This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: PZptiSLidkUQX5SUu0oEc4+85OZghPRWYHbJ2DiBAAU= Subject key identifier: E0:24:D6:EF:E8:51:60:59:DC:D2:B1:F7:EF:FF:1B:4B:30:CC:5F:E6 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: EB Signing time: Tue 23 Dec 2025 04:21:29 +0000 Manifest this update: Tue 23 Dec 2025 04:21:28 +0000 Manifest next update: Tue 30 Dec 2025 04:21:28 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: ByHBzxb1K49zdmFQnPrHVcjDEesZuju9gdt+ZfsLiFQ=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: bXsYiFs/1LAAvnPFWc2oF5LhYtHyhSVuRh2eDok+L9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Dec 23 04:21:28 2025 GMT Not After : Dec 30 04:21:28 2025 GMT Subject: CN=694a18c9-9671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:b6:bf:11:99:3d:4f:0f:ea:a4:31:ca:04: 67:88:1b:ca:3e:d1:e8:35:c3:ea:50:6e:21:55:d0: 0d:73:5c:f5:06:e0:7c:00:82:af:c5:1a:30:13:46: fe:57:b7:f3:a6:9a:7e:08:e4:36:ea:8b:2b:a2:b2: 59:db:c2:4b:c9:f3:46:aa:25:49:09:db:95:39:40: 6a:bd:c4:8d:6e:38:6f:fe:f9:c2:a4:6e:f7:b6:e9: ee:8b:7f:46:20:f1:7f:cb:99:4a:1d:55:13:a5:98: fd:88:de:0f:27:b0:8c:69:21:64:bc:0c:e4:46:b0: 8e:be:7f:12:b6:b9:df:6c:95:17:11:9e:07:3b:aa: 92:fc:52:7e:55:d4:4f:c3:60:f7:55:69:dd:56:3d: 10:9b:1b:a5:1a:a1:b6:03:db:69:42:32:63:1d:64: ba:0d:14:8b:3c:22:b7:9d:4f:02:03:9f:54:8e:c6: 4b:e1:b8:fe:15:63:9e:3b:d2:86:8b:03:1b:b5:29: 76:1d:9c:56:9e:74:ae:1a:42:8b:17:c4:74:96:74: ef:ca:0c:bb:5a:5f:6f:b4:6f:d4:7d:78:45:9a:ee: 43:73:4d:35:37:78:34:6b:10:cd:9a:43:a2:aa:fa: ea:87:46:ff:7c:85:73:08:9c:3a:ac:69:12:99:1d: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:D6:EF:E8:51:60:59:DC:D2:B1:F7:EF:FF:1B:4B:30:CC:5F:E6 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:c6:05:95:95:cc:66:35:d6:6e:43:c3:70:8a:bc:67:da: 20:f0:24:cd:0a:aa:8d:e3:f7:13:a8:69:60:47:44:ed:da:ce: 81:e4:46:f4:46:1d:a4:02:e5:c0:df:a7:a5:73:05:7e:89:e4: 19:ce:77:85:67:c0:16:71:f2:f5:6b:6b:21:5f:67:d8:8b:85: 1a:73:f0:61:d9:64:9c:a8:3f:7a:c9:00:1c:6c:8b:cb:4f:43: 4b:5c:f3:2a:12:26:fb:d4:64:ed:c4:7c:32:42:c4:45:f3:cc: 6b:22:91:60:55:2c:59:aa:f8:a2:fd:5d:d2:cc:07:1e:80:d9: 93:50:e2:1d:3a:4a:43:d5:2d:21:b9:3f:ad:0d:1e:21:ad:28: 77:d4:cc:aa:4f:fd:57:3f:26:32:1f:ac:7a:55:36:28:66:99: f1:ca:94:f7:43:cc:b7:d9:c8:a1:64:8a:7b:dc:a0:e7:00:03: 9f:32:6c:75:d6:57:14:8c:c0:eb:8b:82:a3:ea:0b:78:35:d9: df:95:9f:56:84:a7:d1:5b:eb:aa:6a:6d:38:d4:a0:50:db:40: e1:53:a4:39:04:e8:e5:69:a9:0d:ab:f5:b4:5b:4e:16:35:20: 6a:31:4b:80:48:0c:85:dd:52:6a:9e:61:e6:ef:21:6d:c6:8d: 72:16:28:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUxMjIzMDQyMTI4WhcNMjUxMjMwMDQyMTI4WjAYMRYwFAYD VQQDDA02OTRhMThjOS05NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncG2vxGZPU8P6qQxygRniBvKPtHoNcPqUG4hVdANc1z1BuB8AIKvxRowE0b+ V7fzppp+COQ26osrorJZ28JLyfNGqiVJCduVOUBqvcSNbjhv/vnCpG73tunui39G IPF/y5lKHVUTpZj9iN4PJ7CMaSFkvAzkRrCOvn8StrnfbJUXEZ4HO6qS/FJ+VdRP w2D3VWndVj0QmxulGqG2A9tpQjJjHWS6DRSLPCK3nU8CA59UjsZL4bj+FWOeO9KG iwMbtSl2HZxWnnSuGkKLF8R0lnTvygy7Wl9vtG/UfXhFmu5Dc001N3g0axDNmkOi qvrqh0b/fIVzCJw6rGkSmR1pAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAk1u/o UWBZ3NKx9+//G0swzF/mMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoO8YFlZXMZjXWbkPDcIq8Z9og8CTNCqqN4/cTqGlgR0Tt2s6B5Eb0 Rh2kAuXA36elcwV+ieQZzneFZ8AWcfL1a2shX2fYi4Uac/Bh2WScqD96yQAcbIvL T0NLXPMqEib71GTtxHwyQsRF88xrIpFgVSxZqvii/V3SzAcegNmTUOIdOkpD1S0h uT+tDR4hrSh31MyqT/1XPyYyH6x6VTYoZpnxypT3Q8y32cihZIp73KDnAAOfMmx1 1lcUjMDri4Kj6gt4NdnflZ9WhKfRW+uqam041KBQ20DhU6Q5BOjlaakNq/W0W04W NSBqMUuASAyF3VJqnmHm7yFtxo1yFigP -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:15 2025 by rpki-client