This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: +SOuN9wpTjflwEKDYAMWgDv/8clKtJGTpWE3QCE234o= Subject key identifier: C5:4D:3C:C1:E0:A1:C1:EE:00:B1:A6:1F:A6:1A:A1:BA:E5:37:56:3C Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 11CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 11C4 Signing time: Sat 20 Dec 2025 16:55:41 +0000 Manifest this update: Sat 20 Dec 2025 16:55:40 +0000 Manifest next update: Sat 27 Dec 2025 16:55:40 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: vIXDq3yJxwdit0xJ73GKFrhiwWf2r7FwreckJQX3aEM=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: YS0cph8wq76C64J4nZHJA4bk+dZCMfLqLtsUpNkPe24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Dec 20 16:55:40 2025 GMT Not After : Dec 27 16:55:40 2025 GMT Subject: CN=6946d50d-9832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:06:26:9e:08:15:67:ed:b2:71:7d:17:ea: 9e:d4:71:50:c0:72:ed:dc:29:46:fa:c0:fc:a3:01: 97:6d:00:90:66:c5:cf:b9:44:69:f8:8a:44:c6:c3: b5:3c:33:7f:c6:43:57:58:18:5f:b3:6c:39:f9:66: b8:5c:37:6d:01:1e:4f:b9:52:06:aa:a8:29:e2:dc: 03:16:8c:d5:b5:a0:99:58:42:56:de:8d:6c:6e:e1: de:9b:79:b9:fe:44:01:05:d1:08:b8:69:1a:d6:4d: 71:04:d8:e6:a3:f2:7f:d3:93:8f:ea:43:19:8b:32: e6:e0:d0:f3:7b:62:76:0f:3c:63:73:af:79:6c:f6: fc:e0:86:42:21:36:f4:50:20:37:33:6f:63:de:27: bf:15:99:f3:25:f2:f8:fd:a8:72:49:30:af:a7:21: 1d:5d:b8:d6:2b:7a:97:2d:c4:d4:77:85:24:24:68: 37:ab:6b:e8:3c:5e:94:60:db:58:85:fa:4b:f1:10: e7:a7:9f:94:1e:87:d3:f6:e7:9d:f3:15:62:09:64: 17:e2:56:5c:31:fb:e6:cc:ab:40:4a:ec:32:ac:73: 1c:29:94:dc:98:24:58:98:45:d9:e4:f5:cd:85:d7: 00:3b:37:df:6c:9d:77:ed:ff:42:65:a8:6a:4e:42: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:3C:C1:E0:A1:C1:EE:00:B1:A6:1F:A6:1A:A1:BA:E5:37:56:3C X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:27:dc:46:37:c4:f5:50:0a:80:80:42:3f:f1:17:cd:71:33: 37:29:e7:2d:fe:cb:3f:68:ce:8c:b0:9f:89:4f:9f:72:ae:dc: 52:2f:27:6c:51:e7:44:8e:e4:c9:0d:43:76:e0:32:a8:00:c6: ec:19:f1:5b:e7:e4:e3:80:5d:7d:76:9c:8b:de:14:e3:80:7e: fd:7d:db:c1:00:e2:5f:b4:37:95:8d:38:d6:51:16:36:ba:30: b1:44:2e:13:9b:3f:46:63:9e:6c:eb:12:56:5a:e4:88:f4:28: 73:c2:f6:27:99:1b:ce:54:5f:0f:b5:fa:e3:46:97:75:27:7f: 11:7e:5f:18:4f:d9:f3:de:e7:35:ae:23:78:e3:c7:58:7f:0b: e0:24:7c:fc:c0:be:4e:5d:28:8b:88:0d:4b:2d:fd:05:0f:3e: fc:ef:11:2f:93:b9:3d:f4:67:43:e7:5e:d1:bf:66:f5:e8:b9: 3d:aa:06:74:ab:6b:1c:a0:54:81:d0:b9:e8:cf:5f:26:25:17: 67:ef:24:b4:5e:e4:23:b7:97:4d:a5:dd:00:0b:10:40:6b:d5: 8f:33:bb:3a:15:f6:6f:bb:1e:06:98:c1:eb:7a:5a:e8:64:e4: 64:70:b0:d6:95:33:4f:ea:82:52:52:a1:23:5d:a1:9f:ba:3b: 5b:a3:aa:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUxMjIwMTY1NTQwWhcNMjUxMjI3MTY1NTQwWjAYMRYwFAYD VQQDDA02OTQ2ZDUwZC05ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwesGJp4IFWftsnF9F+qe1HFQwHLt3ClG+sD8owGXbQCQZsXPuURp+IpExsO1 PDN/xkNXWBhfs2w5+Wa4XDdtAR5PuVIGqqgp4twDFozVtaCZWEJW3o1sbuHem3m5 /kQBBdEIuGka1k1xBNjmo/J/05OP6kMZizLm4NDze2J2Dzxjc695bPb84IZCITb0 UCA3M29j3ie/FZnzJfL4/ahySTCvpyEdXbjWK3qXLcTUd4UkJGg3q2voPF6UYNtY hfpL8RDnp5+UHofT9ued8xViCWQX4lZcMfvmzKtASuwyrHMcKZTcmCRYmEXZ5PXN hdcAOzffbJ137f9CZahqTkK9wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVNPMHg ocHuALGmH6YaobrlN1Y8MB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFJ9xGN8T1UAqAgEI/8RfNcTM3Kect/ss/aM6MsJ+JT59yrtxSLyds UedEjuTJDUN24DKoAMbsGfFb5+TjgF19dpyL3hTjgH79fdvBAOJftDeVjTjWURY2 ujCxRC4Tmz9GY55s6xJWWuSI9ChzwvYnmRvOVF8PtfrjRpd1J38Rfl8YT9nz3uc1 riN448dYfwvgJHz8wL5OXSiLiA1LLf0FDz787xEvk7k99GdD517Rv2b16Lk9qgZ0 q2scoFSB0Lnoz18mJRdn7yS0XuQjt5dNpd0ACxBAa9WPM7s6FfZvux4GmMHrelro ZORkcLDWlTNP6oJSUqEjXaGfujtbo6p9 -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:40 2025 by rpki-client