This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: RHJ3/yo9TV587mqsKgm7m0Y2pNE9yjn4BNieLq9L0p4= Subject key identifier: B0:4A:57:2C:B4:61:40:8C:49:90:14:A1:43:A9:04:38:C3:77:2A:55 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 0234 Signing time: Tue 23 Dec 2025 01:04:08 +0000 Manifest this update: Tue 23 Dec 2025 01:04:08 +0000 Manifest next update: Tue 30 Dec 2025 01:04:08 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: YZag2rciSYPMLTIWBVyyl2H3pegQ7/MGIs6oHhdYOww=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: zxrXFqsfD+7NRRncl+qUeb1Nz8SeSSAW+8BU/fya5cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Dec 23 01:04:08 2025 GMT Not After : Dec 30 01:04:08 2025 GMT Subject: CN=6949ea88-b625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:3e:40:a0:f3:ab:27:19:46:ad:a4:bf:68: 8b:41:ff:30:f5:e5:bd:ec:6c:32:8c:4e:9f:6c:f6: 66:6e:e5:ed:07:08:d8:23:19:22:f9:07:7f:70:b9: e8:79:95:8b:cc:0f:3e:23:2f:34:cc:8a:f7:91:1b: d2:07:e8:07:4c:a2:3a:1e:05:4c:70:a1:42:37:f2: f8:56:09:56:75:b8:45:45:9d:26:96:61:3f:67:69: e8:2a:2a:d0:b9:c0:49:ba:7b:a4:ef:b5:05:6e:14: 41:30:fd:f9:f6:ef:eb:19:87:44:09:83:da:f4:0f: ae:c5:35:0b:90:e7:98:66:59:cc:01:5f:d5:a6:e1: 52:c4:e6:7e:52:5e:c5:b3:49:01:ad:d0:64:25:6a: b2:08:cc:38:d3:6d:5c:4f:2c:a1:5c:7b:f1:b9:4d: 5c:f2:e5:51:37:cf:fd:95:66:18:e3:f1:4a:6e:91: 16:ea:37:0e:8b:f4:16:62:e3:7b:88:fe:5a:56:64: ee:c4:33:8e:2a:c8:db:b1:19:ca:b6:e8:f8:38:6b: 09:9f:d6:03:2a:a1:2b:ed:d5:9d:ee:cb:17:90:9f: 3a:97:8c:bf:bb:38:e6:47:49:ee:cb:bb:1f:71:1c: 2e:37:ee:e1:ac:db:8a:63:f6:7b:10:5e:ba:3c:07: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:57:2C:B4:61:40:8C:49:90:14:A1:43:A9:04:38:C3:77:2A:55 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ba:e2:6d:64:48:c7:5c:07:3c:45:41:e0:a0:0c:f0:ce:67: 81:99:a0:b8:b8:bc:be:97:bf:6d:07:fe:64:b8:98:2e:23:ac: 06:d7:08:47:27:9b:32:b7:52:e6:fa:e9:ff:c5:ed:4e:30:36: a9:0f:a9:61:f9:ae:98:29:b0:18:93:77:43:c1:e3:63:88:db: b2:65:4e:c3:9c:a8:a8:d4:4a:36:0f:e8:f6:15:03:9e:a5:67: 61:30:39:da:a7:f4:22:47:49:92:42:1d:2f:62:88:33:96:7b: f2:f2:97:59:55:61:57:b2:88:03:34:f7:9d:ae:1a:f8:66:77: 46:47:96:81:27:2d:a0:bf:03:6d:25:d4:70:a5:e3:85:da:a7: 86:bc:29:8b:a4:52:c0:f4:c6:21:05:ad:8a:d8:1d:88:dc:95: 8c:5d:33:bb:fd:a8:da:44:89:75:2e:c4:1e:ff:ec:fa:79:d8: f0:61:08:c6:2d:99:6e:51:bf:f4:79:19:4a:a0:aa:5a:4a:19: 46:12:c1:e8:f5:98:77:4b:a1:30:72:c9:b8:1d:5e:5e:13:44: 9f:31:99:c0:7c:49:22:8b:cb:6f:23:64:03:5e:57:c5:94:49: 2e:ae:94:9b:5c:a6:73:65:b3:ba:a1:cc:e8:f3:e6:19:1b:31: 2d:fd:49:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUxMjIzMDEwNDA4WhcNMjUxMjMwMDEwNDA4WjAYMRYwFAYD VQQDDA02OTQ5ZWE4OC1iNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/c+QKDzqycZRq2kv2iLQf8w9eW97GwyjE6fbPZmbuXtBwjYIxki+Qd/cLno eZWLzA8+Iy80zIr3kRvSB+gHTKI6HgVMcKFCN/L4VglWdbhFRZ0mlmE/Z2noKirQ ucBJunuk77UFbhRBMP359u/rGYdECYPa9A+uxTULkOeYZlnMAV/VpuFSxOZ+Ul7F s0kBrdBkJWqyCMw4021cTyyhXHvxuU1c8uVRN8/9lWYY4/FKbpEW6jcOi/QWYuN7 iP5aVmTuxDOOKsjbsRnKtuj4OGsJn9YDKqEr7dWd7ssXkJ86l4y/uzjmR0nuy7sf cRwuN+7hrNuKY/Z7EF66PAdplQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBKVyy0 YUCMSZAUoUOpBDjDdypVMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLuuJtZEjHXAc8RUHgoAzwzmeBmaC4uLy+l79tB/5kuJguI6wG1whH J5syt1Lm+un/xe1OMDapD6lh+a6YKbAYk3dDweNjiNuyZU7DnKio1Eo2D+j2FQOe pWdhMDnap/QiR0mSQh0vYogzlnvy8pdZVWFXsogDNPedrhr4ZndGR5aBJy2gvwNt JdRwpeOF2qeGvCmLpFLA9MYhBa2K2B2I3JWMXTO7/ajaRIl1LsQe/+z6edjwYQjG LZluUb/0eRlKoKpaShlGEsHo9Zh3S6Ewcsm4HV5eE0SfMZnAfEkii8tvI2QDXlfF lEkurpSbXKZzZbO6oczo8+YZGzEt/Ulo -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:49 2025 by rpki-client