This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft File: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json) Hash identifier: tIaEKpulb7wLnkUv+23xRrVee0CDLd1lgif1bz3megs= Subject key identifier: D7:9D:CB:A7:DC:C9:74:68:9C:21:E3:DB:27:E4:FA:84:E1:AF:38:C8 Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E Certificate issuer: /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft Manifest number: 33 Signing time: Tue 23 Dec 2025 06:24:14 +0000 Manifest this update: Tue 23 Dec 2025 06:24:13 +0000 Manifest next update: Tue 30 Dec 2025 06:24:13 +0000 Files and hashes: 1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: To/p9F6s0jevlkybqZlCon5XbfCjcz2m+fC0TvOl1SY=) 2: 54338F04B19111F0A5C55920C4F9AE02.roa (hash: 698t+8gbmef5TGfM4Cz5spoT/C6WF9SKp+ihzDQ5RW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E Validity Not Before: Dec 23 06:24:13 2025 GMT Not After : Dec 30 06:24:13 2025 GMT Subject: CN=694a358d-d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:44:cf:2a:74:50:65:84:b6:28:25:21:40: 99:b2:93:a2:c1:50:41:ef:a2:9c:15:d3:f2:98:15: b0:55:fd:e6:6c:18:e0:8a:81:b8:21:14:8a:9f:f2: dd:f1:fd:e2:d4:4b:e7:63:ed:07:b2:91:61:fe:11: 6c:a7:70:24:41:2b:b5:01:18:71:ae:22:5b:ec:d5: 96:50:01:31:1c:0d:d9:3a:6d:27:f3:ee:34:2f:91: ed:97:d2:b4:02:97:76:9d:b3:83:54:59:b0:34:10: f6:0a:c3:0b:c2:6c:8c:b7:eb:80:44:9f:fb:67:6a: 70:83:e1:20:ae:94:f6:0a:87:8e:32:52:3b:8c:6c: f8:05:78:ba:3c:74:5a:d9:4a:ec:63:b8:23:a7:4f: 34:fc:9d:e7:4a:8f:1f:5c:5c:36:fe:56:ad:46:dc: d0:0e:2d:ab:4d:d8:fd:4a:68:6d:05:65:80:df:e5: 9d:ca:47:92:81:92:25:82:7f:f4:31:ac:19:c7:b7: 65:51:e3:47:a7:f7:4b:25:15:53:ef:a2:26:66:56: 74:3d:09:dd:a5:ab:3d:01:2b:de:12:8d:d9:50:e8: 4e:d1:21:23:55:40:bc:55:ea:f9:8e:1d:00:fa:90: 8a:4c:ee:97:3d:14:8a:9a:96:b3:e0:be:a4:7d:11: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:CB:A7:DC:C9:74:68:9C:21:E3:DB:27:E4:FA:84:E1:AF:38:C8 X509v3 Authority Key Identifier: keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:49:fe:c6:fb:68:63:de:58:da:47:9d:52:35:59:ff:7c: fe:7f:77:e6:d7:9a:26:53:54:c3:c9:26:02:44:ab:74:f2:86: b3:b7:14:44:d3:a1:23:3d:52:2f:13:91:b0:36:08:ab:b5:42: 18:68:e7:a2:11:e0:af:1f:f0:b1:0f:48:32:f7:83:23:0e:8d: 51:0b:6c:a2:db:13:44:08:3d:2b:9b:b8:5c:2d:f0:af:b3:e6: 90:79:25:c7:e1:12:dc:02:f1:d8:b6:25:79:33:f5:65:12:2a: 64:a9:94:0f:6a:f3:0f:a8:a1:e9:2f:b9:48:8d:2b:7f:88:23: 47:c1:43:14:13:6f:7e:cc:e9:37:12:a8:bf:dc:33:77:d2:8c: 07:3b:0a:a0:c3:8c:02:cb:06:40:47:6d:65:e8:c9:1a:05:69: 28:2c:07:e0:85:3a:16:8b:30:77:3a:11:af:bc:81:bc:0a:a7: 09:55:5e:10:73:ad:1f:36:a9:69:41:12:e2:d5:7e:9f:37:de: 1a:45:db:97:55:e6:28:e6:56:de:5c:c0:01:5a:ae:db:5a:87: 31:f7:9a:c9:f6:59:52:fb:43:de:04:ff:46:3d:42:5f:2c:db: 3d:33:79:e2:9f:ec:cc:42:41:83:4b:36:2e:d7:86:35:de:ad: 5d:be:84:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTcyNzExMC8GA1UEBRMoREU2Q0RBNjlBQjFBQzg5QUU3NUY3NjVDRTc3MjczRTEx QjdGRDY3RTAeFw0yNTEyMjMwNjI0MTNaFw0yNTEyMzAwNjI0MTNaMBgxFjAUBgNV BAMMDTY5NGEzNThkLWQwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3AETPKnRQZYS2KCUhQJmyk6LBUEHvopwV0/KYFbBV/eZsGOCKgbghFIqf8t3x /eLUS+dj7QeykWH+EWyncCRBK7UBGHGuIlvs1ZZQATEcDdk6bSfz7jQvke2X0rQC l3ads4NUWbA0EPYKwwvCbIy364BEn/tnanCD4SCulPYKh44yUjuMbPgFeLo8dFrZ SuxjuCOnTzT8nedKjx9cXDb+Vq1G3NAOLatN2P1KaG0FZYDf5Z3KR5KBkiWCf/Qx rBnHt2VR40en90slFVPvoiZmVnQ9Cd2lqz0BK94SjdlQ6E7RISNVQLxV6vmOHQD6 kIpM7pc9FIqalrPgvqR9EdKPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU153Lp9zJ dGicIePbJ+T6hOGvOMgwHwYDVR0jBBgwFoAU3mzaaasayJrnX3Zc53Jz4Rt/1n4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NzI3LzI1NDMyNDRDOTIw NzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpyblgzWmM1M0p6NFJ0XzFu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM216YWFhc2F5SnJuWDNaYzUzSno0UnRfMW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NzI3LzI1NDMyNDRDOTIwNzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpy blgzWmM1M0p6NFJ0XzFuNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSfSf7G+2hj3ljaR51SNVn/fP5/d+bXmiZTVMPJJgJEq3TyhrO3FETT oSM9Ui8TkbA2CKu1Qhho56IR4K8f8LEPSDL3gyMOjVELbKLbE0QIPSubuFwt8K+z 5pB5JcfhEtwC8di2JXkz9WUSKmSplA9q8w+ooekvuUiNK3+II0fBQxQTb37M6TcS qL/cM3fSjAc7CqDDjALLBkBHbWXoyRoFaSgsB+CFOhaLMHc6Ea+8gbwKpwlVXhBz rR82qWlBEuLVfp833hpF25dV5ijmVt5cwAFarttahzH3msn2WVL7Q94E/0Y9Ql8s 2z0zeeKf7MxCQYNLNi7XhjXerV2+hHc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:37 2025 by rpki-client