This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: CkLQN1r8r2fU/7EgYWTasOz6NdndWzTtKbPiV+valFs= Subject key identifier: B3:3D:C7:A4:F5:C9:02:43:E6:25:68:D9:D4:E0:5A:23:2B:4F:F3:48 Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: E2 Signing time: Tue 23 Dec 2025 04:29:03 +0000 Manifest this update: Tue 23 Dec 2025 04:29:02 +0000 Manifest next update: Tue 30 Dec 2025 04:29:02 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: 6oXhNRm7esArkmDWHgSd3GI/rDbdrnWK0zelH1Eu+l0=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: laasWh8PuYjoERWb0doiSl5kx11xLeI2IUGh595BB8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Dec 23 04:29:02 2025 GMT Not After : Dec 30 04:29:02 2025 GMT Subject: CN=694a1a8f-0cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:41:2c:2a:ef:0d:a0:82:6b:d0:ae:da:5c: d7:b7:58:a8:84:9a:fd:9a:ef:73:61:b3:1a:bd:78: 0d:5a:18:36:24:30:3a:b2:62:ed:ad:88:e9:b3:e8: 4d:1a:3d:4b:8c:4e:52:1b:1b:38:d4:d3:15:18:6a: 1c:14:00:86:64:e9:b2:63:f8:92:5a:90:3e:6f:26: d2:82:b5:bd:ae:1c:9d:41:cb:fe:85:9c:9a:9e:a7: f3:57:96:ac:a6:eb:3c:6e:9b:38:75:be:3b:c1:96: 3b:a2:6e:e2:c2:7f:3a:f0:67:d0:63:a4:7f:99:97: 35:70:83:f1:48:26:a6:ae:fe:89:4e:38:0f:09:bf: 7d:94:20:f1:28:74:0e:14:2e:ef:10:92:dc:0e:72: 4e:b9:61:ab:00:29:6f:93:06:be:23:6f:bd:56:08: 2a:7a:f5:63:86:1b:8e:4c:9b:39:80:08:94:66:e3: 65:92:4e:42:9a:58:7d:5c:38:d5:5e:75:37:fc:d7: 85:61:6c:d7:64:08:bf:12:e9:08:56:47:b2:02:6a: 33:3d:c4:41:fe:7c:fd:e2:d5:a3:b8:a5:15:34:1d: d0:dc:3f:2b:45:c0:7a:9d:1a:d1:d7:6a:16:11:55: 7d:bd:71:04:c0:05:2c:da:14:c2:7c:b1:fb:20:84: a3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:C7:A4:F5:C9:02:43:E6:25:68:D9:D4:E0:5A:23:2B:4F:F3:48 X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:32:d2:de:2d:c1:78:0c:f3:bb:1f:4e:b2:79:5f:2b:aa: 73:1e:0f:44:4d:50:df:44:cf:8c:ae:0b:fc:0c:f0:83:6b:1b: 55:a0:0f:74:28:3f:09:59:cc:8c:94:ea:4d:1f:da:f3:ab:c7: 05:ff:39:a5:6c:7b:ba:b9:7c:39:fa:2b:5c:06:6e:2f:19:55: 9e:ad:f1:4f:7f:fa:bc:5d:9d:fc:3c:e0:2a:05:06:a6:f2:79: 73:1e:af:ec:f2:b6:5e:cf:f7:15:2b:8b:08:05:a2:b3:57:57: 0b:01:27:b4:17:3f:94:24:90:72:08:ae:7a:39:a5:9e:ce:2e: e3:ea:e5:e0:ed:8f:e1:8c:5c:7f:b4:62:6a:c9:ff:16:82:62: 21:e0:4b:65:21:b1:bf:f2:53:e6:57:79:87:2a:6c:c1:c3:1a: 45:ba:fc:14:96:35:8e:89:bb:90:5b:93:fe:f3:1a:87:fd:41: 58:b3:54:a5:eb:ba:80:1e:97:94:77:3e:12:ab:95:54:4e:88: c5:d6:8d:4a:fc:1d:17:b3:03:ce:71:ab:de:84:e4:79:70:7c: 76:e6:c1:d1:08:e9:32:d7:8c:a9:1e:e3:a9:93:1e:90:10:06: 4f:ab:46:7a:63:65:f2:f3:74:1f:46:ec:60:87:95:34:32:14: a1:72:b4:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjUxMjIzMDQyOTAyWhcNMjUxMjMwMDQyOTAyWjAYMRYwFAYD VQQDDA02OTRhMWE4Zi0wY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHlBLCrvDaCCa9Cu2lzXt1iohJr9mu9zYbMavXgNWhg2JDA6smLtrYjps+hN Gj1LjE5SGxs41NMVGGocFACGZOmyY/iSWpA+bybSgrW9rhydQcv+hZyanqfzV5as pus8bps4db47wZY7om7iwn868GfQY6R/mZc1cIPxSCamrv6JTjgPCb99lCDxKHQO FC7vEJLcDnJOuWGrAClvkwa+I2+9VggqevVjhhuOTJs5gAiUZuNlkk5Cmlh9XDjV XnU3/NeFYWzXZAi/EukIVkeyAmozPcRB/nz94tWjuKUVNB3Q3D8rRcB6nRrR12oW EVV9vXEEwAUs2hTCfLH7IISjVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM9x6T1 yQJD5iVo2dTgWiMrT/NIMB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3YzLS3i3BeAzzux9OsnlfK6pzHg9ETVDfRM+Mrgv8DPCDaxtVoA90 KD8JWcyMlOpNH9rzq8cF/zmlbHu6uXw5+itcBm4vGVWerfFPf/q8XZ38POAqBQam 8nlzHq/s8rZez/cVK4sIBaKzV1cLASe0Fz+UJJByCK56OaWezi7j6uXg7Y/hjFx/ tGJqyf8WgmIh4EtlIbG/8lPmV3mHKmzBwxpFuvwUljWOibuQW5P+8xqH/UFYs1Sl 67qAHpeUdz4Sq5VUTojF1o1K/B0XswPOcavehOR5cHx25sHRCOky14ypHuOpkx6Q EAZPq0Z6Y2Xy83QfRuxgh5U0MhShcrRj -----END CERTIFICATE-----Generated at Tue Dec 23 11:20:50 2025 by rpki-client