This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: p2croUvDGyuebFoU3pecER4DbJP9S0Ocbrlscxlx3TE= Subject key identifier: 3A:39:54:FE:12:2F:77:57:1C:E6:AA:51:C2:59:B0:97:F6:BA:5F:35 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 6B Signing time: Tue 23 Dec 2025 05:51:07 +0000 Manifest this update: Tue 23 Dec 2025 05:51:07 +0000 Manifest next update: Tue 30 Dec 2025 05:51:07 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: d8pLONWAzOLiHvoztluQh/cGdC26QEwGjxo1Cz4b5Kw=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Dec 23 05:51:07 2025 GMT Not After : Dec 30 05:51:07 2025 GMT Subject: CN=694a2dcb-7416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:59:33:ca:3f:ad:2c:49:ae:aa:90:2d:08: 7d:93:12:6d:00:21:e1:50:89:d8:88:b5:a5:b8:af: 89:0f:65:90:8b:2a:64:d5:d4:e2:b1:7e:d0:2e:ae: 19:16:f3:68:79:7a:ec:9d:8e:40:7d:15:e8:06:6f: 69:d9:aa:b2:8e:a1:3e:5e:69:21:57:9a:dd:b4:4b: 5e:17:3b:cf:ea:b8:4c:fc:74:71:fb:25:91:1d:c2: 12:b4:1a:c8:1c:fc:3d:18:48:ad:25:3e:4d:54:1b: ef:ec:0d:b4:36:27:95:39:97:de:e2:5b:a2:a2:47: ee:30:44:80:b6:23:0c:33:77:4d:79:14:5a:8d:4a: ac:7e:4e:b8:e7:b9:bf:10:2d:ee:9a:2c:42:c3:a7: 09:50:a8:fb:66:c7:a4:e1:47:5d:d1:b5:2d:d8:90: 47:73:39:f5:4b:6e:b8:dd:5c:be:d9:2d:b6:59:95: 4c:13:e9:b4:20:57:29:52:0a:8d:87:02:94:a5:f6: 50:51:44:83:bd:83:28:4a:e2:df:de:57:42:5d:41: e9:ec:e5:e4:81:a6:e4:9b:2e:8c:ef:9b:b5:5d:f4: 7c:b0:0a:a6:5f:b3:47:12:76:a9:f0:94:50:da:67: ca:f8:cf:42:69:05:cc:53:35:1e:31:66:77:1a:ad: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:54:FE:12:2F:77:57:1C:E6:AA:51:C2:59:B0:97:F6:BA:5F:35 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:af:60:1a:e4:52:b0:31:d0:77:af:0a:a8:bb:97:24:29:0d: 8f:eb:42:43:02:90:8b:b2:f3:9b:78:70:f5:fb:e8:a3:a0:68: 8a:ad:64:7a:86:66:f3:7b:3e:6f:b4:c8:8b:e1:d3:29:69:33: 01:0b:9b:84:a2:51:0f:7b:65:b4:70:17:f5:ee:2f:a3:d1:49: c0:c2:20:a2:f7:d5:13:a4:bd:19:23:24:0b:6e:cf:7f:05:87: 80:e5:7c:35:de:64:72:f1:8f:6e:ae:8d:98:21:0d:31:2c:75: 1c:1d:b1:56:93:67:45:af:1c:6d:06:c1:31:cb:29:31:d2:6c: 27:04:b0:62:e2:e0:e2:f6:38:4d:9e:91:d0:9a:d3:15:d6:9e: 01:d7:6f:a8:22:72:a6:f5:f4:ae:bd:15:b9:1e:eb:ec:4b:75: f4:73:9b:63:ad:82:22:22:82:88:5b:66:51:77:20:d3:3e:51: ca:b5:65:0e:06:4e:3e:a8:20:4d:d0:6b:32:7e:13:a7:70:fa: d8:2e:f9:d2:5a:b3:98:db:1b:63:e7:a4:5a:59:42:52:b5:de: a4:55:18:dd:09:87:a8:40:22:8a:d5:f5:20:15:82:9d:94:9a: cd:16:16:bc:98:21:48:55:62:90:e5:a4:ad:d7:26:24:3b:3b: 92:ac:96:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTEyMjMwNTUxMDdaFw0yNTEyMzAwNTUxMDdaMBgxFjAUBgNV BAMMDTY5NGEyZGNiLTc0MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ZFkzyj+tLEmuqpAtCH2TEm0AIeFQidiItaW4r4kPZZCLKmTV1OKxftAurhkW 82h5euydjkB9FegGb2nZqrKOoT5eaSFXmt20S14XO8/quEz8dHH7JZEdwhK0Gsgc /D0YSK0lPk1UG+/sDbQ2J5U5l97iW6KiR+4wRIC2Iwwzd015FFqNSqx+Trjnub8Q Le6aLELDpwlQqPtmx6ThR13RtS3YkEdzOfVLbrjdXL7ZLbZZlUwT6bQgVylSCo2H ApSl9lBRRIO9gyhK4t/eV0JdQens5eSBpuSbLozvm7Vd9HywCqZfs0cSdqnwlFDa Z8r4z0JpBcxTNR4xZncarXPpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOjlU/hIv d1cc5qpRwlmwl/a6XzUwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqvYBrkUrAx0HevCqi7lyQpDY/rQkMCkIuy85t4cPX76KOgaIqtZHqG ZvN7Pm+0yIvh0ylpMwELm4SiUQ97ZbRwF/XuL6PRScDCIKL31ROkvRkjJAtuz38F h4DlfDXeZHLxj26ujZghDTEsdRwdsVaTZ0WvHG0GwTHLKTHSbCcEsGLi4OL2OE2e kdCa0xXWngHXb6gicqb19K69Fbke6+xLdfRzm2OtgiIigohbZlF3INM+Ucq1ZQ4G Tj6oIE3QazJ+E6dw+tgu+dJas5jbG2PnpFpZQlK13qRVGN0Jh6hAIorV9SAVgp2U ms0WFryYIUhVYpDlpK3XJiQ7O5KslqA= -----END CERTIFICATE-----Generated at Thu Dec 25 00:43:28 2025 by rpki-client