This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: PHuOjGLhRBpxKHINR7LsLrxs3jBaswqLqYcVUbkM3HA= Subject key identifier: BB:8B:FF:99:C1:4C:88:89:59:3D:44:01:9D:25:CA:B5:F0:A7:56:E8 Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 088B Signing time: Sat 20 Dec 2025 19:57:59 +0000 Manifest this update: Sat 20 Dec 2025 19:57:58 +0000 Manifest next update: Sat 27 Dec 2025 19:57:58 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: LrahVuEVPTGqL4zuWRNIJktsC91QgvLg1zLmji6fx98=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: VQq/UvoPY3PzVTNf+ElhyuCuI9ySZEIWpztRGxnf5R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Validity Not Before: Dec 20 19:57:58 2025 GMT Not After : Dec 27 19:57:58 2025 GMT Subject: CN=6946ffc7-dc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:98:44:af:84:70:07:ac:bf:3b:68:7f:fd: b7:40:b8:6d:b0:24:43:2d:2b:dc:85:dd:69:90:db: 9e:22:b3:d7:26:4e:a6:8d:1d:ed:56:51:39:27:7f: 97:54:89:b7:e8:ef:37:0e:bf:e8:29:ce:1d:48:46: ca:22:cf:95:72:d7:10:ea:54:10:f8:aa:6c:4c:ce: c4:3e:f6:2e:80:32:a7:c4:66:1e:96:30:d9:23:5e: df:c6:01:ee:80:21:8a:b5:9a:6b:1a:d9:9a:ba:29: 83:0d:19:15:15:34:da:2d:04:17:77:c4:b7:04:58: 4c:0c:29:dd:57:1c:2b:a7:eb:f8:96:88:9c:30:d8: 0f:b5:76:84:af:8f:01:81:ae:1f:f0:c4:06:d4:f5: 12:35:f8:9c:1c:b9:40:6f:37:a6:d0:f6:db:6c:18: 4e:42:9b:bb:22:c4:5d:0f:ba:41:20:4a:16:86:1d: 5b:c9:8e:d0:d5:10:4a:dc:6b:9b:62:e1:47:40:7e: 49:f7:9a:7a:8c:39:77:18:dc:5a:09:27:9e:d4:b7: 52:de:f7:17:b6:0e:38:44:aa:6b:e0:ec:6a:9c:45: a0:61:c8:f6:fb:12:d1:8f:d0:32:93:d8:7e:00:7e: 2d:fc:ad:95:b7:7b:66:a1:87:44:84:68:4c:b7:08: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:FF:99:C1:4C:88:89:59:3D:44:01:9D:25:CA:B5:F0:A7:56:E8 X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c2:f5:51:3c:7e:eb:7d:9b:17:db:35:3e:1f:e4:c3:60:91: fb:ab:47:70:88:74:65:e3:1e:06:ac:eb:eb:45:74:27:1c:a6: b9:7f:d4:02:8d:75:13:eb:05:f7:ad:27:92:27:33:0b:62:42: 7d:b7:c0:73:69:a7:ff:95:cc:df:ed:7c:5f:92:ea:5d:a0:7c: e5:d5:ac:2d:d2:b6:9b:83:da:8a:3f:f4:b1:f5:cf:30:8f:0a: f9:d7:4c:8e:87:30:0f:90:1f:1a:d3:c1:55:7b:8e:86:ad:d5: f3:cf:49:34:6f:04:2b:75:e2:48:5f:58:ec:45:01:91:f9:f2: 22:94:f0:e3:ac:87:af:0f:1d:10:c0:29:e1:f7:77:c2:1d:dd: b8:96:d7:05:e3:f2:43:93:ee:02:94:61:a9:dd:ea:fa:0e:83: 85:f0:e3:1a:c1:4e:88:86:b9:ea:7b:3c:af:15:dd:ca:bb:2e: 8b:06:af:a2:1a:17:be:73:13:94:4e:bf:f0:70:67:34:2b:1a: 20:86:b5:44:49:7f:b7:9d:7d:5c:8f:04:5d:38:9e:2e:20:c7: 38:ce:95:60:d5:c0:f1:71:15:13:19:39:87:79:8c:29:fa:4e: 35:e2:72:78:b9:0a:bb:2d:3f:c3:7a:3d:64:4e:74:6d:39:bb: 3b:93:ea:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjUxMjIwMTk1NzU4WhcNMjUxMjI3MTk1NzU4WjAYMRYwFAYD VQQDDA02OTQ2ZmZjNy1kYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0SYRK+EcAesvztof/23QLhtsCRDLSvchd1pkNueIrPXJk6mjR3tVlE5J3+X VIm36O83Dr/oKc4dSEbKIs+VctcQ6lQQ+KpsTM7EPvYugDKnxGYeljDZI17fxgHu gCGKtZprGtmauimDDRkVFTTaLQQXd8S3BFhMDCndVxwrp+v4loicMNgPtXaEr48B ga4f8MQG1PUSNficHLlAbzem0PbbbBhOQpu7IsRdD7pBIEoWhh1byY7Q1RBK3Gub YuFHQH5J95p6jDl3GNxaCSee1LdS3vcXtg44RKpr4OxqnEWgYcj2+xLRj9Ayk9h+ AH4t/K2Vt3tmoYdEhGhMtwjQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuL/5nB TIiJWT1EAZ0lyrXwp1boMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBowvVRPH7rfZsX2zU+H+TDYJH7q0dwiHRl4x4GrOvrRXQnHKa5f9QC jXUT6wX3rSeSJzMLYkJ9t8Bzaaf/lczf7XxfkupdoHzl1awt0rabg9qKP/Sx9c8w jwr510yOhzAPkB8a08FVe46GrdXzz0k0bwQrdeJIX1jsRQGR+fIilPDjrIevDx0Q wCnh93fCHd24ltcF4/JDk+4ClGGp3er6DoOF8OMawU6IhrnqezyvFd3Kuy6LBq+i Ghe+cxOUTr/wcGc0KxoghrVESX+3nX1cjwRdOJ4uIMc4zpVg1cDxcRUTGTmHeYwp +k414nJ4uQq7LT/Dej1kTnRtObs7k+rG -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:05 2025 by rpki-client