This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: gmkj89xmLqdt5F7w+nzsa2WrYcjFSejEpBwqnc37xYs= Subject key identifier: 21:1A:F6:15:BA:AE:09:8B:4B:94:C0:4C:D6:C6:43:1A:B6:EC:4B:FB Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: F0 Signing time: Fri 05 Dec 2025 03:22:05 +0000 Manifest this update: Fri 05 Dec 2025 03:22:04 +0000 Manifest next update: Fri 12 Dec 2025 03:22:04 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: uk2HPAAT9KRwHAYbRyPIaxzYqa056lKqlA/0XC+iYLY=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Dec 5 03:22:04 2025 GMT Not After : Dec 12 03:22:04 2025 GMT Subject: CN=69324fdd-0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:33:8d:f9:ed:66:fc:d1:39:e5:98:75:16: f8:05:83:06:de:01:0b:de:36:15:21:29:24:a2:65: 60:1b:34:ff:f7:0f:68:2b:ed:b0:71:4b:6a:f8:5c: 79:dc:3e:95:07:a7:34:ed:f1:2d:c9:14:6d:fd:85: 11:8f:5a:ce:e2:65:ab:84:8f:d6:c1:b2:ed:d6:5e: 90:9a:30:f4:77:1f:91:27:7d:4a:73:3c:50:cc:93: 27:f0:0d:e8:7f:54:20:c7:72:cd:05:7d:9c:0b:ce: 58:84:69:23:09:d7:b9:3d:a4:11:7f:bf:67:c3:cb: 57:8b:ca:f5:94:8a:db:57:6b:f5:5c:13:1b:46:e2: 55:31:f4:71:7d:c4:c4:0e:95:f7:3c:ec:0a:cf:5c: 76:30:5a:14:4f:51:db:bc:cd:b1:e9:a6:7f:5e:7f: b0:2a:24:28:aa:1e:ca:ec:7e:02:ac:d0:da:57:ba: d4:c1:1b:21:7d:50:cf:81:c3:bc:d4:ea:7e:70:93: 5f:e3:de:b5:08:75:4b:6f:eb:d0:df:f3:73:f7:96: d8:09:f6:78:e0:de:e4:0f:23:3f:e6:87:b0:29:11: 6a:eb:ce:1e:b9:1f:8a:89:18:0a:f8:91:bc:3e:a4: ef:fa:d7:f2:36:39:a7:56:bd:72:01:0b:30:39:78: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1A:F6:15:BA:AE:09:8B:4B:94:C0:4C:D6:C6:43:1A:B6:EC:4B:FB X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c5:79:71:47:c9:56:40:e2:0d:92:7c:e5:b2:19:46:c5:bf: de:9a:cc:08:40:2f:36:20:3a:7b:01:f4:f9:ad:cf:ef:77:b0: 08:ef:32:b8:8f:97:80:6c:21:e8:35:6e:8c:61:e2:0a:f5:cb: 38:30:e7:7e:5a:39:fb:20:5a:29:98:37:dc:ba:41:9b:52:27: da:93:56:88:c5:64:c9:32:fc:f3:6a:56:c9:0e:2e:47:63:4a: 92:03:23:bd:8a:d2:a6:ba:32:de:92:6e:4f:a9:fb:3f:a8:28: 91:43:ca:1e:c3:83:a4:01:a5:db:3a:64:82:cc:21:60:6c:ee: 09:99:12:e1:92:e3:4c:5d:2d:30:16:e0:ab:50:1c:e2:c0:32: ab:48:3f:da:d3:1d:02:2b:98:9b:da:a4:1d:8a:80:06:df:04: f7:23:c4:04:48:29:95:4d:af:7b:73:6d:26:b6:8c:23:0c:37: 82:02:04:58:51:03:4d:57:69:cd:e4:4c:5b:9a:b9:a6:91:7d: 11:1b:06:84:59:66:72:df:e5:88:49:7d:14:8c:6b:31:4d:14: 93:33:73:a5:f3:f5:e5:ab:00:ed:13:1e:f0:b0:7e:d0:e8:f4: 0a:65:3a:d5:83:c0:2f:f9:d5:fc:f9:b7:a3:98:34:36:93:eb: 06:fc:20:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjUxMjA1MDMyMjA0WhcNMjUxMjEyMDMyMjA0WjAYMRYwFAYD VQQDEw02OTMyNGZkZC0wNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1IzjfntZvzROeWYdRb4BYMG3gEL3jYVISkkomVgGzT/9w9oK+2wcUtq+Fx5 3D6VB6c07fEtyRRt/YURj1rO4mWrhI/WwbLt1l6QmjD0dx+RJ31KczxQzJMn8A3o f1Qgx3LNBX2cC85YhGkjCde5PaQRf79nw8tXi8r1lIrbV2v1XBMbRuJVMfRxfcTE DpX3POwKz1x2MFoUT1HbvM2x6aZ/Xn+wKiQoqh7K7H4CrNDaV7rUwRshfVDPgcO8 1Op+cJNf4961CHVLb+vQ3/Nz95bYCfZ44N7kDyM/5oewKRFq684euR+KiRgK+JG8 PqTv+tfyNjmnVr1yAQswOXhHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEa9hW6 rgmLS5TATNbGQxq27Ev7MB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIxXlxR8lWQOINknzlshlGxb/emswIQC82IDp7AfT5rc/vd7AI7zK4 j5eAbCHoNW6MYeIK9cs4MOd+Wjn7IFopmDfcukGbUifak1aIxWTJMvzzalbJDi5H Y0qSAyO9itKmujLekm5Pqfs/qCiRQ8oew4OkAaXbOmSCzCFgbO4JmRLhkuNMXS0w FuCrUBziwDKrSD/a0x0CK5ib2qQdioAG3wT3I8QESCmVTa97c20mtowjDDeCAgRY UQNNV2nN5ExbmrmmkX0RGwaEWWZy3+WISX0UjGsxTRSTM3Ol8/XlqwDtEx7wsH7Q 6PQKZTrVg8Av+dX8+bejmDQ2k+sG/CDV -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:20 2025 by rpki-client