This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: Dbjm3v2juTmEKB1chBfqDdapqN5sMY7WKd5wtvVw+8o= Subject key identifier: 8A:8E:34:36:35:76:7C:57:50:ED:02:1A:76:CB:27:C4:E8:03:62:E4 Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0F42 Signing time: Sat 20 Dec 2025 17:17:30 +0000 Manifest this update: Sat 20 Dec 2025 17:17:29 +0000 Manifest next update: Sat 27 Dec 2025 17:17:29 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: 3AZoqW2WgNNEEgoPePf4A4kzfwnbQ4kDvbJ38Gdob5Q=) 2: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: 6UUZGVX+yz33BPFW9zj9LAK08O51N58DNxWBC06Z/8c=) 3: 085B4576C35711EC9F5ADC3DC4F9AE02.roa (hash: LJ768Cu3JxipfpTsVr1alEqz1iSEePAZhcCKQ/8p8EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3920 (0xf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Dec 20 17:17:29 2025 GMT Not After : Dec 27 17:17:29 2025 GMT Subject: CN=6946da2a-48b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:48:fb:ee:c0:c7:29:3b:2c:7e:fa:5b:29: f5:74:4d:c5:01:9a:8e:18:00:de:44:82:1c:17:d5: ea:df:11:c1:d3:24:87:56:27:ad:68:cd:8f:d6:c8: df:b2:9c:35:f7:ad:16:bb:9a:06:c9:fc:1e:18:ae: ec:90:a0:7b:f9:ef:90:96:c7:6d:7b:ec:07:8e:4d: d8:95:7f:f9:80:fe:4a:b3:f6:8d:c2:74:5c:d7:1e: 6d:51:37:21:94:5f:b7:f0:b1:01:e5:2a:08:cc:9c: a7:e1:15:b3:f4:97:58:93:cb:41:35:e6:90:9c:bf: 0c:be:bc:49:e3:75:70:18:05:ed:e8:67:fc:ec:fb: 9c:c3:01:ac:0b:6d:43:4b:96:b8:14:37:01:5d:d3: 0a:cd:53:21:a2:ac:45:96:f6:c4:c0:d8:90:51:3e: d0:40:32:b0:59:16:a5:5c:a7:2c:4d:6e:41:32:1f: 36:87:79:bd:85:85:3d:82:fc:b3:e4:bc:f9:61:b7: 07:36:77:da:b2:3c:c8:7f:4d:78:97:ef:cf:94:88: be:b2:5d:5d:01:3a:64:c1:ac:b6:d2:b0:6f:cb:9a: 29:f1:ce:7a:d8:52:7f:8d:ac:75:56:6c:97:8e:23: 87:ce:55:ad:34:b6:55:c5:0a:50:5e:49:4f:ff:3b: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:34:36:35:76:7C:57:50:ED:02:1A:76:CB:27:C4:E8:03:62:E4 X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c3:72:2e:15:4b:6a:58:c7:47:a7:da:ee:f1:db:f8:94:bc: de:88:bb:b3:0f:33:2c:69:3b:da:1b:07:ae:6c:9c:1e:be:25: c8:78:2d:66:0d:b2:c2:9d:31:50:47:63:b2:f7:09:73:45:ba: 38:39:53:21:d6:0f:50:aa:94:64:9c:79:38:04:6a:3e:11:1f: 75:52:75:80:1d:41:a5:7a:92:24:7f:14:54:b3:2e:ae:6d:28: ec:b8:42:d6:59:e4:97:e2:98:8b:2e:8b:72:65:d3:10:46:a3: 26:31:ce:24:ea:88:b9:31:01:2e:3b:9c:3f:62:1e:15:63:e2: 8e:9d:80:a0:c9:1f:7d:4c:84:f8:37:ad:0f:81:64:64:b2:1b: 4e:c4:8d:14:99:e7:43:80:98:76:96:e6:8f:b3:eb:b6:2f:91: fc:70:13:91:62:8d:46:c0:fa:d2:be:60:2b:c1:14:a9:e1:fe: 9c:e6:bd:d8:02:05:28:e7:fb:c6:ab:0c:f6:a1:83:71:e1:89: bd:e1:0b:6c:79:f1:61:0b:48:a6:35:76:95:ee:95:8d:d2:58: 29:10:1b:cc:4d:6d:b8:33:21:3f:90:73:ea:65:e6:63:c8:e6: 1d:4a:e1:33:3a:2c:79:fb:48:80:6e:8a:c5:db:1e:1c:5e:ba: d0:5f:83:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjUxMjIwMTcxNzI5WhcNMjUxMjI3MTcxNzI5WjAYMRYwFAYD VQQDDA02OTQ2ZGEyYS00OGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkD5I++7Axyk7LH76Wyn1dE3FAZqOGADeRIIcF9Xq3xHB0ySHVietaM2P1sjf spw1960Wu5oGyfweGK7skKB7+e+Qlsdte+wHjk3YlX/5gP5Ks/aNwnRc1x5tUTch lF+38LEB5SoIzJyn4RWz9JdYk8tBNeaQnL8MvrxJ43VwGAXt6Gf87PucwwGsC21D S5a4FDcBXdMKzVMhoqxFlvbEwNiQUT7QQDKwWRalXKcsTW5BMh82h3m9hYU9gvyz 5Lz5YbcHNnfasjzIf014l+/PlIi+sl1dATpkway20rBvy5op8c562FJ/jax1VmyX jiOHzlWtNLZVxQpQXklP/zv7+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqONDY1 dnxXUO0CGnbLJ8ToA2LkMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/w3IuFUtqWMdHp9ru8dv4lLzeiLuzDzMsaTvaGweubJweviXIeC1m DbLCnTFQR2Oy9wlzRbo4OVMh1g9QqpRknHk4BGo+ER91UnWAHUGlepIkfxRUsy6u bSjsuELWWeSX4piLLotyZdMQRqMmMc4k6oi5MQEuO5w/Yh4VY+KOnYCgyR99TIT4 N60PgWRkshtOxI0UmedDgJh2luaPs+u2L5H8cBORYo1GwPrSvmArwRSp4f6c5r3Y AgUo5/vGqwz2oYNx4Ym94QtsefFhC0imNXaV7pWN0lgpEBvMTW24MyE/kHPqZeZj yOYdSuEzOix5+0iAborF2x4cXrrQX4Ow -----END CERTIFICATE-----Generated at Sun Dec 21 01:34:55 2025 by rpki-client