This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: eFGUmln4pBTEhPssqBB3R+ZtHvLlZ/Lwk06NylMgsH0= Subject key identifier: CF:52:2F:FC:97:DC:6A:3F:77:BF:71:6A:AC:E2:6F:62:47:99:B3:B8 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 0812 Signing time: Wed 26 Nov 2025 20:02:09 +0000 Manifest this update: Wed 26 Nov 2025 20:02:08 +0000 Manifest next update: Wed 03 Dec 2025 20:02:08 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: wS+Z2Xp2f3ww8suWcmfL3SwkTx2/N5l0G9txAzeC6as=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: U1bQn0cREbDCYE8np1FOgxq7ZLPbZTRmflBcUUu8DFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Dec 2025 20:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Nov 26 20:02:08 2025 GMT Not After : Dec 3 20:02:08 2025 GMT Subject: CN=69275cc0-7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:81:39:34:a3:23:e9:d0:0e:86:cc:60:ab: af:6a:a3:62:e7:40:1b:e9:67:ea:aa:e9:40:d8:be: d4:15:3b:33:a5:5e:b2:a4:b6:b4:cf:81:29:ec:80: 45:28:51:2c:c7:f1:fc:85:6b:f2:63:c1:24:04:36: c5:e5:06:ea:ec:47:15:08:f6:15:56:53:35:e3:f0: 27:0e:4e:2e:8d:ed:62:89:6f:1d:22:a2:e0:cb:5c: 8c:95:50:f2:1e:a3:3b:f9:53:e4:49:ca:09:bf:57: 9e:68:35:1c:0e:76:5c:ae:53:85:61:6f:0a:01:58: 6c:c8:22:93:03:5b:b9:e6:fc:1f:ee:23:a9:42:74: 56:dd:a2:48:da:4a:36:8b:d8:75:1c:b5:b1:52:03: 7c:11:6b:20:d5:04:a9:a4:28:5a:e3:f8:54:82:3d: 0e:b4:cf:8b:47:89:a2:7c:33:0d:32:4f:88:b1:d3: 48:65:e1:e2:27:f2:ee:68:c3:15:64:ea:5b:66:3b: 40:d6:57:18:fd:d5:80:4c:98:61:ac:6f:63:f9:80: 7d:93:39:d5:f9:f1:cc:63:89:31:38:9b:11:0a:66: be:af:a4:86:9e:23:44:e6:fc:4e:8b:6b:eb:5f:d8: f3:ab:d8:fb:f6:07:65:e1:d2:5c:0d:ad:a0:41:66: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:52:2F:FC:97:DC:6A:3F:77:BF:71:6A:AC:E2:6F:62:47:99:B3:B8 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3b:54:9c:6c:64:3e:97:33:27:0b:de:25:8a:85:9e:4a:b4: 8a:07:eb:80:07:9b:6d:40:41:e8:6f:d9:b3:0a:fd:c4:33:07: ca:48:1e:f8:ba:8e:07:5d:a9:f3:00:df:b5:4f:4b:37:a4:2d: 94:c5:db:44:32:d2:6e:1f:b9:45:26:f1:a2:fd:02:1e:65:d7: b4:ea:b7:a0:a4:90:0d:27:20:0a:70:00:93:34:21:68:c7:62: 46:1a:f5:42:9a:d9:4d:18:c4:93:cb:3c:59:05:a0:df:98:b5: 4a:3b:09:1c:2d:00:c8:7b:46:b9:54:16:b4:c2:30:c5:fa:dc: cd:9c:e5:f3:3f:f1:a7:43:73:44:82:27:52:4b:0a:26:c2:08: 42:dc:90:0a:df:0f:ca:02:5d:f4:a5:b4:ab:57:0a:3a:87:55: 07:e9:8c:73:90:67:4e:33:af:4b:6f:94:28:cc:f6:9f:91:f2: c8:cc:97:ad:9b:f1:d7:d2:b4:83:f9:3a:9b:93:9e:e6:76:35: 6b:ee:72:89:2c:5b:e7:0e:38:e8:ea:16:0c:81:a0:61:7e:7a: 05:3f:24:f3:75:fa:d0:45:d8:70:3b:aa:22:d9:e4:1e:bc:ca: 02:7d:87:50:f5:d0:21:00:6f:61:df:d5:df:8c:74:77:bb:b9: 5a:01:aa:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUxMTI2MjAwMjA4WhcNMjUxMjAzMjAwMjA4WjAYMRYwFAYD VQQDEw02OTI3NWNjMC03YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02+BOTSjI+nQDobMYKuvaqNi50Ab6WfqqulA2L7UFTszpV6ypLa0z4Ep7IBF KFEsx/H8hWvyY8EkBDbF5Qbq7EcVCPYVVlM14/AnDk4uje1iiW8dIqLgy1yMlVDy HqM7+VPkScoJv1eeaDUcDnZcrlOFYW8KAVhsyCKTA1u55vwf7iOpQnRW3aJI2ko2 i9h1HLWxUgN8EWsg1QSppCha4/hUgj0OtM+LR4mifDMNMk+IsdNIZeHiJ/LuaMMV ZOpbZjtA1lcY/dWATJhhrG9j+YB9kznV+fHMY4kxOJsRCma+r6SGniNE5vxOi2vr X9jzq9j79gdl4dJcDa2gQWY7DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9SL/yX 3Go/d79xaqzib2JHmbO4MB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSO1ScbGQ+lzMnC94lioWeSrSKB+uAB5ttQEHob9mzCv3EMwfKSB74 uo4HXanzAN+1T0s3pC2UxdtEMtJuH7lFJvGi/QIeZde06regpJANJyAKcACTNCFo x2JGGvVCmtlNGMSTyzxZBaDfmLVKOwkcLQDIe0a5VBa0wjDF+tzNnOXzP/GnQ3NE gidSSwomwghC3JAK3w/KAl30pbSrVwo6h1UH6YxzkGdOM69Lb5QozPafkfLIzJet m/HX0rSD+Tqbk57mdjVr7nKJLFvnDjjo6hYMgaBhfnoFPyTzdfrQRdhwO6oi2eQe vMoCfYdQ9dAhAG9h39XfjHR3u7laAarn -----END CERTIFICATE-----Generated at Fri Nov 28 05:42:51 2025 by rpki-client