This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: /32YZgBFQv5zcVyKnXFOnmpC4TQr0ep5tIpOQccEb78= Subject key identifier: 9A:B4:A4:E9:5F:96:37:B8:99:7C:66:4E:A1:22:C9:C1:4E:67:B8:DA Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: C3 Signing time: Tue 23 Dec 2025 04:52:00 +0000 Manifest this update: Tue 23 Dec 2025 04:51:59 +0000 Manifest next update: Tue 30 Dec 2025 04:51:59 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: vNbZb/IHvfTs33IMZA6YOvK9bSG+wlJYi4RZLPz/12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Dec 23 04:51:59 2025 GMT Not After : Dec 30 04:51:59 2025 GMT Subject: CN=694a1fef-8308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:2e:15:46:a7:6e:dc:17:de:29:79:b0:1d: 93:f0:94:f6:5d:a5:d2:1e:19:ca:cd:86:6c:a0:54: 27:81:d0:a2:92:fd:27:98:ec:0a:a2:e5:0d:8c:d4: 76:3e:83:a4:b5:cc:c3:58:88:99:5b:48:7d:fc:d0: e0:03:45:19:d3:ba:2a:2c:fe:85:24:b1:d2:8d:5b: 57:71:d1:3e:4f:bc:b9:94:6a:31:39:db:ac:97:6d: 28:62:bf:b2:f3:23:c0:5b:bc:d4:ca:fc:4d:f3:87: 36:3a:15:eb:16:f9:5e:fa:90:e7:11:7d:96:c7:f3: ef:b2:65:d3:8a:bf:32:a0:1e:49:8b:6b:c5:d7:d1: 11:b7:b7:8f:7d:82:42:c6:a9:1e:fb:2e:ac:37:68: 11:ae:ac:26:52:24:65:73:93:54:58:30:0f:24:05: d3:c6:1d:4d:a4:72:87:49:89:fc:21:ef:b6:ed:4e: 14:7b:f9:12:c8:9e:b5:0c:07:52:69:34:82:3f:01: 1e:a2:c7:5c:60:de:48:68:94:96:f1:0b:f4:bc:22: 86:2d:bc:c2:8c:ae:2d:28:c7:9d:90:9b:04:ac:b2: 26:2f:64:8d:6b:65:ce:72:b0:11:11:9f:88:3b:04: a2:d9:75:9b:ea:4b:ad:34:2c:09:f6:16:8d:29:dc: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:A4:E9:5F:96:37:B8:99:7C:66:4E:A1:22:C9:C1:4E:67:B8:DA X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b6:1c:a8:35:cf:31:4d:03:09:61:f1:c4:45:37:63:b2:b8: e9:f3:34:18:e8:1d:6b:dc:98:7d:c5:4f:4b:a7:d3:f6:f2:1d: 14:90:f0:eb:4a:e5:d9:18:d6:96:ae:f2:cd:18:f6:af:ec:5b: 9f:c9:2e:b0:f5:14:42:97:a3:88:53:0a:ef:2d:9a:42:7a:54: ad:cf:82:0a:65:16:c6:bf:2e:6d:2d:c4:4c:9a:5f:92:c0:62: 49:66:3b:3e:17:a7:ad:97:8c:92:92:06:e8:23:35:50:41:57: f9:9f:8c:bb:7a:37:4f:86:0e:53:2f:25:37:49:f0:5b:bf:f8: db:b8:b4:81:7c:2f:39:91:b2:6c:6d:07:69:18:0a:76:0f:11: 17:1e:04:f3:16:79:59:1a:3a:07:da:50:c6:ce:1c:83:1c:36: 6f:36:5e:15:ce:35:a6:04:75:9e:64:ad:7d:a3:70:7c:73:5e: 30:ef:fa:88:26:f4:c9:22:f8:53:13:4c:2b:fd:44:f7:b6:c0: 49:15:bd:8b:ed:44:ec:23:82:bc:dc:09:ce:31:bd:76:5b:53: 99:dd:07:9d:64:ca:e6:c3:f3:77:16:1c:b4:06:9c:fd:52:56: 13:00:9f:8b:8d:2a:84:d1:c9:ce:b9:fa:f1:7e:c3:7e:b6:de: 9c:76:ce:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1RjIwRTY5NzE5 QTk5QzMyQkIwHhcNMjUxMjIzMDQ1MTU5WhcNMjUxMjMwMDQ1MTU5WjAYMRYwFAYD VQQDDA02OTRhMWZlZi04MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ScuFUanbtwX3il5sB2T8JT2XaXSHhnKzYZsoFQngdCikv0nmOwKouUNjNR2 PoOktczDWIiZW0h9/NDgA0UZ07oqLP6FJLHSjVtXcdE+T7y5lGoxOdusl20oYr+y 8yPAW7zUyvxN84c2OhXrFvle+pDnEX2Wx/PvsmXTir8yoB5Ji2vF19ERt7ePfYJC xqke+y6sN2gRrqwmUiRlc5NUWDAPJAXTxh1NpHKHSYn8Ie+27U4Ue/kSyJ61DAdS aTSCPwEeosdcYN5IaJSW8Qv0vCKGLbzCjK4tKMedkJsErLImL2SNa2XOcrAREZ+I OwSi2XWb6kutNCwJ9haNKdwDUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq0pOlf lje4mXxmTqEiycFOZ7jaMB8GA1UdIwQYMBaAFNwRMNhha6vGzgiPXyDmlxmpnDK7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS8wODlCQzRFNkI2 MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4Yk9DSTlmSU9hWEdhbWNN cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4 Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1thyoNc8xTQMJYfHERTdjsrjp8zQY6B1r3Jh9xU9Lp9P28h0UkPDr SuXZGNaWrvLNGPav7FufyS6w9RRCl6OIUwrvLZpCelStz4IKZRbGvy5tLcRMml+S wGJJZjs+F6etl4ySkgboIzVQQVf5n4y7ejdPhg5TLyU3SfBbv/jbuLSBfC85kbJs bQdpGAp2DxEXHgTzFnlZGjoH2lDGzhyDHDZvNl4VzjWmBHWeZK19o3B8c14w7/qI JvTJIvhTE0wr/UT3tsBJFb2L7UTsI4K83AnOMb12W1OZ3QedZMrmw/N3Fhy0Bpz9 UlYTAJ+LjSqE0cnOufrxfsN+tt6cds4X -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:02 2025 by rpki-client