This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: 3fquQtd4RTpznfuqGlOrH748nXMQnzudUhBfjsJ/6iA= Subject key identifier: 73:C3:BE:50:27:EA:D9:C1:B6:95:20:3F:3C:4D:2E:50:A9:DF:D7:A6 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0A9E Signing time: Mon 22 Dec 2025 18:59:21 +0000 Manifest this update: Mon 22 Dec 2025 18:59:20 +0000 Manifest next update: Mon 29 Dec 2025 18:59:20 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: pCBYl+K9Vvv7ifjIUr6E76C8AoFiqPw/jgH7D/PM7vA=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Dec 22 18:59:20 2025 GMT Not After : Dec 29 18:59:20 2025 GMT Subject: CN=69499509-b01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:04:72:32:b3:f4:be:69:59:02:5d:bc:85: e7:23:09:85:fe:a7:06:9d:18:4b:b7:e2:28:e8:58: c5:19:bc:5b:fe:08:c7:43:7c:86:12:e7:ba:fa:df: 0b:49:a3:0b:66:9e:7b:e1:4c:36:11:77:19:b0:0c: 8b:70:9d:d6:49:9b:6e:5c:13:ff:13:c5:6f:5b:6b: 60:06:5c:ba:18:a8:82:62:0d:ae:46:d1:25:5d:c8: 7e:09:4e:2a:f8:e1:2d:05:c9:9f:17:78:60:b3:a3: 92:20:19:7b:db:c2:26:0d:6c:19:a9:ea:bc:10:34: e1:3b:cf:a2:1e:1f:41:91:da:c6:71:7b:78:2a:e2: bf:4a:c3:0d:25:ab:00:00:70:31:2b:16:00:ec:a8: 1d:e5:64:49:76:61:52:31:18:4b:39:fb:a9:3c:c6: 84:a8:e4:f5:81:b4:43:10:da:2a:fc:56:79:aa:d7: 33:06:bc:5d:68:bb:b6:2c:85:12:2c:fd:cb:dd:71: 8b:99:09:34:cc:cd:b5:14:4e:a1:33:14:b5:86:6c: 4d:38:95:74:a1:53:f2:0c:0a:26:be:1f:66:1e:44: 1e:1b:5b:bc:8b:23:f7:65:ed:15:cd:13:4c:a7:ef: 81:c1:bf:dd:c4:3c:28:94:ae:66:c4:19:56:7d:7e: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C3:BE:50:27:EA:D9:C1:B6:95:20:3F:3C:4D:2E:50:A9:DF:D7:A6 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:62:9f:08:10:3d:fe:9f:73:d6:a4:d4:a5:75:52:a9:77: e5:00:22:36:2a:0f:eb:5d:27:03:51:c2:3b:0b:ca:c3:3c:64: f7:6a:3a:69:b6:ea:37:a1:02:f8:e9:c6:2f:56:f4:18:ae:21: 92:0e:cb:73:77:e6:eb:ab:c0:fa:e6:c3:3d:e4:7b:20:a9:20: 92:3c:fc:cc:81:cb:80:10:c2:b6:c4:ea:8e:75:1b:e5:18:3c: f9:c6:87:de:ad:64:15:e6:9e:5b:d7:cc:23:07:28:32:12:8d: 2a:3b:1f:18:5d:a5:fe:88:97:47:36:04:fa:b1:6d:ae:ba:48: 5d:73:c4:6b:32:3e:be:07:c0:59:71:fd:16:ab:4e:13:e2:51: e5:20:2c:f4:23:bf:c6:33:05:67:0d:94:85:1d:9d:c6:f9:d7: 18:62:da:c3:1b:f8:e2:e2:4e:c9:85:bb:2e:2c:51:53:4a:69: 67:4c:28:6c:6a:6b:b5:3e:c2:0e:99:12:90:1f:26:c0:af:d0: fe:3e:6c:bb:09:f4:b0:c3:5d:5e:d2:b9:d9:6a:0c:2f:85:58: a1:54:56:30:3b:ef:a9:db:f5:45:90:72:d1:c1:79:17:f6:e0: de:e7:8b:d3:97:40:a8:c4:95:9d:9d:ed:b2:66:88:bd:73:53: 7d:c6:79:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjUxMjIyMTg1OTIwWhcNMjUxMjI5MTg1OTIwWjAYMRYwFAYD VQQDDA02OTQ5OTUwOS1iMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEgEcjKz9L5pWQJdvIXnIwmF/qcGnRhLt+Io6FjFGbxb/gjHQ3yGEue6+t8L SaMLZp574Uw2EXcZsAyLcJ3WSZtuXBP/E8VvW2tgBly6GKiCYg2uRtElXch+CU4q +OEtBcmfF3hgs6OSIBl728ImDWwZqeq8EDThO8+iHh9BkdrGcXt4KuK/SsMNJasA AHAxKxYA7Kgd5WRJdmFSMRhLOfupPMaEqOT1gbRDENoq/FZ5qtczBrxdaLu2LIUS LP3L3XGLmQk0zM21FE6hMxS1hmxNOJV0oVPyDAomvh9mHkQeG1u8iyP3Ze0VzRNM p++Bwb/dxDwolK5mxBlWfX5jVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPDvlAn 6tnBtpUgPzxNLlCp39emMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAEmKfCBA9/p9z1qTUpXVSqXflACI2Kg/rXScDUcI7C8rDPGT3ajpp tuo3oQL46cYvVvQYriGSDstzd+brq8D65sM95HsgqSCSPPzMgcuAEMK2xOqOdRvl GDz5xoferWQV5p5b18wjBygyEo0qOx8YXaX+iJdHNgT6sW2uukhdc8RrMj6+B8BZ cf0Wq04T4lHlICz0I7/GMwVnDZSFHZ3G+dcYYtrDG/ji4k7JhbsuLFFTSmlnTChs amu1PsIOmRKQHybAr9D+Pmy7CfSww11e0rnZagwvhVihVFYwO++p2/VFkHLRwXkX 9uDe54vTl0CoxJWdne2yZoi9c1N9xnn/ -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:38 2025 by rpki-client