:87:98:d7:74:b3:70:3c:e4:81:d5:b5: bf:02:1c:bd:f1:77:02:85:6b:b2:2c:08:23:9a:f9: 00:0e:ab:3d:7e:3b:a2:3d:df:e9:b3:0a:29:8f:1e: d4:de:5e:28:f2:56:2f:f6:71:09:70:cf:dc:8c:1c: 90:f0:f3:85:32:cc:8c:85:45:51:5e:41:3a:8b:78: 7f:54:ff:5e:a1:8b:2f:0f:d4:c9:7c:f1:a0:22:73: 10:84:ef:1b:98:e3:42:09:4d:70:99:82:e8:25:ec: ca:4c:84:ab:a8:a6:c7:59:29:76:8b:db:1b:6b:f9: 77:96:df:c9:48:e6:78:0e:44:8c:6c:58:b5:5a:f0: 01:15:e9:42:7d:03:d2:68:72:cc:29:8d:ae:08:02: 91:21:ae:78:2f:74:38:09:be:1d:a9:5a:d3:cb:68: ad:29:51:29:f1:0c:b8:c1:bd:f0:f8:28:2d:7d:8d: 2a:2c:3e:a7:17:7e:6d:b7:2a:2f:52:2b:12:e4:d1: b3:35:f8:af:d7:98:62:af:a2:f7:40:fe:f0:b3:d7: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BC:1F:E2:C4:3D:D5:17:69:C7:9E:B9:1C:D4:99:33:85:3A:98:74 X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:be:07:8b:17:79:8d:f7:43:4e:a4:bb:c1:8e:1e:48:ba:98: f0:23:78:4a:77:7a:66:76:b8:04:7d:68:06:b6:c1:94:a9:81: 53:ce:d1:d3:53:00:65:25:7e:da:2f:d5:45:8a:8a:b5:d2:f1: d1:dd:38:5a:5c:71:cd:5d:58:c7:3d:02:be:f6:67:9d:db:6f: 4a:b2:53:c9:1c:9a:17:8f:7a:b7:87:da:1e:13:d1:81:1e:bc: cb:88:80:ac:85:bb:b3:e5:79:83:c5:0d:e1:57:29:35:14:a0: 38:44:b0:60:f1:ce:32:e2:3e:62:db:39:31:61:36:80:c7:f9: fd:b6:91:88:87:ab:be:03:c5:36:97:5b:b7:ca:ae:8b:2d:5f: 94:04:11:10:17:b1:e2:ce:d8:20:00:13:38:0b:25:94:89:de: 84:4c:88:7b:4c:80:05:b8:f4:dd:f4:82:2b:f6:ae:2a:69:50: 00:50:a0:9f:ee:f7:93:53:f0:53:9c:68:f2:82:30:00:8c:4d: ac:2d:3a:e3:0b:68:ad:75:09:d9:bf:d1:02:f5:9b:5f:88:9c: 97:4c:33:49:c4:f6:b9:2e:01:01:9e:45:62:ff:a6:fd:a5:08: 56:d1:a0:f6:6a:ef:ad:8b:5b:62:ca:35:23:4c:a4:cf:25:09: 2e:d7:80:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjUxMjA0MjM1NzEyWhcNMjUxMjExMjM1NzEyWjAYMRYwFAYD VQQDEw02OTMyMWZkOS04NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy46zQXPNR3njJgCgZWqBbi8dJNNxGD0q8oIyESCB8DznopmCZIl/ol6d33qn LJAwh5jXdLNwPOSB1bW/Ahy98XcChWuyLAgjmvkADqs9fjuiPd/pswopjx7U3l4o 8lYv9nEJcM/cjByQ8POFMsyMhUVRXkE6i3h/VP9eoYsvD9TJfPGgInMQhO8bmONC CU1wmYLoJezKTISrqKbHWSl2i9sba/l3lt/JSOZ4DkSMbFi1WvABFelCfQPSaHLM KY2uCAKRIa54L3Q4Cb4dqVrTy2itKVEp8Qy4wb3w+CgtfY0qLD6nF35ttyovUisS 5NGzNfiv15hir6L3QP7ws9cdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIi8H+LE PdUXaceeuRzUmTOFOph0MB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/vgeLF3mN90NOpLvBjh5IupjwI3hKd3pmdrgEfWgGtsGUqYFTztHT UwBlJX7aL9VFioq10vHR3ThaXHHNXVjHPQK+9med229KslPJHJoXj3q3h9oeE9GB HrzLiICshbuz5XmDxQ3hVyk1FKA4RLBg8c4y4j5i2zkxYTaAx/n9tpGIh6u+A8U2 l1u3yq6LLV+UBBEQF7HiztggABM4CyWUid6ETIh7TIAFuPTd9IIr9q4qaVAAUKCf 7veTU/BTnGjygjAAjE2sLTrjC2itdQnZv9EC9ZtfiJyXTDNJxPa5LgEBnkVi/6b9 pQhW0aD2au+ti1tiyjUjTKTPJQku14Ch -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:25 2025 by rpki-client