This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: TGZe39f3YwIa67hz1z8hxJtAGI7/uMfofVMszWrTe0g= Subject key identifier: 5E:53:D0:19:E6:CC:2F:E0:DB:2F:A1:87:29:FE:F4:C6:53:C0:B9:F7 Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A8E Signing time: Mon 22 Dec 2025 19:01:15 +0000 Manifest this update: Mon 22 Dec 2025 19:01:15 +0000 Manifest next update: Mon 29 Dec 2025 19:01:15 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: DKpsRWiHtaA+5FpWy37oLkbJUMj1G5O5prrZF3Zg3Ow=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2713 (0xa99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: Dec 22 19:01:15 2025 GMT Not After : Dec 29 19:01:15 2025 GMT Subject: CN=6949957b-59c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:77:cd:06:72:f5:00:6a:39:be:b3:da:85: 1d:eb:33:a0:4f:c8:2c:a5:82:c0:f4:bf:06:bf:63: 2d:4e:a8:db:5f:ce:af:ff:49:44:5f:d1:27:08:b0: 00:5c:7e:ba:1b:97:3f:b7:24:3e:bc:31:97:93:40: 62:cb:11:34:de:d1:db:e5:5f:ed:2c:12:8f:b5:4c: f8:f8:9b:57:f0:9a:3d:42:66:8b:08:f5:9f:62:22: 5a:0e:2e:b5:3b:7f:e9:c5:2e:3a:eb:4e:1d:6b:c8: e8:8a:dd:b9:c0:bb:54:fd:28:34:2a:3f:b5:b6:65: c3:e6:bc:a9:74:61:a2:b3:25:64:89:3e:a8:fa:ad: 73:c0:d5:09:f7:47:9a:b6:e9:25:c3:9d:c0:a4:80: b6:8f:ed:d0:99:ff:01:61:0c:bd:8a:0f:ec:e3:7f: b9:94:83:8b:d0:68:c7:2a:99:21:67:39:d3:66:f2: c4:d3:45:bd:29:4f:02:a4:42:4d:0d:cf:58:e4:60: bb:c2:29:2a:60:df:fc:10:bd:7b:65:e5:59:4b:fe: b1:f7:a3:14:d2:b1:b9:3c:09:fa:8f:18:6d:84:53: 67:f8:d9:9e:85:ac:23:8b:a2:eb:e0:5a:31:4f:f1: b0:bd:2f:97:e4:6c:88:43:bc:a8:05:f8:15:5c:43: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:53:D0:19:E6:CC:2F:E0:DB:2F:A1:87:29:FE:F4:C6:53:C0:B9:F7 X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e5:cc:e9:82:ea:0b:ef:3b:8a:72:fc:86:37:d3:87:ad:04: d2:82:ec:05:ff:c5:11:7d:bb:e8:b1:c5:64:4b:56:dd:ef:71: 15:21:29:be:7c:d5:a5:d6:ee:43:e7:a6:11:dd:2f:d8:d3:a7: e1:0c:89:39:e5:f5:6f:d9:6e:f3:6f:a7:58:a2:37:86:05:d6: 08:6c:7f:ee:2e:f7:a8:63:eb:6b:a7:a8:8c:61:9d:6c:32:36: c7:04:03:db:86:df:b4:b7:d7:5d:04:f0:1d:b6:79:d0:fb:3b: b4:59:5b:d5:0b:c8:a6:1e:33:d6:65:c7:29:7e:fc:37:4a:0e: 0e:59:37:29:01:9b:b0:94:69:81:59:d4:0b:0d:38:a6:34:37: a3:82:85:47:a4:fd:af:26:a0:f2:0c:3d:33:45:57:35:c3:f0: b9:ce:80:e7:04:ad:be:d9:82:70:e4:78:02:db:dd:c3:ca:70: 31:84:42:18:5e:bd:a5:af:25:6b:60:a7:68:3d:cc:47:d3:01: f4:cc:c1:b0:4d:9c:75:24:8c:42:f2:d7:20:ee:e1:ea:c9:ff: d2:2c:2f:41:f4:dc:02:93:91:a0:35:ff:af:25:da:57:5e:bb: 32:e5:9b:ea:17:84:9e:3f:71:2f:a6:76:2d:d0:4b:ca:80:81: 60:01:78:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUxMjIyMTkwMTE1WhcNMjUxMjI5MTkwMTE1WjAYMRYwFAYD VQQDDA02OTQ5OTU3Yi01OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvot3zQZy9QBqOb6z2oUd6zOgT8gspYLA9L8Gv2MtTqjbX86v/0lEX9EnCLAA XH66G5c/tyQ+vDGXk0BiyxE03tHb5V/tLBKPtUz4+JtX8Jo9QmaLCPWfYiJaDi61 O3/pxS46604da8joit25wLtU/Sg0Kj+1tmXD5rypdGGisyVkiT6o+q1zwNUJ90ea tuklw53ApIC2j+3Qmf8BYQy9ig/s43+5lIOL0GjHKpkhZznTZvLE00W9KU8CpEJN Dc9Y5GC7wikqYN/8EL17ZeVZS/6x96MU0rG5PAn6jxhthFNn+Nmehawji6Lr4Fox T/GwvS+X5GyIQ7yoBfgVXEO5pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5T0Bnm zC/g2y+hhyn+9MZTwLn3MB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt5czpguoL7zuKcvyGN9OHrQTSguwF/8URfbvoscVkS1bd73EVISm+ fNWl1u5D56YR3S/Y06fhDIk55fVv2W7zb6dYojeGBdYIbH/uLveoY+trp6iMYZ1s MjbHBAPbht+0t9ddBPAdtnnQ+zu0WVvVC8imHjPWZccpfvw3Sg4OWTcpAZuwlGmB WdQLDTimNDejgoVHpP2vJqDyDD0zRVc1w/C5zoDnBK2+2YJw5HgC293DynAxhEIY Xr2lryVrYKdoPcxH0wH0zMGwTZx1JIxC8tcg7uHqyf/SLC9B9NwCk5GgNf+vJdpX Xrsy5ZvqF4SeP3EvpnYt0EvKgIFgAXhm -----END CERTIFICATE-----Generated at Wed Dec 24 09:01:52 2025 by rpki-client