This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: cfIMQEJ6wRnqlQI97OkVwq+t92c1yZrkQAkYhTPGb1k= Subject key identifier: CE:E1:64:1A:15:18:EC:69:79:63:F1:E4:17:4C:29:C6:50:B2:DE:A4 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 01D6 Signing time: Tue 23 Dec 2025 01:50:54 +0000 Manifest this update: Tue 23 Dec 2025 01:50:54 +0000 Manifest next update: Tue 30 Dec 2025 01:50:54 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: Q2T+TaG+ceHYCuT+tuBVFa1tP0x0+EqWj2BXEKuiwP0=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: sHy0AwVAJBGq/EKm3rJjAjZHwe3udG3yQF07jGTCj2A=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 1AbjCtqD4u+7KGjGOPMS77dj4rUPYp5rnx5ZMf73E1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Dec 23 01:50:54 2025 GMT Not After : Dec 30 01:50:54 2025 GMT Subject: CN=6949f57e-2503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:f8:fd:6d:d4:b5:e6:e6:c0:9c:d7:5a:0b: cc:f3:3d:19:62:dc:fb:9a:28:d1:b4:bb:a5:c2:53: 0c:86:be:80:17:56:c7:59:6d:44:ca:3e:fd:97:78: d3:77:a0:36:35:de:54:23:e2:d1:02:99:f2:54:d9: 5d:92:9f:2d:6d:95:d7:33:ad:19:36:b7:f9:89:e3: d0:7d:d0:19:42:24:a3:e0:28:3c:fb:cf:67:91:f3: 15:41:17:08:bc:f0:c4:b3:cb:39:db:c0:27:0f:6e: 3e:9c:40:64:14:5a:aa:ef:85:d3:37:6a:07:60:2c: d5:c9:a5:ec:27:a6:2e:08:01:42:68:e8:b1:e8:09: 28:24:05:15:2f:10:61:28:c0:d0:d0:90:e1:2e:35: 25:b0:65:f2:37:c3:a6:7a:d1:4e:67:50:6d:2a:ad: ff:0d:66:6b:74:fd:48:bd:b2:51:13:b0:d4:5d:bb: c6:50:43:e6:76:e4:73:6c:19:eb:cd:1d:ff:72:1e: 9f:22:89:07:35:78:68:72:d6:54:81:2f:a5:47:61: e3:ba:b3:f8:05:a4:2d:62:c3:d9:f8:32:90:3a:84: 56:be:ba:00:67:8f:3a:c5:0f:71:4a:a0:57:9b:63: f4:f6:3d:cd:34:b6:4b:05:66:d5:68:13:a5:47:44: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E1:64:1A:15:18:EC:69:79:63:F1:E4:17:4C:29:C6:50:B2:DE:A4 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:58:6a:d7:8d:b0:a6:34:59:04:99:bd:c9:de:f7:c2:ce:b6: 38:d1:03:1f:5e:49:48:13:a1:21:ff:f4:c5:9b:5c:f0:24:9a: 8c:ef:55:42:d4:02:1b:27:2f:cd:82:e2:c9:25:f8:df:53:9f: 42:fe:74:5a:3c:70:8e:8f:bd:ba:95:0e:53:74:bb:45:46:e8: 85:e1:f8:31:52:1e:d6:66:3e:c8:2b:95:8b:b0:61:a4:72:b3: 55:80:96:be:54:e9:f0:b4:c8:e0:36:b4:dc:19:5c:c7:56:52: fd:4e:7f:b9:38:b7:e6:cb:6d:3a:df:3f:be:a2:ef:91:c7:b6: 9c:7d:6b:c2:ba:28:a9:54:9c:42:f0:04:7a:57:96:79:e3:1a: 2e:78:5b:76:e8:73:07:9e:de:0b:79:cd:1c:90:7b:cc:2d:39: cc:e7:b3:19:24:48:f1:6e:7c:b9:16:c1:eb:8d:63:05:1f:06: 80:8f:b9:55:03:f8:64:53:e9:ce:5e:96:fa:fd:6b:cb:24:ae: e8:24:a0:89:92:7b:f1:86:cc:44:12:41:d7:dd:04:6d:b3:80: 01:a8:ab:32:9b:66:e0:07:d4:8d:86:40:cc:e2:ca:53:17:82: 3e:86:96:07:3c:86:f9:58:fb:21:6a:81:14:a3:d9:1e:91:a8: 66:fd:f7:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUxMjIzMDE1MDU0WhcNMjUxMjMwMDE1MDU0WjAYMRYwFAYD VQQDDA02OTQ5ZjU3ZS0yNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD/4/W3UtebmwJzXWgvM8z0ZYtz7mijRtLulwlMMhr6AF1bHWW1Eyj79l3jT d6A2Nd5UI+LRApnyVNldkp8tbZXXM60ZNrf5iePQfdAZQiSj4Cg8+89nkfMVQRcI vPDEs8s528AnD24+nEBkFFqq74XTN2oHYCzVyaXsJ6YuCAFCaOix6AkoJAUVLxBh KMDQ0JDhLjUlsGXyN8OmetFOZ1BtKq3/DWZrdP1IvbJRE7DUXbvGUEPmduRzbBnr zR3/ch6fIokHNXhoctZUgS+lR2HjurP4BaQtYsPZ+DKQOoRWvroAZ486xQ9xSqBX m2P09j3NNLZLBWbVaBOlR0TnDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7hZBoV GOxpeWPx5BdMKcZQst6kMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOWGrXjbCmNFkEmb3J3vfCzrY40QMfXklIE6Eh//TFm1zwJJqM71VC 1AIbJy/NguLJJfjfU59C/nRaPHCOj726lQ5TdLtFRuiF4fgxUh7WZj7IK5WLsGGk crNVgJa+VOnwtMjgNrTcGVzHVlL9Tn+5OLfmy2063z++ou+Rx7acfWvCuiipVJxC 8AR6V5Z54xoueFt26HMHnt4Lec0ckHvMLTnM57MZJEjxbny5FsHrjWMFHwaAj7lV A/hkU+nOXpb6/WvLJK7oJKCJknvxhsxEEkHX3QRts4ABqKsym2bgB9SNhkDM4spT F4I+hpYHPIb5WPshaoEUo9kekahm/fcS -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client