This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: QeuujJ757leqA13kOrj4sXBBol3YQ3emNjmkcbVWmT0= Subject key identifier: 5C:49:A5:EA:0E:3D:B7:99:E4:F5:30:55:E2:A6:AE:9C:77:45:E9:99 Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 45 Signing time: Fri 05 Dec 2025 05:15:36 +0000 Manifest this update: Fri 05 Dec 2025 05:15:36 +0000 Manifest next update: Fri 12 Dec 2025 05:15:36 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: XNxujR5qTWI+BaLYYK5LwObtswcnHr+aQgzEK8PvMJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: Dec 5 05:15:36 2025 GMT Not After : Dec 12 05:15:36 2025 GMT Subject: CN=69326a78-cc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bf:db:be:4c:9f:33:8c:2d:24:6e:8a:19:f7: e1:b8:27:c6:c6:35:79:62:46:74:40:4a:ca:22:f4: 30:95:09:c9:b3:83:f9:ca:44:a1:75:fc:e1:69:81: 09:9c:99:d7:39:d8:b0:32:3f:f0:1e:a8:76:fe:5e: 00:dd:86:c4:c4:3f:a6:64:13:fb:31:b0:eb:5c:fe: 38:fd:c2:55:44:42:06:f7:e2:df:dd:db:b0:43:f8: 62:64:6f:27:9b:1d:4b:b7:15:91:05:4d:dd:30:e1: aa:a1:89:47:53:0a:24:e9:f4:19:6c:47:30:c9:51: 5c:c2:07:5f:25:b9:02:fd:57:99:f4:5a:75:9a:27: 9a:7f:3e:e7:21:40:ea:95:a2:92:94:4f:17:4d:cc: 18:eb:54:9d:97:0e:74:9e:75:85:a1:f2:08:b8:42: 7e:37:bc:c1:fe:31:b8:28:eb:89:7e:ee:d7:a1:54: 80:43:a5:8e:cc:2b:40:2c:62:06:fd:3c:65:df:84: 78:56:34:29:d4:94:09:18:67:a1:3c:36:69:4d:05: 2f:15:71:83:9a:44:61:d8:f4:f8:a9:80:40:02:3b: b7:c0:5e:1e:fe:41:28:e4:53:9e:e2:e8:79:b9:34: e0:89:81:6a:19:05:55:5e:6f:fa:71:78:49:78:a1: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:A5:EA:0E:3D:B7:99:E4:F5:30:55:E2:A6:AE:9C:77:45:E9:99 X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ab:78:0c:d5:ad:91:8a:a9:fb:41:b5:3a:ff:db:90:a3:9d: c6:53:76:4b:82:ef:12:6d:a7:50:83:17:8d:77:63:7c:aa:73: ce:8d:a0:b8:3a:85:1e:9e:5a:10:c7:f2:f2:81:b3:33:92:4b: b5:55:68:5b:05:c3:9c:04:e6:92:d5:5a:c4:f7:01:91:39:ab: c8:ac:4c:40:a1:85:d0:cf:a1:df:9d:9a:21:77:0c:92:d3:c1: 43:5f:9a:15:10:fc:0e:81:97:1d:5a:d9:af:27:f8:d6:47:4e: 19:57:0e:62:f5:02:9f:2e:c7:c0:1a:93:13:c3:54:86:84:f4: 60:4b:f9:79:e2:fe:7b:82:b2:7d:ff:1d:df:70:5e:5c:5a:7f: e9:9e:88:48:1b:5b:38:a4:94:bd:e9:5c:2a:37:06:d2:d7:1d: 81:8b:89:85:7b:47:ba:fc:ce:d5:79:48:ad:e1:e3:97:b3:26: ba:88:31:25:e5:94:cf:b3:cd:6f:2c:da:1a:dc:c4:cf:62:8c: d9:e0:9b:ab:59:ef:74:0b:c4:7b:fb:9d:65:e8:6f:05:13:25: 66:0e:ba:b8:f1:df:f6:f6:42:9a:62:cf:71:43:1b:a2:28:b5: e2:1f:9f:a4:3f:07:e4:db:09:bd:9a:bb:d5:ec:99:1d:d8:5a: f2:09:be:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx N0E4NkZDRTAeFw0yNTEyMDUwNTE1MzZaFw0yNTEyMTIwNTE1MzZaMBgxFjAUBgNV BAMTDTY5MzI2YTc4LWNjMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyv9u+TJ8zjC0kbooZ9+G4J8bGNXliRnRASsoi9DCVCcmzg/nKRKF1/OFpgQmc mdc52LAyP/AeqHb+XgDdhsTEP6ZkE/sxsOtc/jj9wlVEQgb34t/d27BD+GJkbyeb HUu3FZEFTd0w4aqhiUdTCiTp9BlsRzDJUVzCB18luQL9V5n0WnWaJ5p/PuchQOqV opKUTxdNzBjrVJ2XDnSedYWh8gi4Qn43vMH+Mbgo64l+7tehVIBDpY7MK0AsYgb9 PGXfhHhWNCnUlAkYZ6E8NmlNBS8VcYOaRGHY9PipgEACO7fAXh7+QSjkU57i6Hm5 NOCJgWoZBVVeb/pxeEl4oUAjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXEml6g49 t5nk9TBV4qaunHdF6ZkwHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1 RGlxX1RPT2JXNVJlb2I4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAareAzVrZGKqftBtTr/25CjncZTdkuC7xJtp1CDF413Y3yqc86NoLg6 hR6eWhDH8vKBszOSS7VVaFsFw5wE5pLVWsT3AZE5q8isTEChhdDPod+dmiF3DJLT wUNfmhUQ/A6Blx1a2a8n+NZHThlXDmL1Ap8ux8AakxPDVIaE9GBL+Xni/nuCsn3/ Hd9wXlxaf+meiEgbWziklL3pXCo3BtLXHYGLiYV7R7r8ztV5SK3h45ezJrqIMSXl lM+zzW8s2hrcxM9ijNngm6tZ73QLxHv7nWXobwUTJWYOurjx3/b2Qppiz3FDG6Io teIfn6Q/B+TbCb2au9XsmR3YWvIJvtI= -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:55 2025 by rpki-client