This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft File: EU3kpq3-T6GGFcVHcV67T_WUbvY.mft (raw, json) Hash identifier: 8s709T+TLMwJZZTG/ndzam8Zuuvm/uKxdSHF+VSurkE= Subject key identifier: FD:3E:B0:A6:48:6A:0D:C3:E8:6B:30:05:93:C2:7D:3D:4C:28:1D:65 Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6 Certificate issuer: /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft Manifest number: 01B7 Signing time: Tue 23 Dec 2025 02:06:18 +0000 Manifest this update: Tue 23 Dec 2025 02:06:17 +0000 Manifest next update: Tue 30 Dec 2025 02:06:17 +0000 Files and hashes: 1: EU3kpq3-T6GGFcVHcV67T_WUbvY.crl (hash: Wo2zmgLUhVioAx1YAEX+khDXvCGIlEqAtSIo4HhpyNg=) 2: AA15C0AEE84311EE8683D32CC4F9AE02.roa (hash: gYHV3KOXPY5t1RxYeQj8LMR1j99M6/FvNYKxReKdcYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91530ED, serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6 Validity Not Before: Dec 23 02:06:17 2025 GMT Not After : Dec 30 02:06:17 2025 GMT Subject: CN=6949f91a-53ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:84:9a:87:a9:d1:85:6f:62:30:58:89:ad: 0e:af:cb:77:58:be:43:58:69:4f:a2:6e:79:86:47: d9:f5:a6:a2:0a:56:45:d9:72:a6:e8:f7:83:d3:d0: a2:c7:bb:d3:8a:5d:0b:a9:f0:d4:7e:fd:da:bf:63: 32:da:77:f2:62:a0:f2:5c:57:01:86:3b:c1:68:5b: 37:d2:52:a2:fd:e2:72:bd:3f:8a:10:33:0b:ae:d6: 44:30:d7:ea:4b:6d:a1:3d:d4:e2:e1:78:54:5d:2b: 56:7a:d5:6d:24:44:98:79:87:2d:26:24:66:c0:df: b6:18:10:e3:7a:c6:d8:67:15:28:7e:5e:63:6f:05: 24:f0:f1:28:e8:ee:cb:33:22:25:4d:51:10:e3:9a: c1:24:cc:30:97:d5:78:08:fd:07:48:26:65:e9:8e: 7a:dc:bb:87:28:bb:0e:9c:f8:95:10:90:ef:49:d6: 00:a7:5b:41:bc:77:02:fd:e4:2a:3e:77:79:7b:34: 08:3f:ee:55:f1:2b:b3:2b:d0:56:f9:bd:c3:36:1a: 9c:72:7a:a0:a6:33:1a:e6:cd:61:5d:1a:35:a8:af: c1:db:7c:9e:fb:6b:a0:38:e7:db:8c:95:ea:8c:3e: 46:fe:f2:a6:1f:a1:4c:21:fa:60:0d:0b:73:42:dd: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3E:B0:A6:48:6A:0D:C3:E8:6B:30:05:93:C2:7D:3D:4C:28:1D:65 X509v3 Authority Key Identifier: keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d8:1c:91:55:a7:31:88:2e:2a:d1:c4:2b:69:de:46:d0:48: 0c:f4:f5:7f:5b:9b:1d:ce:e1:4f:ec:2a:15:72:2c:4a:e2:37: bd:bd:6a:97:b6:0f:c4:52:14:bd:2a:4f:fc:81:d0:21:4e:f4: a4:2c:22:74:77:f6:ac:0b:05:52:c4:9c:39:be:c1:a0:5d:88: e3:24:a4:a8:40:37:66:3e:4b:58:f4:23:12:cf:f2:ae:c7:8f: f6:d4:f5:5f:38:22:ca:5c:80:70:8a:1b:8e:b4:ed:c4:ec:1e: 30:ad:3d:b0:68:0a:c6:3c:39:2f:32:fd:36:0b:3b:bf:1f:1f: d0:0d:80:cf:57:db:c7:c6:3e:ca:b7:67:f2:f9:42:44:e3:85: ea:61:3f:16:e7:4c:dd:5c:60:22:79:43:7f:b5:e8:5c:51:c8: 3a:67:3a:2d:be:fc:a8:69:b8:c6:d3:00:63:fd:04:38:f2:53: 37:85:d4:55:cf:3c:0e:dc:ef:97:23:47:a0:4a:7a:58:97:b9: 21:84:6b:db:b8:3f:57:10:a5:97:c6:0a:76:e8:bc:56:54:6f: 11:0a:d3:da:9a:81:b1:e8:7a:82:3a:92:0a:04:44:17:79:68: 22:d1:bd:77:c7:dd:28:33:49:59:58:48:73:a8:5f:4e:4a:d8: eb:94:fb:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwRUQxMTAvBgNVBAUTKDExNERFNEE2QURGRTRGQTE4NjE1QzU0NzcxNUVCQjRG RjU5NDZFRjYwHhcNMjUxMjIzMDIwNjE3WhcNMjUxMjMwMDIwNjE3WjAYMRYwFAYD VQQDDA02OTQ5ZjkxYS01M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpKEmoep0YVvYjBYia0Or8t3WL5DWGlPom55hkfZ9aaiClZF2XKm6PeD09Ci x7vTil0LqfDUfv3av2My2nfyYqDyXFcBhjvBaFs30lKi/eJyvT+KEDMLrtZEMNfq S22hPdTi4XhUXStWetVtJESYeYctJiRmwN+2GBDjesbYZxUofl5jbwUk8PEo6O7L MyIlTVEQ45rBJMwwl9V4CP0HSCZl6Y563LuHKLsOnPiVEJDvSdYAp1tBvHcC/eQq Pnd5ezQIP+5V8SuzK9BW+b3DNhqccnqgpjMa5s1hXRo1qK/B23ye+2ugOOfbjJXq jD5G/vKmH6FMIfpgDQtzQt0uSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0+sKZI ag3D6GswBZPCfT1MKB1lMB8GA1UdIwQYMBaAFBFN5Kat/k+hhhXFR3Feu0/1lG72 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzBFRC80RDhGODg0MjQw MEYxMUVFQjZCM0RCNEFDNEY5QUUwMi9FVTNrcHEzLVQ2R0dGY1ZIY1Y2N1RfV1Vi dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VVM2twcTMtVDZHR0ZjVkhjVjY3VF9XVWJ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzBFRC80RDhGODg0MjQwMEYxMUVFQjZCM0RCNEFDNEY5QUUwMi9FVTNrcHEzLVQ2 R0dGY1ZIY1Y2N1RfV1VidlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD2ByRVacxiC4q0cQrad5G0EgM9PV/W5sdzuFP7CoVcixK4je9vWqX tg/EUhS9Kk/8gdAhTvSkLCJ0d/asCwVSxJw5vsGgXYjjJKSoQDdmPktY9CMSz/Ku x4/21PVfOCLKXIBwihuOtO3E7B4wrT2waArGPDkvMv02Czu/Hx/QDYDPV9vHxj7K t2fy+UJE44XqYT8W50zdXGAieUN/tehcUcg6ZzotvvyoabjG0wBj/QQ48lM3hdRV zzwO3O+XI0egSnpYl7khhGvbuD9XEKWXxgp26LxWVG8RCtPamoGx6HqCOpIKBEQX eWgi0b13x90oM0lZWEhzqF9OStjrlPuM -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:20 2025 by rpki-client