This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json) Hash identifier: h9gAmrM6dL5ZotUqRJw2RkoiotD5d/iNIVuDh7LBzHQ= Subject key identifier: 7E:8E:5B:50:C9:20:5D:D0:A7:FE:34:4F:38:88:88:5C:99:D3:19:A3 Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft Manifest number: 027D Signing time: Fri 19 Dec 2025 00:47:36 +0000 Manifest this update: Fri 19 Dec 2025 00:47:36 +0000 Manifest next update: Fri 26 Dec 2025 00:47:36 +0000 Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: ShSNGKWVpqtQWJB0PPjcariQz2xalZKWiXsiaGk/VgY=) 2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: Dec 19 00:47:36 2025 GMT Not After : Dec 26 00:47:36 2025 GMT Subject: CN=6944a0a8-c624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:24:12:ec:2f:82:9f:d8:5d:df:d6:e9:a6: ab:ff:81:57:cb:01:d9:a3:6e:23:d2:18:d3:2e:c0: 63:7d:b4:ee:90:c5:75:fd:e0:b7:9b:81:84:2f:93: 99:7d:f4:21:66:6e:57:f4:e9:4f:be:18:95:af:29: 36:b8:ad:6f:1e:81:96:05:2a:a8:b5:6e:81:e7:2a: 9c:c0:24:d2:d5:85:a8:0f:10:23:c5:62:0a:83:e8: 20:e6:1d:a7:09:7c:c2:98:d4:e0:14:3f:15:38:31: 20:b5:8c:3f:4c:76:2f:06:2b:e5:42:f5:0d:07:3a: a3:7f:b9:fc:44:08:9a:66:61:8b:52:15:0c:d9:cf: e0:bd:01:64:8a:b7:14:66:3a:e5:b3:a4:36:99:e6: fc:e6:6f:f7:0c:c8:75:92:51:0a:09:ba:25:69:a2: e9:29:2b:e1:17:7d:f5:48:b6:5c:6c:36:7a:94:a4: 2a:43:7a:74:19:a8:69:c7:1e:8c:e1:fa:fe:9c:66: 2f:d0:29:9f:f1:33:c9:d2:a2:86:df:3a:c2:da:7a: 4b:b0:e6:f0:f0:37:0d:bb:7e:87:a4:9c:30:bf:76: f8:57:50:5b:19:fd:b3:67:98:eb:b2:83:52:12:b2: 0a:66:c6:c4:77:02:98:e0:2d:e5:8c:8d:e2:28:38: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8E:5B:50:C9:20:5D:D0:A7:FE:34:4F:38:88:88:5C:99:D3:19:A3 X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f1:58:d3:1d:e6:6a:8d:f1:61:5b:3e:f5:14:f1:30:ff:0d: 5f:0b:b7:af:b8:9e:0d:7e:5c:63:8c:fd:28:b7:7d:f5:77:2e: 36:37:22:e6:7d:f8:ef:b3:42:9d:e7:f2:62:00:70:fe:31:4a: d3:2c:de:03:aa:d0:51:e6:24:ed:e2:17:70:14:a0:30:3f:be: 2f:79:03:b9:1f:19:6e:85:1b:5e:1d:69:7f:bf:d6:da:b0:ee: cb:6e:cf:bc:b5:36:ff:56:f9:25:8c:d6:15:bf:a9:88:06:cc: b0:fd:7e:f5:6d:09:1f:5f:d4:28:62:ae:e8:e3:16:22:39:1b: be:93:79:4e:aa:43:4e:14:4c:2f:4e:3c:f4:90:51:0a:17:16: 06:97:0c:6e:7c:86:76:6d:9c:fd:e3:33:69:e1:76:45:e9:83: 67:68:44:95:a1:8a:c4:d8:d8:ca:d6:e6:74:30:6e:d2:d0:44: fd:7f:17:47:cd:0e:36:51:69:b2:f7:27:e7:8b:90:d1:71:ec: 68:7f:e9:f7:dc:d4:ca:6b:ee:58:37:2e:6a:65:8c:ac:54:c1: 72:21:08:53:64:25:da:4e:e7:a6:24:39:cb:17:cd:9e:57:c0: ec:7a:ac:22:dd:c0:40:08:62:e2:c4:c0:8e:a9:7d:68:60:00: 1d:ac:07:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjUxMjE5MDA0NzM2WhcNMjUxMjI2MDA0NzM2WjAYMRYwFAYD VQQDDA02OTQ0YTBhOC1jNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTokEuwvgp/YXd/W6aar/4FXywHZo24j0hjTLsBjfbTukMV1/eC3m4GEL5OZ ffQhZm5X9OlPvhiVryk2uK1vHoGWBSqotW6B5yqcwCTS1YWoDxAjxWIKg+gg5h2n CXzCmNTgFD8VODEgtYw/THYvBivlQvUNBzqjf7n8RAiaZmGLUhUM2c/gvQFkircU Zjrls6Q2meb85m/3DMh1klEKCbolaaLpKSvhF331SLZcbDZ6lKQqQ3p0Gahpxx6M 4fr+nGYv0Cmf8TPJ0qKG3zrC2npLsObw8DcNu36HpJwwv3b4V1BbGf2zZ5jrsoNS ErIKZsbEdwKY4C3ljI3iKDhlwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6OW1DJ IF3Qp/40TziIiFyZ0xmjMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt8VjTHeZqjfFhWz71FPEw/w1fC7evuJ4NflxjjP0ot331dy42NyLm ffjvs0Kd5/JiAHD+MUrTLN4DqtBR5iTt4hdwFKAwP74veQO5HxluhRteHWl/v9ba sO7Lbs+8tTb/VvkljNYVv6mIBsyw/X71bQkfX9QoYq7o4xYiORu+k3lOqkNOFEwv Tjz0kFEKFxYGlwxufIZ2bZz94zNp4XZF6YNnaESVoYrE2NjK1uZ0MG7S0ET9fxdH zQ42UWmy9yfni5DRcexof+n33NTKa+5YNy5qZYysVMFyIQhTZCXaTuemJDnLF82e V8Dseqwi3cBACGLixMCOqX1oYAAdrAcL -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:43 2025 by rpki-client