This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: eu37FJCRyR6PC92rpnZ6+Q1GjfbC4ewS2kjQgzXGX9U= Subject key identifier: 6A:F1:27:09:9A:58:BC:2F:2B:72:74:23:67:13:95:C0:32:D7:C3:16 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 01D5 Signing time: Fri 05 Dec 2025 00:28:36 +0000 Manifest this update: Fri 05 Dec 2025 00:28:36 +0000 Manifest next update: Fri 12 Dec 2025 00:28:36 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: QQIKMTnpC4kXVQESGkUVdMFvNDtzoz3+wnckcZUWf90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Dec 5 00:28:36 2025 GMT Not After : Dec 12 00:28:36 2025 GMT Subject: CN=69322734-7048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:e3:ae:d8:e4:fc:e5:f2:1b:6c:f3:46:48: e6:3c:f5:c2:39:32:27:1b:31:bb:73:fb:bd:ed:c5: 9e:d4:d0:85:0b:8d:8b:a9:5c:3f:e3:a4:c9:7a:3d: cc:f2:c2:b9:5d:8e:ee:7b:25:93:84:0f:e4:65:73: d1:c2:68:84:5d:af:67:f6:a2:a5:f0:e4:e6:7e:cc: dc:76:05:ce:4d:f7:f2:fc:e7:b8:05:1c:e1:97:51: e6:2b:92:1a:ad:be:cd:9f:cd:dd:9d:69:0b:e4:20: 0b:ee:24:c4:a0:73:08:32:cd:d5:b3:3b:b2:ce:87: d7:20:bd:40:a3:1b:b3:20:77:da:a0:f9:e0:ac:4b: 23:d7:39:58:b3:93:0a:eb:9a:93:10:35:c2:5a:45: 02:9d:4b:08:57:82:44:eb:da:63:cf:7a:a4:cc:34: 37:3f:c6:a2:02:8a:1f:12:4f:32:33:a6:8c:a9:8f: 0e:6d:c5:e9:3f:df:9b:1d:09:bf:e2:5e:e3:b1:64: 3b:eb:d2:84:81:4f:19:01:3d:a1:d3:6b:ba:a4:32: b5:44:1d:26:e4:9d:e5:51:3e:c6:1e:05:bc:11:c0: 55:87:83:42:3e:3f:b3:5a:22:3f:2e:df:6c:3a:f0: 2b:d9:73:a1:d2:b8:54:bb:ea:98:ad:f0:f5:4c:c0: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F1:27:09:9A:58:BC:2F:2B:72:74:23:67:13:95:C0:32:D7:C3:16 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e2:67:b4:76:af:0a:07:e7:41:8c:d7:ba:08:19:12:25:d2: 2b:03:9b:fa:10:02:12:cc:a8:f4:d8:90:0e:6d:26:c4:f0:16: fb:b5:d5:e4:dd:ad:b3:b9:e2:78:4a:0d:5a:3b:86:36:d1:2c: 71:f1:1b:33:6a:40:0c:7c:5e:b4:b4:d1:bf:d5:5c:f4:d6:9f: 13:ff:89:6c:75:14:74:4b:1a:8c:72:58:ac:34:82:08:5e:f7: ed:78:5e:d9:08:59:dd:42:c7:56:48:91:bc:ef:5a:d4:2e:b0: 30:e4:0f:31:71:7a:c6:4b:3e:22:91:bb:13:0c:99:92:d4:42: 6c:a8:a3:f7:53:8e:1c:69:77:ba:4d:0d:a6:f2:83:18:58:7f: 22:f4:d0:ec:6a:86:e3:fd:b0:0c:4f:63:c4:e2:21:46:c6:8b: 74:ca:8b:84:91:ab:eb:c7:13:f7:19:e6:9f:58:44:ef:ed:02: d9:0b:3e:11:18:cb:80:b4:f7:d7:77:c1:76:67:4c:4b:45:1f: f0:c5:2f:cb:63:4b:fa:01:29:28:b6:b5:c2:3e:7c:6c:04:e2: 92:ca:67:26:b2:b9:ad:d6:a2:7b:ab:c6:58:8c:e2:32:dd:9d: 90:6d:83:f7:e1:7b:5a:53:63:2f:bb:48:75:2f:c8:27:e5:b6: 26:3e:35:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUxMjA1MDAyODM2WhcNMjUxMjEyMDAyODM2WjAYMRYwFAYD VQQDEw02OTMyMjczNC03MDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx77jrtjk/OXyG2zzRkjmPPXCOTInGzG7c/u97cWe1NCFC42LqVw/46TJej3M 8sK5XY7ueyWThA/kZXPRwmiEXa9n9qKl8OTmfszcdgXOTffy/Oe4BRzhl1HmK5Ia rb7Nn83dnWkL5CAL7iTEoHMIMs3VszuyzofXIL1AoxuzIHfaoPngrEsj1zlYs5MK 65qTEDXCWkUCnUsIV4JE69pjz3qkzDQ3P8aiAoofEk8yM6aMqY8ObcXpP9+bHQm/ 4l7jsWQ769KEgU8ZAT2h02u6pDK1RB0m5J3lUT7GHgW8EcBVh4NCPj+zWiI/Lt9s OvAr2XOh0rhUu+qYrfD1TMBjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrxJwma WLwvK3J0I2cTlcAy18MWMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX4me0dq8KB+dBjNe6CBkSJdIrA5v6EAISzKj02JAObSbE8Bb7tdXk 3a2zueJ4Sg1aO4Y20Sxx8RszakAMfF60tNG/1Vz01p8T/4lsdRR0SxqMclisNIII XvfteF7ZCFndQsdWSJG871rULrAw5A8xcXrGSz4ikbsTDJmS1EJsqKP3U44caXe6 TQ2m8oMYWH8i9NDsaobj/bAMT2PE4iFGxot0youEkavrxxP3GeafWETv7QLZCz4R GMuAtPfXd8F2Z0xLRR/wxS/LY0v6ASkotrXCPnxsBOKSymcmsrmt1qJ7q8ZYjOIy 3Z2QbYP34XtaU2Mvu0h1L8gn5bYmPjXg -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:19 2025 by rpki-client