This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: Wu68xfMVvzmBASGhjgFea9uQBe+SzaILZZcyJaEVy/w= Subject key identifier: 75:B9:95:B4:34:D6:74:F7:4D:2E:B4:9E:3E:31:5D:C9:E3:B2:A7:EE Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 015E Signing time: Fri 05 Dec 2025 02:15:20 +0000 Manifest this update: Fri 05 Dec 2025 02:15:19 +0000 Manifest next update: Fri 12 Dec 2025 02:15:19 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: mcHLwxct7mO9hLSa8u9eTQBV/PbQoySWeq1RSdjgCqg=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Dec 5 02:15:19 2025 GMT Not After : Dec 12 02:15:19 2025 GMT Subject: CN=69324038-92f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:8e:b0:ba:9d:fd:d0:8f:e2:36:e9:c4:de: 9f:d5:1f:76:7f:ae:04:c1:0b:9f:d1:86:23:9e:2d: ed:a3:31:87:d9:2e:44:00:39:9e:60:48:8d:cd:d5: 83:cf:d2:02:df:53:95:aa:db:84:73:7d:6b:e3:53: 4c:30:f6:f1:fa:ac:f0:05:58:cd:2c:2f:01:9c:7f: bc:92:b7:5d:ad:35:72:e8:ae:7c:f7:41:b6:54:ef: 23:3c:dc:c4:08:30:98:22:9e:2a:6b:66:17:db:e5: 58:28:4d:d9:5a:b1:73:4f:1b:2c:1f:06:28:b0:b7: e3:28:31:ac:aa:ea:04:e0:7c:ac:f8:49:24:5a:3f: 8e:99:01:52:4b:80:dc:2d:04:a6:34:b9:e9:99:70: 36:1c:88:c7:17:b0:53:61:fb:f5:00:6f:1e:0d:ee: a5:bf:46:ba:00:3e:eb:d2:d9:84:10:83:09:91:ec: 2f:7d:3b:7b:b7:13:d1:9a:4b:78:9f:db:4b:1e:1b: 36:76:f9:20:67:04:9d:ff:96:03:28:58:21:23:31: 1e:e5:9e:91:c7:33:36:fc:2a:9c:96:64:91:41:89: 91:b7:a5:27:b6:55:8e:7f:e3:35:cd:01:1e:9d:9f: d6:d5:d6:45:1c:29:85:a2:c0:4e:53:75:88:20:36: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B9:95:B4:34:D6:74:F7:4D:2E:B4:9E:3E:31:5D:C9:E3:B2:A7:EE X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:38:70:5a:87:e1:28:10:31:21:b4:f9:bf:3b:3c:c3:bc:4b: c0:b4:4b:ec:6d:aa:53:9b:2e:c0:26:26:ff:ad:e0:21:4c:c6: 4b:f7:14:e9:6e:96:d8:59:35:63:2c:28:44:5b:e8:72:73:a6: 07:fe:bb:6c:33:be:9c:9d:c2:3f:1c:8c:88:3c:77:e6:42:b6: 8f:01:2e:d4:f3:ae:6a:8d:5d:c7:39:8c:49:ca:8c:f9:5b:f5: 6b:55:fa:02:5e:b9:43:e4:c1:a4:bb:15:41:bc:02:c4:17:a2: 26:3b:cd:4a:49:54:6c:57:c1:12:b3:4e:3b:53:cc:6b:a0:88: bb:69:55:fe:b1:40:eb:9a:57:9c:69:98:21:33:9a:17:d8:44: 41:e8:32:5a:da:86:6d:0c:ca:30:02:cd:0e:fc:30:7c:9c:7f: df:17:08:6e:8c:19:af:9d:b8:b5:c2:b4:ec:17:a6:4e:a3:72: c9:f1:77:d6:32:f2:02:79:a7:45:c1:97:75:ad:80:1c:fe:25: 5a:77:2e:bd:e4:28:5b:ea:80:c8:c2:33:2b:7a:fc:f0:55:0c: 8b:71:b0:01:c4:6a:ca:7f:a2:be:24:eb:e6:de:7a:eb:24:d7: d7:ed:8d:1f:ae:77:22:41:08:fa:4d:49:4d:64:55:97:8a:73: 58:eb:40:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUxMjA1MDIxNTE5WhcNMjUxMjEyMDIxNTE5WjAYMRYwFAYD VQQDEw02OTMyNDAzOC05MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgSOsLqd/dCP4jbpxN6f1R92f64EwQuf0YYjni3tozGH2S5EADmeYEiNzdWD z9IC31OVqtuEc31r41NMMPbx+qzwBVjNLC8BnH+8krddrTVy6K5890G2VO8jPNzE CDCYIp4qa2YX2+VYKE3ZWrFzTxssHwYosLfjKDGsquoE4Hys+EkkWj+OmQFSS4Dc LQSmNLnpmXA2HIjHF7BTYfv1AG8eDe6lv0a6AD7r0tmEEIMJkewvfTt7txPRmkt4 n9tLHhs2dvkgZwSd/5YDKFghIzEe5Z6RxzM2/CqclmSRQYmRt6UntlWOf+M1zQEe nZ/W1dZFHCmFosBOU3WIIDZrfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW5lbQ0 1nT3TS60nj4xXcnjsqfuMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/OHBah+EoEDEhtPm/OzzDvEvAtEvsbapTmy7AJib/reAhTMZL9xTp bpbYWTVjLChEW+hyc6YH/rtsM76cncI/HIyIPHfmQraPAS7U865qjV3HOYxJyoz5 W/VrVfoCXrlD5MGkuxVBvALEF6ImO81KSVRsV8ESs047U8xroIi7aVX+sUDrmlec aZghM5oX2ERB6DJa2oZtDMowAs0O/DB8nH/fFwhujBmvnbi1wrTsF6ZOo3LJ8XfW MvICeadFwZd1rYAc/iVady695Chb6oDIwjMrevzwVQyLcbABxGrKf6K+JOvm3nrr JNfX7Y0frnciQQj6TUlNZFWXinNY60Dn -----END CERTIFICATE-----Generated at Sat Dec 6 15:16:59 2025 by rpki-client