This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: qKB87AAO94EofxBpAbnohEKkbG/qojbOI1lcy33sBaI= Subject key identifier: 7D:C8:06:CD:ED:42:9D:80:10:35:85:35:1D:F0:03:45:36:90:4A:0D Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 045E Signing time: Thu 04 Dec 2025 22:39:20 +0000 Manifest this update: Thu 04 Dec 2025 22:39:19 +0000 Manifest next update: Thu 11 Dec 2025 22:39:19 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: hYGyaCSnKDx6NktXB+bpxvxKGBiMWzhenC5k0bH4YfA=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: QPIlgvNpdxz2M9+klBq+UYhVT3TOPqyM+K3bldlrxAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Dec 4 22:39:19 2025 GMT Not After : Dec 11 22:39:19 2025 GMT Subject: CN=69320d97-3dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:0e:7f:87:d9:1d:73:09:c7:ec:20:7f:c6: b6:bf:38:02:2e:7a:d9:c4:e5:79:52:29:4b:64:b7: bb:7e:3d:17:be:0b:02:98:d3:da:d7:1d:70:22:9e: 93:b3:14:6b:81:23:a2:20:95:5a:3f:0a:f1:ac:5b: de:df:76:70:13:14:d5:d6:05:3e:07:f8:ed:8e:a3: a9:59:12:19:47:e4:6b:5f:b7:df:77:37:19:d6:fd: 33:17:15:25:d8:29:92:3c:29:10:cb:c6:5f:9d:1d: 79:61:10:45:26:37:20:de:c1:f8:9b:85:01:e4:28: af:5c:db:a3:c2:29:b5:b4:70:48:2d:a4:71:4d:26: 01:7e:61:41:05:44:57:12:a8:b4:ec:33:90:2f:6d: 1b:4e:dc:94:d3:2d:4b:97:67:f3:1e:2f:fb:32:0b: 84:e3:95:80:db:23:fd:03:e5:f2:4c:be:6d:80:21: 63:37:5f:95:72:3c:4c:fa:8f:44:a9:b1:9a:e9:7e: e3:b4:bb:b6:45:6a:c5:e9:ed:35:65:b9:1c:ec:40: eb:d2:26:99:89:74:94:03:3d:f4:61:de:2a:03:fa: ee:cb:eb:10:50:d1:f7:58:38:bb:bf:fb:b0:70:2e: e9:36:f9:43:0a:3f:ff:d6:83:60:28:76:a4:aa:4e: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C8:06:CD:ED:42:9D:80:10:35:85:35:1D:F0:03:45:36:90:4A:0D X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:71:fc:89:99:fb:4a:37:f1:f4:d5:66:c0:81:61:b2:11:da: 46:a9:10:99:40:a1:e2:f8:19:53:2e:f3:aa:f9:5d:12:f3:35: f8:41:8f:57:15:b0:82:6d:64:bc:d0:4d:a1:ee:df:7c:1d:b6: 39:dd:46:be:9e:24:7a:24:fc:63:4e:97:09:05:1d:eb:f8:80: c3:a6:fd:c7:8a:24:d2:1e:95:b0:bd:51:60:7f:c8:ce:4c:05: 22:30:a8:5d:73:05:4e:d5:f6:65:17:b1:f9:f7:b6:b1:72:80: b9:f2:af:73:17:ba:9f:15:51:cf:d6:f5:f7:bb:7a:af:41:86: 1f:98:63:9c:b8:ba:bd:6a:1a:56:6f:4f:63:21:23:40:e7:86: 23:b9:f8:35:b6:27:fe:76:7e:86:ef:3c:d7:4e:b2:c6:97:30: e1:91:65:54:d0:2a:fa:92:c5:8b:fc:f3:ff:30:27:32:cc:cc: 79:7d:38:a3:88:c8:63:2c:d3:e7:0f:ac:7c:34:4f:0d:9a:13: 9a:3c:48:5a:60:61:8e:b3:07:1d:d8:48:ed:91:e7:c6:d4:f1: 40:37:96:e8:58:fb:86:f8:f3:22:12:6c:2c:53:98:5d:98:c9: 5b:a5:ed:7d:7b:6b:91:49:36:ee:25:90:26:45:ea:0c:16:d9: ef:dd:ab:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUxMjA0MjIzOTE5WhcNMjUxMjExMjIzOTE5WjAYMRYwFAYD VQQDEw02OTMyMGQ5Ny0zZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQwOf4fZHXMJx+wgf8a2vzgCLnrZxOV5UilLZLe7fj0XvgsCmNPa1x1wIp6T sxRrgSOiIJVaPwrxrFve33ZwExTV1gU+B/jtjqOpWRIZR+RrX7ffdzcZ1v0zFxUl 2CmSPCkQy8ZfnR15YRBFJjcg3sH4m4UB5CivXNujwim1tHBILaRxTSYBfmFBBURX Eqi07DOQL20bTtyU0y1Ll2fzHi/7MguE45WA2yP9A+XyTL5tgCFjN1+VcjxM+o9E qbGa6X7jtLu2RWrF6e01Zbkc7EDr0iaZiXSUAz30Yd4qA/ruy+sQUNH3WDi7v/uw cC7pNvlDCj//1oNgKHakqk4tfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3IBs3t Qp2AEDWFNR3wA0U2kEoNMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpcfyJmftKN/H01WbAgWGyEdpGqRCZQKHi+BlTLvOq+V0S8zX4QY9X FbCCbWS80E2h7t98HbY53Ua+niR6JPxjTpcJBR3r+IDDpv3HiiTSHpWwvVFgf8jO TAUiMKhdcwVO1fZlF7H597axcoC58q9zF7qfFVHP1vX3u3qvQYYfmGOcuLq9ahpW b09jISNA54Yjufg1tif+dn6G7zzXTrLGlzDhkWVU0Cr6ksWL/PP/MCcyzMx5fTij iMhjLNPnD6x8NE8NmhOaPEhaYGGOswcd2EjtkefG1PFAN5boWPuG+PMiEmwsU5hd mMlbpe19e2uRSTbuJZAmReoMFtnv3ath -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:13 2025 by rpki-client