This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: PBXUHRJn3NouLG1OglThhap/Mh0qDalkedC+Euq+H8o= Subject key identifier: A7:A6:E6:6D:4F:8B:C9:A5:38:50:03:BB:05:F8:F0:31:2B:6C:52:24 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 081E Signing time: Sat 20 Dec 2025 20:24:00 +0000 Manifest this update: Sat 20 Dec 2025 20:24:00 +0000 Manifest next update: Sat 27 Dec 2025 20:24:00 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: PCnMnTBg3JSR54ptg1ptQ+KvOg4RJSbEIeRrSGW8YNU=) 2: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: U1bQn0cREbDCYE8np1FOgxq7ZLPbZTRmflBcUUu8DFM=) 3: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=) 4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Dec 20 20:24:00 2025 GMT Not After : Dec 27 20:24:00 2025 GMT Subject: CN=694705e0-3b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f6:3d:ba:9c:99:7c:25:01:9e:e6:77:80:cb: 58:7b:6d:42:5e:1d:1a:1d:59:f1:45:5a:9a:15:3f: 06:43:35:80:73:aa:99:ef:46:19:55:0e:49:31:03: ad:1d:ff:ee:a0:43:20:eb:95:82:38:d5:b8:24:f3: 79:08:07:73:c1:ee:3d:4b:19:53:b8:3f:31:c5:1a: d2:b9:b3:0d:f2:ac:b7:be:76:21:72:fa:43:b9:64: 9b:ab:60:b6:64:cd:b1:62:bd:97:8e:96:ec:29:c5: e8:58:65:18:eb:35:73:19:c8:58:10:a6:a3:07:4f: 4d:ee:95:50:9e:2c:0f:1e:e2:4f:bd:68:33:2a:f0: 16:2d:9c:95:0c:d3:71:f2:64:7e:05:a3:fe:42:e3: 84:94:53:a9:94:80:8d:c7:ab:31:fc:75:15:73:d9: 18:c8:12:6e:41:31:4b:62:cf:be:a9:87:2b:63:dc: 1f:e1:cc:09:fc:46:d5:52:e4:3a:f1:f5:ab:d8:a5: 28:0a:ea:1e:8a:54:2f:8b:3b:31:05:e7:b9:c1:f0: 15:85:5f:a4:02:e1:bb:99:07:fb:39:62:b0:6e:e5: 58:69:fe:0f:62:ce:63:fa:43:95:5c:1d:f7:77:27: 6f:3d:b0:36:34:19:0c:e9:2b:18:4d:1e:54:d2:40: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A6:E6:6D:4F:8B:C9:A5:38:50:03:BB:05:F8:F0:31:2B:6C:52:24 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e7:6b:45:f5:bc:b9:dd:72:e8:01:f5:c8:83:03:6b:85:af: 89:f3:57:54:f1:5f:d3:30:04:ba:e5:16:ae:54:52:5a:db:60: 70:12:d9:1e:10:c7:1a:4a:68:3f:a3:6c:fb:2b:1d:92:17:06: db:c9:ad:c3:bd:41:08:17:7e:3b:5c:14:c9:18:c0:45:42:06: ef:17:d1:ac:88:42:66:c4:78:3d:0e:1d:be:87:e2:22:31:c6: 14:4d:7e:e6:e1:a6:a0:f9:b7:a4:2c:1d:11:30:c9:0a:46:c3: 95:df:a0:83:83:f1:79:0b:46:02:8d:dd:4e:43:cb:38:07:fb: d1:96:ec:59:d8:f7:69:d6:89:b0:ed:0d:04:c7:a4:11:78:5b: a7:3b:18:62:23:cc:53:2e:cf:47:41:e0:c2:44:5f:07:11:d4: 2f:08:d2:dc:31:e1:9a:44:c6:ec:c3:af:bb:3f:e5:bf:00:06: 22:ab:91:f7:49:fc:cb:ee:aa:4a:53:10:66:87:aa:0d:f7:bc: bd:1d:90:1a:dc:74:67:cd:f9:f3:08:b4:94:e6:aa:98:d8:83: 63:51:d8:e8:92:57:d7:8b:2d:12:67:c4:49:d9:c2:dd:57:26: 22:19:40:f2:70:d0:76:37:4e:e6:0c:10:e5:4a:63:60:a3:de: ef:eb:51:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUxMjIwMjAyNDAwWhcNMjUxMjI3MjAyNDAwWjAYMRYwFAYD VQQDDA02OTQ3MDVlMC0zYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+fY9upyZfCUBnuZ3gMtYe21CXh0aHVnxRVqaFT8GQzWAc6qZ70YZVQ5JMQOt Hf/uoEMg65WCONW4JPN5CAdzwe49SxlTuD8xxRrSubMN8qy3vnYhcvpDuWSbq2C2 ZM2xYr2XjpbsKcXoWGUY6zVzGchYEKajB09N7pVQniwPHuJPvWgzKvAWLZyVDNNx 8mR+BaP+QuOElFOplICNx6sx/HUVc9kYyBJuQTFLYs++qYcrY9wf4cwJ/EbVUuQ6 8fWr2KUoCuoeilQvizsxBee5wfAVhV+kAuG7mQf7OWKwbuVYaf4PYs5j+kOVXB33 dydvPbA2NBkM6SsYTR5U0kAbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKem5m1P i8mlOFADuwX48DErbFIkMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm52tF9by53XLoAfXIgwNrha+J81dU8V/TMAS65RauVFJa22BwEtke EMcaSmg/o2z7Kx2SFwbbya3DvUEIF347XBTJGMBFQgbvF9GsiEJmxHg9Dh2+h+Ii McYUTX7m4aag+bekLB0RMMkKRsOV36CDg/F5C0YCjd1OQ8s4B/vRluxZ2Pdp1omw 7Q0Ex6QReFunOxhiI8xTLs9HQeDCRF8HEdQvCNLcMeGaRMbsw6+7P+W/AAYiq5H3 SfzL7qpKUxBmh6oN97y9HZAa3HRnzfnzCLSU5qqY2INjUdjoklfXiy0SZ8RJ2cLd VyYiGUDycNB2N07mDBDlSmNgo97v61EM -----END CERTIFICATE-----Generated at Mon Dec 22 05:31:07 2025 by rpki-client