This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json) Hash identifier: UF7P+Oh7o27sxop5nOSjRG+F2lChjipkRFcohrafJv8= Subject key identifier: C4:BB:89:64:FB:CD:1D:42:9E:94:F1:AC:2A:15:72:57:67:7C:B8:60 Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft Manifest number: 0B63 Signing time: Mon 22 Dec 2025 18:40:04 +0000 Manifest this update: Mon 22 Dec 2025 18:40:03 +0000 Manifest next update: Mon 29 Dec 2025 18:40:03 +0000 Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: 12bWSskS4J4/6+d7IYvWeeHkNZ98h6dUaVfRojMKcCo=) 2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: 58+0TyNKJb4Dhk7ED+Dg5ahFyoV+/K06n+R45NAzh68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: Dec 22 18:40:03 2025 GMT Not After : Dec 29 18:40:03 2025 GMT Subject: CN=69499084-63af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:ec:39:11:61:8d:f3:90:28:aa:09:37:43: 46:13:03:64:18:38:fb:bb:c4:06:85:73:ce:d2:f9: 1f:da:17:33:db:ce:b4:ae:0e:4d:71:bc:9e:a3:d3: f4:1e:bc:36:bf:83:ca:0a:dd:8e:52:43:5e:c8:ff: bc:2e:48:b6:87:86:68:d3:b7:b8:f8:d1:f3:2a:90: e9:f8:df:3a:6e:fa:ea:11:cb:92:79:a3:00:41:be: c3:b0:b8:f4:72:b4:08:65:72:4f:bd:13:8c:1e:8b: 7f:2c:a3:0b:16:3f:db:7e:98:e1:6e:d2:94:7f:f0: fc:fb:48:50:90:a2:8f:4d:3e:33:1f:a6:b5:c2:bb: af:f0:6b:6d:54:30:b7:99:7a:9f:ee:cd:81:d2:6c: d0:f5:3d:ec:11:cc:66:c5:07:95:f1:33:dd:2c:2a: 73:44:a5:88:58:3c:34:98:34:d9:eb:32:a1:65:30: b3:a1:c6:b8:ad:80:27:e5:25:b6:89:93:cc:b8:86: ff:ec:da:4a:24:4d:29:6f:8a:b9:7d:a0:52:14:3b: 00:9f:94:b7:f0:34:da:82:82:f2:90:5f:bd:83:8c: 36:59:34:64:28:2e:48:88:18:57:ed:87:41:af:25: 18:4e:43:64:f7:86:cb:c8:b7:06:91:1c:89:a6:0c: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BB:89:64:FB:CD:1D:42:9E:94:F1:AC:2A:15:72:57:67:7C:B8:60 X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:8c:75:62:4a:0f:51:49:43:c1:ac:ca:56:61:ea:77:dc:ce: ed:75:bb:4b:4a:51:63:34:10:80:90:76:3c:e8:88:6a:5d:a8: a0:61:4c:66:5f:7d:cc:99:b6:3e:87:aa:35:c8:4a:50:c7:74: 4b:98:8a:1d:50:8b:15:59:4d:0c:38:13:cd:d7:74:06:c6:d1: f6:bc:8c:18:5c:43:de:6a:e7:9b:95:3a:5c:c2:07:ba:29:b6: 17:55:1c:c1:c5:16:5e:c6:0d:98:bd:8a:f6:76:75:4b:20:e0: 59:9b:6a:21:78:59:cb:c4:d2:9d:99:f9:0b:df:fd:28:4a:bd: 5d:49:69:72:65:a5:c8:3d:c9:7d:58:94:c0:fd:bf:1d:3b:e0: fb:3e:04:96:74:fc:f8:d9:cb:f7:9e:fb:72:a8:fd:bb:e0:a6: 4f:f2:0d:bc:12:27:0b:31:c2:d6:16:bf:d6:1f:63:2f:a6:42: 2b:27:75:54:fb:46:67:45:1c:ac:2f:2a:16:93:c0:33:22:14: 2e:81:2b:ce:9b:fc:27:8c:56:4a:f9:b6:63:a5:4e:da:62:37: 67:fc:ed:73:0b:ea:13:7c:6e:15:0c:71:01:fd:24:57:3c:cc: da:c0:3a:c7:82:e8:5a:9f:e7:29:c3:90:c5:b0:e8:44:3d:b4: 58:48:34:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjUxMjIyMTg0MDAzWhcNMjUxMjI5MTg0MDAzWjAYMRYwFAYD VQQDDA02OTQ5OTA4NC02M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTvsORFhjfOQKKoJN0NGEwNkGDj7u8QGhXPO0vkf2hcz2860rg5Ncbyeo9P0 Hrw2v4PKCt2OUkNeyP+8Lki2h4Zo07e4+NHzKpDp+N86bvrqEcuSeaMAQb7DsLj0 crQIZXJPvROMHot/LKMLFj/bfpjhbtKUf/D8+0hQkKKPTT4zH6a1wruv8GttVDC3 mXqf7s2B0mzQ9T3sEcxmxQeV8TPdLCpzRKWIWDw0mDTZ6zKhZTCzoca4rYAn5SW2 iZPMuIb/7NpKJE0pb4q5faBSFDsAn5S38DTagoLykF+9g4w2WTRkKC5IiBhX7YdB ryUYTkNk94bLyLcGkRyJpgxKhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS7iWT7 zR1CnpTxrCoVcldnfLhgMB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0Qi82M0RGRjgwMjQ1QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9q a2VNZGxGSnhocXo0T1pvbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrjHViSg9RSUPBrMpWYep33M7tdbtLSlFjNBCAkHY86IhqXaigYUxm X33MmbY+h6o1yEpQx3RLmIodUIsVWU0MOBPN13QGxtH2vIwYXEPeaueblTpcwge6 KbYXVRzBxRZexg2YvYr2dnVLIOBZm2oheFnLxNKdmfkL3/0oSr1dSWlyZaXIPcl9 WJTA/b8dO+D7PgSWdPz42cv3nvtyqP274KZP8g28EicLMcLWFr/WH2MvpkIrJ3VU +0ZnRRysLyoWk8AzIhQugSvOm/wnjFZK+bZjpU7aYjdn/O1zC+oTfG4VDHEB/SRX PMzawDrHguhan+cpw5DFsOhEPbRYSDS4 -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:25 2025 by rpki-client