This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: C3SO8FLtOl8wTeSbKjyiWoDRVAU/5Bb4UIjwVNOW8GM= Subject key identifier: D2:33:C1:C9:6E:42:B2:C9:D2:29:4E:0E:C0:18:AA:D3:7F:B5:40:72 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 01D8 Signing time: Tue 23 Dec 2025 01:50:48 +0000 Manifest this update: Tue 23 Dec 2025 01:50:47 +0000 Manifest next update: Tue 30 Dec 2025 01:50:47 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: g65KnCC/QOet20PPLVcArnnW+3aOEDFdW+Rjz/fJ17w=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: t+UtlSfQB7uB9LxMHNDwpYNTZSeeRrSKvGFeOr/lo+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Dec 23 01:50:47 2025 GMT Not After : Dec 30 01:50:47 2025 GMT Subject: CN=6949f578-271a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fe:4d:1f:51:82:26:5d:3f:95:e3:66:16:56: e5:1f:28:32:9e:67:dc:27:45:d6:25:6c:33:1e:d7: 6c:d3:c5:3e:5a:ba:ca:4e:98:04:76:af:18:5d:01: b6:bc:79:f7:49:d0:ae:b1:8e:cc:76:3f:a3:a0:b0: ff:e0:6e:8e:2f:2c:dc:b1:b0:d5:02:98:f7:e8:88: 41:8a:89:38:38:59:2b:06:ab:34:3c:02:53:d2:2e: e8:3c:0e:b6:76:3c:73:93:cf:cf:f1:ab:8a:e4:1b: a2:9b:1b:f8:e3:f9:7a:37:55:07:df:80:e0:a9:52: ab:1a:80:ff:1c:91:51:77:f6:9f:93:72:ee:f6:20: f6:2b:d8:04:0c:1f:d8:b3:62:10:50:f6:93:5a:29: 1d:bd:ce:a4:41:67:ca:34:d1:91:28:0e:50:49:22: 58:6a:57:45:52:5d:5b:01:eb:f6:82:ce:5e:12:15: 70:65:81:87:28:cd:78:6e:10:8e:f8:96:88:eb:57: a7:44:23:76:d4:42:0f:77:df:31:43:03:df:84:2a: 8d:af:ae:3c:dc:4c:d6:56:f7:5a:1b:aa:86:8a:25: 4c:76:8d:d9:db:53:9f:ff:4a:29:3f:66:76:66:1c: a1:47:64:0b:1b:3c:89:95:3b:8b:e7:bf:b7:4e:e6: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:C1:C9:6E:42:B2:C9:D2:29:4E:0E:C0:18:AA:D3:7F:B5:40:72 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7a:76:4e:96:44:36:85:23:dd:47:54:ab:ab:d6:73:a1:de: ed:be:68:74:49:ed:4a:97:19:b3:db:1c:96:eb:f8:33:59:1d: e2:56:8c:30:85:95:15:44:16:9d:6a:d0:96:fe:66:83:05:26: 4d:ac:a6:a4:61:b1:5b:f2:8e:30:74:b3:d8:ad:91:b6:43:4e: 85:91:c9:b6:08:fa:32:79:49:0e:e8:2f:55:68:a3:ba:5a:b6: c6:57:08:3f:ea:c2:17:dd:0d:a7:54:f5:d1:90:98:e8:85:f0: 9f:ec:22:78:1b:4d:0d:5c:09:22:a5:ee:2f:9e:3c:e1:2c:5f: 88:a2:d1:92:c1:2a:92:f6:ae:b6:3f:a2:ee:73:25:3d:37:de: ec:c1:1b:c4:4e:cd:1f:26:aa:3f:15:31:2c:4f:6a:df:8d:df: bb:50:32:32:36:d8:13:29:79:ae:b1:95:d4:f8:cf:40:ba:d4: c4:59:02:18:4a:bd:d4:03:55:ef:5e:61:f0:ab:58:b8:bd:80: 36:47:96:b5:92:a2:ca:ab:cf:bd:9d:d1:ce:a0:09:18:f0:80: 45:49:7d:ac:24:fc:42:ca:c4:f3:5a:eb:7b:a8:e1:47:17:bc: b8:48:b7:7a:00:3e:de:e7:85:37:e9:26:ae:83:1a:9c:6d:98: 76:6b:f4:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUxMjIzMDE1MDQ3WhcNMjUxMjMwMDE1MDQ3WjAYMRYwFAYD VQQDDA02OTQ5ZjU3OC0yNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6P5NH1GCJl0/leNmFlblHygynmfcJ0XWJWwzHtds08U+WrrKTpgEdq8YXQG2 vHn3SdCusY7Mdj+joLD/4G6OLyzcsbDVApj36IhBiok4OFkrBqs0PAJT0i7oPA62 djxzk8/P8auK5Buimxv44/l6N1UH34DgqVKrGoD/HJFRd/afk3Lu9iD2K9gEDB/Y s2IQUPaTWikdvc6kQWfKNNGRKA5QSSJYaldFUl1bAev2gs5eEhVwZYGHKM14bhCO +JaI61enRCN21EIPd98xQwPfhCqNr6483EzWVvdaG6qGiiVMdo3Z21Of/0opP2Z2 ZhyhR2QLGzyJlTuL57+3TuYczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIzwclu QrLJ0ilODsAYqtN/tUByMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8enZOlkQ2hSPdR1Srq9Zzod7tvmh0Se1Klxmz2xyW6/gzWR3iVoww hZUVRBadatCW/maDBSZNrKakYbFb8o4wdLPYrZG2Q06Fkcm2CPoyeUkO6C9VaKO6 WrbGVwg/6sIX3Q2nVPXRkJjohfCf7CJ4G00NXAkipe4vnjzhLF+IotGSwSqS9q62 P6LucyU9N97swRvETs0fJqo/FTEsT2rfjd+7UDIyNtgTKXmusZXU+M9AutTEWQIY Sr3UA1XvXmHwq1i4vYA2R5a1kqLKq8+9ndHOoAkY8IBFSX2sJPxCysTzWut7qOFH F7y4SLd6AD7e54U36SaugxqcbZh2a/RE -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:49 2025 by rpki-client