This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: z1GCk7hUsqMwOs0m9qh6DM9RARbUlQXQmvXpRiBJ4/Q= Subject key identifier: 12:59:BD:92:7B:55:28:3D:C1:B1:D3:CC:45:0A:99:D8:1E:1B:5B:D7 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1C3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1C39 Signing time: Mon 22 Dec 2025 15:59:11 +0000 Manifest this update: Mon 22 Dec 2025 15:59:11 +0000 Manifest next update: Mon 29 Dec 2025 15:59:11 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: 7onwi5zkqYWo47CpWtieHs4xGGnIm4oRcBBCK/UD7kc=) 2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: alPFbBRcOswykY6CDpgLiaSVoTM2OjUAdTBuklnb8AI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7226 (0x1c3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Dec 22 15:59:11 2025 GMT Not After : Dec 29 15:59:11 2025 GMT Subject: CN=69496acf-0585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:97:e7:b7:74:01:4f:0a:db:d7:79:dd:25: 1f:96:3c:46:92:6e:80:ed:8d:02:f9:4d:14:9f:f2: 90:a1:93:53:0b:ad:05:01:ce:8f:ba:81:fa:cc:da: b6:27:19:e2:8c:04:cf:94:c7:16:0e:93:fc:7a:7a: d4:2d:60:cc:d9:d4:41:6d:0e:50:41:0b:c7:c8:d7: b1:45:f1:cf:71:0a:c3:49:86:f1:29:00:76:6a:0e: 58:94:02:4b:ee:11:ac:c2:35:da:f6:83:ff:2c:b8: 75:f9:cb:25:9a:59:aa:85:aa:33:fb:05:86:a9:66: 38:2e:ee:e4:0b:fb:82:d7:e2:0b:e2:9d:e1:f0:52: fd:7a:14:b9:d4:0b:cc:de:72:35:26:9c:35:43:d1: e9:a3:50:7d:f4:51:66:e3:b0:8e:d2:f8:15:eb:4b: d5:af:28:ce:e3:e3:66:79:4a:df:93:77:e1:ae:d9: 18:4a:e0:4f:1a:06:92:5e:0a:00:0e:be:a5:56:18: 4b:87:32:c4:48:f0:9b:77:aa:20:28:62:64:6c:88: 76:2a:4e:90:f6:d8:6a:bb:77:e1:d5:28:96:fc:50: cb:1a:1a:1a:d0:d7:a6:99:62:d1:e3:4a:22:a8:36: 6f:78:68:0a:40:bc:43:c0:ef:8a:6e:63:77:e4:1a: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:59:BD:92:7B:55:28:3D:C1:B1:D3:CC:45:0A:99:D8:1E:1B:5B:D7 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:65:53:ef:02:b4:2f:50:53:81:03:63:52:f1:54:e6:b1:3d: 2e:91:2c:82:13:1f:7c:e4:3a:a2:05:ee:8f:ff:36:cd:74:8d: 91:c4:75:63:70:13:80:b3:18:35:70:4d:24:a2:a0:59:32:d2: a2:0a:ea:5a:87:ba:5b:39:1b:b2:d7:03:bb:8b:72:c2:1f:08: 34:8e:db:93:5c:41:12:62:c6:b9:0f:fc:9c:06:26:c2:03:d1: 7c:13:44:37:14:9c:06:1c:0f:92:90:f8:98:be:f0:d9:b1:a2: d9:49:b5:ba:34:65:82:7b:fe:a3:21:08:81:d5:f5:68:b1:21: 89:0c:e6:ad:4b:46:62:4d:bd:0b:78:45:bf:d7:4e:38:cc:40: 54:c9:42:62:b2:6c:d3:c5:e9:57:ae:7f:f4:cc:8e:9b:e6:eb: 66:af:e8:ff:15:fd:bd:b2:52:6c:93:a4:2e:a5:0e:92:4e:91: f9:28:b2:c7:e3:1b:88:64:69:03:c3:ec:bb:f4:c1:c2:cd:e6: 4d:1c:dd:68:48:cb:fb:5c:dd:8c:f9:e6:d2:7e:74:66:f7:2e: a7:98:79:19:e8:dd:95:47:e7:76:f8:63:b4:52:1b:5c:57:cc: 35:98:8b:e7:a2:20:ea:0a:88:05:cc:a5:66:11:d5:94:c1:55: 50:4b:8d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUxMjIyMTU1OTExWhcNMjUxMjI5MTU1OTExWjAYMRYwFAYD VQQDDA02OTQ5NmFjZi0wNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaKX57d0AU8K29d53SUfljxGkm6A7Y0C+U0Un/KQoZNTC60FAc6PuoH6zNq2 JxnijATPlMcWDpP8enrULWDM2dRBbQ5QQQvHyNexRfHPcQrDSYbxKQB2ag5YlAJL 7hGswjXa9oP/LLh1+cslmlmqhaoz+wWGqWY4Lu7kC/uC1+IL4p3h8FL9ehS51AvM 3nI1Jpw1Q9Hpo1B99FFm47CO0vgV60vVryjO4+NmeUrfk3fhrtkYSuBPGgaSXgoA Dr6lVhhLhzLESPCbd6ogKGJkbIh2Kk6Q9thqu3fh1SiW/FDLGhoa0NemmWLR40oi qDZveGgKQLxDwO+KbmN35BqbXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJZvZJ7 VSg9wbHTzEUKmdgeG1vXMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBZVPvArQvUFOBA2NS8VTmsT0ukSyCEx985DqiBe6P/zbNdI2RxHVj cBOAsxg1cE0koqBZMtKiCupah7pbORuy1wO7i3LCHwg0jtuTXEESYsa5D/ycBibC A9F8E0Q3FJwGHA+SkPiYvvDZsaLZSbW6NGWCe/6jIQiB1fVosSGJDOatS0ZiTb0L eEW/1044zEBUyUJismzTxelXrn/0zI6b5utmr+j/Ff29slJsk6QupQ6STpH5KLLH 4xuIZGkDw+y79MHCzeZNHN1oSMv7XN2M+ebSfnRm9y6nmHkZ6N2VR+d2+GO0Uhtc V8w1mIvnoiDqCogFzKVmEdWUwVVQS434 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:22 2025 by rpki-client