This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: nf6SDPXI59ZEzAPGskUQhnCx0alOOrp34PEKAnHeljo= Subject key identifier: 2E:40:2A:47:2F:74:ED:B8:1C:81:52:58:5C:65:02:EB:E6:4D:1C:5D Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 060D Signing time: Thu 04 Dec 2025 22:50:56 +0000 Manifest this update: Thu 04 Dec 2025 22:50:55 +0000 Manifest next update: Thu 11 Dec 2025 22:50:55 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: KrSyrex5tFGg80C8C84SUzpvM3TD/qdOT7itpjxxo5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Dec 4 22:50:55 2025 GMT Not After : Dec 11 22:50:55 2025 GMT Subject: CN=69321050-8a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:51:18:b0:a1:e5:69:9e:68:47:df:b6:fc: 99:92:6d:d4:76:23:00:41:f8:cf:9d:55:d0:f3:52: 4d:44:16:31:3e:c7:6a:4e:4b:4c:1b:12:a7:b6:ab: fb:7f:b2:9b:a4:d6:80:7a:01:a4:6e:7a:67:9a:2a: 59:5c:f1:90:cb:25:2d:ab:55:a7:94:5c:5d:62:8b: f8:17:21:8a:ea:4d:48:7e:52:42:20:d0:5e:10:e6: 5d:82:ab:a9:d8:00:6b:18:b5:9f:e9:b8:d8:2e:70: be:3d:07:bd:e7:97:9a:6c:2d:a1:16:99:b1:2c:e8: be:4c:48:d4:a6:82:14:0d:f6:61:eb:76:ae:7b:28: 16:d0:85:cd:6d:f8:d7:1e:58:b3:66:1b:4c:40:c1: 64:4c:60:a6:3c:e0:4e:19:b1:3f:27:ba:a8:32:eb: e1:85:b7:8d:7d:2d:c5:df:33:a9:11:bd:94:d4:24: b2:55:d6:18:df:0a:02:85:e1:2a:83:82:3b:a0:e3: f7:87:38:f0:d4:8e:bb:e4:52:b9:f1:88:42:df:02: 2c:96:50:52:eb:0b:6b:67:ac:db:08:1a:8b:70:24: 87:2a:80:a5:a9:6a:79:5e:a7:be:5d:2b:80:80:9e: 24:ca:5a:b4:23:77:cf:51:c9:8e:5d:b4:e7:c0:23: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:2A:47:2F:74:ED:B8:1C:81:52:58:5C:65:02:EB:E6:4D:1C:5D X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:71:59:a1:30:5c:5b:b1:76:36:47:5c:f6:c6:5e:db:db:60: 8d:21:67:13:eb:0a:bb:5c:da:66:e6:14:d8:d3:54:8a:23:c9: ac:40:e5:f0:d6:b4:05:25:1d:b6:e0:b8:54:14:80:0d:5e:0d: 29:34:0f:00:bb:cd:a5:94:e7:4d:c9:21:51:81:02:6b:60:c1: 64:fa:27:62:53:13:fb:2d:d8:be:da:99:48:ef:2e:0a:61:2a: 6a:f0:1a:57:70:12:74:ad:55:39:2b:0c:25:44:80:6c:5f:7e: 76:c2:50:31:e8:62:b5:b7:f3:e8:9c:c6:25:3b:63:fd:00:1f: d8:58:f3:d0:81:25:5e:bf:3e:83:02:ae:43:a2:a9:9e:2f:88: 84:e0:41:ea:72:b4:c9:93:3d:2f:0f:13:df:5a:d7:77:71:32: 10:5b:f4:80:d7:e7:1d:35:5b:7d:c5:14:bd:90:9e:5c:a1:ee: 05:48:c8:34:9d:5f:ba:90:db:82:9f:dd:c5:5f:b9:82:dc:38: ae:fb:5f:46:fb:06:48:ff:00:88:bc:f7:c4:ef:df:c1:23:a2: d3:bf:be:79:17:2f:d1:79:f7:ef:c1:7c:8b:dc:b9:1e:30:3f: 01:3c:d9:00:fb:27:e1:f3:c4:93:d4:b8:d1:1c:b5:cb:c6:4d: 8d:5f:b7:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUxMjA0MjI1MDU1WhcNMjUxMjExMjI1MDU1WjAYMRYwFAYD VQQDEw02OTMyMTA1MC04YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eNRGLCh5WmeaEfftvyZkm3UdiMAQfjPnVXQ81JNRBYxPsdqTktMGxKntqv7 f7KbpNaAegGkbnpnmipZXPGQyyUtq1WnlFxdYov4FyGK6k1IflJCINBeEOZdgqup 2ABrGLWf6bjYLnC+PQe955eabC2hFpmxLOi+TEjUpoIUDfZh63aueygW0IXNbfjX HlizZhtMQMFkTGCmPOBOGbE/J7qoMuvhhbeNfS3F3zOpEb2U1CSyVdYY3woCheEq g4I7oOP3hzjw1I675FK58YhC3wIsllBS6wtrZ6zbCBqLcCSHKoClqWp5Xqe+XSuA gJ4kylq0I3fPUcmOXbTnwCO0KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5AKkcv dO24HIFSWFxlAuvmTRxdMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYcVmhMFxbsXY2R1z2xl7b22CNIWcT6wq7XNpm5hTY01SKI8msQOXw 1rQFJR224LhUFIANXg0pNA8Au82llOdNySFRgQJrYMFk+idiUxP7Ldi+2plI7y4K YSpq8BpXcBJ0rVU5KwwlRIBsX352wlAx6GK1t/PonMYlO2P9AB/YWPPQgSVevz6D Aq5DoqmeL4iE4EHqcrTJkz0vDxPfWtd3cTIQW/SA1+cdNVt9xRS9kJ5coe4FSMg0 nV+6kNuCn93FX7mC3Diu+19G+wZI/wCIvPfE79/BI6LTv755Fy/ReffvwXyL3Lke MD8BPNkA+yfh88ST1LjRHLXLxk2NX7fB -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:13 2025 by rpki-client