This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: y2rHYY7NMsNNxTwJLZeZTuICLGaM+vW9SbuzGH1epek= Subject key identifier: 64:0B:9A:AF:DC:25:9D:4A:64:90:6F:B3:CC:48:CF:82:CE:EB:F0:73 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: A0 Signing time: Sun 21 Dec 2025 05:24:48 +0000 Manifest this update: Sun 21 Dec 2025 05:24:48 +0000 Manifest next update: Sun 28 Dec 2025 05:24:48 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: EXb9dkaGNqCgzxoja5qPZ9GzYQehStnV3lnSEDZqA9g=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: EzMoudDWuTdlnNruCHKgAEy3hjxWEtpDs8wnwjR1b6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Dec 21 05:24:48 2025 GMT Not After : Dec 28 05:24:48 2025 GMT Subject: CN=694784a0-02f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:1c:70:e9:03:61:58:20:60:d9:b8:e1:3d: 60:e4:ae:ad:04:84:99:2f:d4:bf:99:86:97:70:7d: db:a4:17:8b:19:59:49:a4:25:1b:81:65:07:dd:7b: 78:e3:97:ca:95:0c:ae:a8:ed:ee:0c:e3:d4:d6:6a: a7:dc:b9:b6:88:3e:21:40:93:d8:0a:b8:52:16:f7: 48:2d:fa:82:e6:c6:ea:3e:f2:13:4a:fb:24:95:3b: 5c:76:e4:f0:21:0b:30:ea:0c:47:6c:9b:48:74:a0: 2c:96:d0:f2:7e:c1:30:a6:72:3f:98:b8:92:11:5b: 5d:06:6e:9a:9f:67:69:dd:d8:75:b7:40:a4:8a:f5: 40:1e:20:30:4a:7e:9b:a5:4d:b2:6e:08:90:a8:81: e9:62:b2:fa:b5:ce:12:98:7a:18:20:c1:25:a6:77: 78:8b:41:08:7b:d1:08:d5:fd:5c:b9:df:a5:63:b2: f1:f1:83:d8:48:8a:2e:69:91:3e:6e:2c:96:22:5b: bb:33:42:3f:67:ed:6d:b3:b9:e6:ff:6a:fa:68:90: cc:b1:76:7c:4e:27:83:81:b1:06:13:b5:c3:10:74: 75:54:4d:da:48:29:95:af:1b:bf:15:fe:e0:0c:9e: 2f:20:fe:d0:12:0c:3f:6b:26:f2:5d:a0:0c:6d:4f: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0B:9A:AF:DC:25:9D:4A:64:90:6F:B3:CC:48:CF:82:CE:EB:F0:73 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:5b:08:47:c5:70:8a:5d:80:f8:b8:dd:00:8e:6b:07:b1:5b: 50:10:40:5c:bb:45:6c:a9:82:82:86:f4:f8:65:d3:e7:9b:02: b4:4b:ca:f9:1f:79:d0:9a:b7:51:8a:56:a7:4f:eb:cb:e9:18: fc:22:d4:38:e5:a8:49:9c:fe:c9:ff:f4:ad:78:5c:76:f0:c0: f7:68:56:d5:78:1b:d6:a3:14:f9:1a:73:54:02:06:43:f4:df: f6:d6:13:71:3c:27:7f:b6:f6:cf:59:07:69:aa:b3:c4:5d:32: 5a:7e:db:18:0e:86:b7:bb:de:96:e3:0e:3c:bd:43:43:41:4b: 38:d3:d1:43:e6:ed:66:a3:64:0a:36:97:9e:0f:e9:b1:74:06: 05:20:32:7e:fc:2e:dd:66:e1:a0:6a:14:7f:6b:27:d6:81:31: 92:65:c0:aa:e7:26:34:6e:dc:1c:c3:0a:a8:14:b2:26:05:ff: b0:b2:d9:d7:af:c7:e1:f4:bc:3c:d3:a0:f5:b5:2f:9d:d8:ca: 0a:95:60:a2:3c:9f:65:70:73:0d:bc:ab:82:84:b0:af:ea:75: 22:8b:12:1b:fb:f7:f0:27:27:00:f5:62:e7:fe:10:cf:04:dc: 06:df:58:62:1b:5d:be:02:06:27:00:2e:5a:fd:1f:21:2b:34: 82:07:95:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjUxMjIxMDUyNDQ4WhcNMjUxMjI4MDUyNDQ4WjAYMRYwFAYD VQQDDA02OTQ3ODRhMC0wMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYUccOkDYVggYNm44T1g5K6tBISZL9S/mYaXcH3bpBeLGVlJpCUbgWUH3Xt4 45fKlQyuqO3uDOPU1mqn3Lm2iD4hQJPYCrhSFvdILfqC5sbqPvITSvsklTtcduTw IQsw6gxHbJtIdKAsltDyfsEwpnI/mLiSEVtdBm6an2dp3dh1t0CkivVAHiAwSn6b pU2ybgiQqIHpYrL6tc4SmHoYIMElpnd4i0EIe9EI1f1cud+lY7Lx8YPYSIouaZE+ biyWIlu7M0I/Z+1ts7nm/2r6aJDMsXZ8TieDgbEGE7XDEHR1VE3aSCmVrxu/Ff7g DJ4vIP7QEgw/aybyXaAMbU8sBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQLmq/c JZ1KZJBvs8xIz4LO6/BzMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFWwhHxXCKXYD4uN0AjmsHsVtQEEBcu0VsqYKChvT4ZdPnmwK0S8r5 H3nQmrdRilanT+vL6Rj8ItQ45ahJnP7J//SteFx28MD3aFbVeBvWoxT5GnNUAgZD 9N/21hNxPCd/tvbPWQdpqrPEXTJaftsYDoa3u96W4w48vUNDQUs409FD5u1mo2QK NpeeD+mxdAYFIDJ+/C7dZuGgahR/ayfWgTGSZcCq5yY0btwcwwqoFLImBf+wstnX r8fh9Lw806D1tS+d2MoKlWCiPJ9lcHMNvKuChLCv6nUiixIb+/fwJycA9WLn/hDP BNwG31hiG12+AgYnAC5a/R8hKzSCB5W9 -----END CERTIFICATE-----Generated at Tue Dec 23 02:04:43 2025 by rpki-client