This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json) Hash identifier: oZnlLC8Oqyh4WTrNgxyCLpTwm6ZoP6aDJNdafHrLsTA= Subject key identifier: C7:FD:5D:D0:C7:1E:CA:9D:80:7A:4B:5B:F8:BD:E0:CD:F0:25:8A:CA Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft Manifest number: 31 Signing time: Tue 23 Dec 2025 06:30:36 +0000 Manifest this update: Tue 23 Dec 2025 06:30:36 +0000 Manifest next update: Tue 30 Dec 2025 06:30:36 +0000 Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: JhRaR55ZMH9k7mPHSbTmiT1ySdcO6twasdJf09LAITA=) 2: DA06E7EAA37511F09017D760C4F9AE02.roa (hash: wpQC06DiQ+xzlEL7d1LfcmEUWMK/NDUMBZdyTADqLL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Validity Not Before: Dec 23 06:30:36 2025 GMT Not After : Dec 30 06:30:36 2025 GMT Subject: CN=694a370c-f307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:66:8a:33:4d:d0:34:04:6e:2e:b6:11:75: 6a:cf:93:74:64:97:36:11:80:44:5a:58:9f:a5:7f: ca:d4:d6:1d:1f:11:62:13:42:be:90:93:41:46:94: a4:57:e3:f9:0f:f4:7e:57:a8:66:f9:77:cd:43:97: 89:c9:dc:03:8e:ba:d1:f4:5c:b1:20:3c:e3:9f:11: b5:b7:fc:19:c5:24:61:51:a4:34:73:0e:74:a7:d9: 23:ab:bd:5c:20:53:27:0c:56:09:75:2e:f7:72:f3: 75:96:f5:e4:2c:13:aa:04:4b:d8:f0:89:b0:23:66: 74:9e:f7:12:76:6e:43:78:de:c6:c5:9e:77:43:d6: 86:d5:d7:56:15:da:dd:77:7f:e9:68:7f:1c:3d:55: fb:83:05:fc:98:89:62:36:6d:97:05:e6:2d:76:e4: 19:52:77:2b:92:2c:d5:8e:9d:d3:fd:ec:72:13:f4: 24:08:0d:1f:4b:7d:27:7d:01:fd:5c:53:5d:5c:e9: 0e:7d:53:11:5f:bb:99:6c:fc:fb:1a:3a:06:9a:cf: b5:32:75:13:40:29:04:64:fc:86:b3:37:60:f3:f4: 99:87:ba:c4:62:6a:b5:b6:af:54:97:ee:7e:f6:3e: 2e:cb:4c:3a:8f:6e:3c:26:dd:b7:68:6d:38:5d:8b: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FD:5D:D0:C7:1E:CA:9D:80:7A:4B:5B:F8:BD:E0:CD:F0:25:8A:CA X509v3 Authority Key Identifier: keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:06:04:8a:ba:f9:1d:f8:5d:07:0a:41:e9:5f:bf:3a:d1:e1: 5d:d0:ee:4f:0b:cf:13:dc:e2:5b:98:0c:f6:81:0b:95:28:94: 5a:31:10:1f:ed:ef:6b:e0:33:96:30:c4:c9:0a:45:37:16:f4: 4d:0f:e3:39:b3:97:e7:5e:fb:62:ff:13:eb:47:e8:cf:46:74: 43:47:eb:3d:f4:66:25:3e:a9:a0:86:87:ec:42:9b:d9:ec:a5: 0e:a9:7f:93:6d:9f:af:13:16:af:54:b9:b5:e6:28:ea:25:94: dc:c5:eb:41:c6:82:cc:9d:a9:ad:58:c8:07:0e:ed:55:ae:a8: dd:d9:ed:62:f7:a7:96:c5:19:a4:76:3e:88:0f:26:2e:00:6c: 9b:f8:65:ba:5e:74:e6:a5:7d:b2:21:cf:15:c2:b9:b2:9a:fc: 8e:5a:32:e2:20:9e:84:bf:c5:09:27:70:3d:09:9b:a0:2f:9a: fd:81:d8:6c:bb:70:31:ac:08:07:15:85:9e:5e:70:b2:70:b9: 1b:f9:70:a1:e1:26:04:03:fa:6a:07:a3:ca:7a:f3:88:2a:8c: d0:bd:0e:a1:68:db:10:8e:9e:2c:20:6a:11:da:d0:15:c5:e3: 55:53:e9:d4:a3:86:2d:8c:54:68:60:0c:09:54:43:35:2e:b4: 44:b5:a3:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTE5QjExMC8GA1UEBRMoREYyMkE5QTU3QjdEM0E4QUVCMTI0RDY5MEM3OTE3MDY2 QjREQjU5RTAeFw0yNTEyMjMwNjMwMzZaFw0yNTEyMzAwNjMwMzZaMBgxFjAUBgNV BAMMDTY5NGEzNzBjLWYzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuxWaKM03QNARuLrYRdWrPk3RklzYRgERaWJ+lf8rU1h0fEWITQr6Qk0FGlKRX 4/kP9H5XqGb5d81Dl4nJ3AOOutH0XLEgPOOfEbW3/BnFJGFRpDRzDnSn2SOrvVwg UycMVgl1Lvdy83WW9eQsE6oES9jwibAjZnSe9xJ2bkN43sbFnndD1obV11YV2t13 f+lofxw9VfuDBfyYiWI2bZcF5i125BlSdyuSLNWOndP97HIT9CQIDR9LfSd9Af1c U11c6Q59UxFfu5ls/PsaOgaaz7UydRNAKQRk/IazN2Dz9JmHusRiarW2r1SX7n72 Pi7LTDqPbjwm3bdobThdi6+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx/1d0Mce yp2Aektb+L3gzfAlisowHwYDVR0jBBgwFoAU3yKppXt9OorrEk1pDHkXBmtNtZ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMTlCL0RBQjg1RTI4QTM3 MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRa NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3lLcHBYdDlPb3JyRWsxcERIa1hCbXROdFo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MTlCL0RBQjg1RTI4QTM3MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29y ckVrMXBESGtYQm10TnRaNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMGBIq6+R34XQcKQelfvzrR4V3Q7k8LzxPc4luYDPaBC5UolFoxEB/t 72vgM5YwxMkKRTcW9E0P4zmzl+de+2L/E+tH6M9GdENH6z30ZiU+qaCGh+xCm9ns pQ6pf5Ntn68TFq9UubXmKOollNzF60HGgsydqa1YyAcO7VWuqN3Z7WL3p5bFGaR2 PogPJi4AbJv4ZbpedOalfbIhzxXCubKa/I5aMuIgnoS/xQkncD0Jm6Avmv2B2Gy7 cDGsCAcVhZ5ecLJwuRv5cKHhJgQD+moHo8p684gqjNC9DqFo2xCOniwgahHa0BXF 41VT6dSjhi2MVGhgDAlUQzUutES1o6I= -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:05 2025 by rpki-client