This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: XMlxOK+oom8vBg7B3pbaAVrByktqHCJVjsbdJsWs+/g= Subject key identifier: 75:92:0E:3C:67:C9:13:A0:5F:5D:27:DE:79:BD:66:2D:EF:75:5E:04 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1578 Signing time: Mon 22 Dec 2025 16:30:38 +0000 Manifest this update: Mon 22 Dec 2025 16:30:38 +0000 Manifest next update: Mon 29 Dec 2025 16:30:38 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: sU/i9KmPz9jcWV25gwKUnn5jK9Huih7FbEVavYoMbjw=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5504 (0x1580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Dec 22 16:30:38 2025 GMT Not After : Dec 29 16:30:38 2025 GMT Subject: CN=6949722e-fac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:83:30:11:e3:2e:4d:24:6d:cf:bc:58:11: 0f:2f:ad:fc:e3:05:aa:e1:6c:f1:52:7c:6f:5d:32: 33:65:79:42:26:e9:e1:44:b2:e3:97:5f:b7:26:64: 10:05:82:0c:c2:c5:79:c9:7b:9a:67:ae:20:c7:ba: eb:4e:0b:db:2a:04:89:d7:1d:23:bf:06:19:c3:44: a8:b5:b5:ab:77:6d:ea:12:b4:dc:c8:33:d0:b5:68: 16:1a:4d:fe:32:c2:24:cd:68:4a:4d:33:f9:29:14: 7a:d8:2f:7d:39:73:bc:5f:9b:85:fd:a2:5e:3c:b3: f9:67:8c:77:93:0a:9f:4d:83:59:0b:3f:61:45:6b: bf:f5:ea:8b:dd:ec:2c:9b:76:1f:bf:3d:b8:2b:f3: fe:20:34:72:83:fd:af:60:ad:ca:83:77:78:f1:38: 8d:8a:7a:cf:77:fb:58:61:53:d7:9e:58:bd:66:4d: 50:71:1e:f5:ea:b5:47:a8:df:c9:90:9c:6f:f0:e8: 21:50:df:b3:b0:7f:22:7b:f4:06:fd:6d:39:d3:54: 94:54:bd:69:6e:90:ac:d1:3e:31:3a:a2:ef:df:d1: 23:41:8f:ad:f3:e1:1d:f4:62:dc:e6:cb:3c:7f:70: d4:89:2a:f5:1a:d4:6e:f5:ef:ca:62:15:2a:af:a4: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:92:0E:3C:67:C9:13:A0:5F:5D:27:DE:79:BD:66:2D:EF:75:5E:04 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ed:4e:2b:07:4d:ab:47:cb:7d:91:93:b6:d8:00:83:9e:ee: 04:5b:7e:ce:24:3b:34:69:59:6f:c7:a9:ac:55:2c:e4:05:95: cb:93:2a:01:b4:fa:85:9c:ca:1a:0c:6d:0d:67:1a:13:87:82: e8:d3:7a:59:32:6e:df:24:ff:b7:26:b6:a6:06:94:29:d4:7b: e5:aa:78:24:31:50:41:c7:d7:91:e2:39:d2:2e:e2:bb:99:8c: 73:a4:da:96:7f:b2:5e:66:34:d4:76:23:32:b3:cd:bb:d4:b9: 97:ad:c2:1c:20:18:7d:7d:a8:58:4e:4f:b1:58:fc:1e:06:f3: c7:a7:1c:9c:c1:c0:92:0a:cc:e4:b5:d9:f7:d4:f3:b7:1c:e5: 0e:44:36:3e:7d:66:af:98:68:b0:1b:8f:af:98:88:23:10:a1: 55:0e:da:52:e3:64:fc:4e:fa:16:ea:f8:33:e1:27:89:87:a5: ae:d7:41:ab:ec:b8:28:3d:cd:d7:ed:b4:93:ed:db:f8:92:3c: 4c:44:5a:33:08:95:9e:08:ec:d3:3f:6e:a7:94:aa:b7:13:80: 11:ed:68:b0:27:89:4f:82:25:7f:b2:bc:74:58:44:74:41:02: b9:34:79:2f:e8:63:63:4a:1d:28:31:b8:4a:26:58:ea:16:eb: 0b:28:56:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUxMjIyMTYzMDM4WhcNMjUxMjI5MTYzMDM4WjAYMRYwFAYD VQQDDA02OTQ5NzIyZS1mYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvyDMBHjLk0kbc+8WBEPL6384wWq4WzxUnxvXTIzZXlCJunhRLLjl1+3JmQQ BYIMwsV5yXuaZ64gx7rrTgvbKgSJ1x0jvwYZw0SotbWrd23qErTcyDPQtWgWGk3+ MsIkzWhKTTP5KRR62C99OXO8X5uF/aJePLP5Z4x3kwqfTYNZCz9hRWu/9eqL3ews m3Yfvz24K/P+IDRyg/2vYK3Kg3d48TiNinrPd/tYYVPXnli9Zk1QcR716rVHqN/J kJxv8OghUN+zsH8ie/QG/W0501SUVL1pbpCs0T4xOqLv39EjQY+t8+Ed9GLc5ss8 f3DUiSr1GtRu9e/KYhUqr6SYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWSDjxn yROgX10n3nm9Zi3vdV4EMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA67U4rB02rR8t9kZO22ACDnu4EW37OJDs0aVlvx6msVSzkBZXLkyoB tPqFnMoaDG0NZxoTh4Lo03pZMm7fJP+3JramBpQp1HvlqngkMVBBx9eR4jnSLuK7 mYxzpNqWf7JeZjTUdiMys8271LmXrcIcIBh9fahYTk+xWPweBvPHpxycwcCSCszk tdn31PO3HOUORDY+fWavmGiwG4+vmIgjEKFVDtpS42T8TvoW6vgz4SeJh6Wu10Gr 7LgoPc3X7bST7dv4kjxMRFozCJWeCOzTP26nlKq3E4AR7WiwJ4lPgiV/srx0WER0 QQK5NHkv6GNjSh0oMbhKJljqFusLKFaM -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:32 2025 by rpki-client