This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: NhHRrRlO/hLdu04xmPgrQdXYUKU6cnz9HuZ+TNMllLM= Subject key identifier: 13:B7:3C:5F:16:20:AB:15:2D:79:40:79:B9:7E:17:07:54:A2:31:A1 Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0E74 Signing time: Mon 22 Dec 2025 17:24:13 +0000 Manifest this update: Mon 22 Dec 2025 17:24:13 +0000 Manifest next update: Mon 29 Dec 2025 17:24:13 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: DpBIxdBxfk4TyCsel3bTFhbRL3/V53t1hzu18oz2u5Y=) 2: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: s3xebHa/jipF1DOC4szye5Ddv89P0OTkiIBe/5lBHnw=) 3: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: RzHUUv/miUNX3icVSP0eFdue2uGb59/3arKmFqnz2Fc=) 4: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: fXxSo682fkgrV8puX+aCaQZxmTNLL+rJcYQD485NwzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3727 (0xe8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Dec 22 17:24:13 2025 GMT Not After : Dec 29 17:24:13 2025 GMT Subject: CN=69497ebd-6119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c5:46:3d:d0:4b:69:ea:1d:58:7a:75:3f:d1: ec:0e:37:56:4d:c1:f5:06:61:5e:e7:ce:8c:e3:1a: 50:dd:2b:b8:10:df:00:1e:e9:35:04:03:98:b8:9e: c4:f2:0f:7d:8b:e1:35:da:eb:ef:19:a8:ee:28:74: 6f:3d:dd:dd:28:8d:1c:52:dc:54:23:33:45:63:58: 76:d3:75:06:cd:36:31:e9:8d:f1:cc:37:f6:9a:5b: b1:7b:fa:c3:22:36:89:82:37:73:cf:23:90:00:de: cb:69:98:c6:ce:cf:79:f4:84:d2:67:cb:68:6d:6e: 7e:32:c4:73:68:ca:ab:a5:dd:0d:8a:7a:a2:d9:87: b8:39:38:00:a4:26:02:b6:55:e6:1c:1a:30:6c:0c: 23:ec:35:a2:67:9a:68:23:9d:99:4a:dc:79:12:1d: d1:5d:f0:7e:5a:39:9c:9b:d9:77:d8:73:b3:b7:ca: 7b:71:1f:ec:24:9b:b5:dd:20:12:04:27:ed:81:5a: c7:5a:f5:04:67:01:ff:21:24:01:2f:45:19:c5:c2: 68:c1:8d:ac:86:0f:13:ca:e0:2d:da:99:da:ad:d9: 3a:d6:d0:92:94:ee:5e:d4:c9:f3:29:2e:18:d3:1c: 69:09:9e:c8:83:87:ba:f3:0b:5c:0c:98:6f:b9:c1: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:3C:5F:16:20:AB:15:2D:79:40:79:B9:7E:17:07:54:A2:31:A1 X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c9:3c:40:89:73:6c:d5:cf:23:e9:48:fa:95:10:cf:67:4d: 0c:5e:0a:ce:2f:a0:cd:85:72:d0:e2:24:59:6d:09:7e:11:c9: e9:f3:4c:16:6c:ee:36:6b:b8:70:39:04:fc:bb:99:d9:83:34: 0d:39:e5:9b:56:4b:45:ae:98:d1:56:33:9a:71:d4:bd:ff:86: 3b:55:63:9b:d9:38:e5:df:c5:4c:03:ad:23:3c:33:90:be:0d: 02:6b:99:b5:f7:b6:76:90:41:fc:95:b2:66:c3:0d:56:2b:1b: d4:48:5f:14:a2:93:7c:36:b3:e2:ba:dd:98:93:52:b0:eb:49: e5:bc:02:cd:4c:ec:89:ce:d5:64:ca:51:60:99:a6:69:3b:fe: 45:27:ce:7b:b5:59:28:76:39:a3:30:c4:f6:ff:e9:36:03:02: c2:51:d2:1f:55:f0:26:22:46:9d:cd:57:2a:de:cd:cd:3f:f1: 5d:11:c2:57:16:57:a3:9a:31:74:54:f4:a8:6f:5d:e5:ce:fd: 95:ee:20:13:62:ae:e5:8a:19:5d:fe:f0:0a:86:5f:07:49:b5: 01:67:42:4c:d8:08:eb:42:7a:0a:a0:59:13:b3:7b:ec:30:ff: e7:fc:c4:9c:b7:9c:b5:9c:f1:ec:2e:ec:43:85:8a:b4:a9:39: 5a:c2:6c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjUxMjIyMTcyNDEzWhcNMjUxMjI5MTcyNDEzWjAYMRYwFAYD VQQDDA02OTQ5N2ViZC02MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8VGPdBLaeodWHp1P9HsDjdWTcH1BmFe586M4xpQ3Su4EN8AHuk1BAOYuJ7E 8g99i+E12uvvGajuKHRvPd3dKI0cUtxUIzNFY1h203UGzTYx6Y3xzDf2mluxe/rD IjaJgjdzzyOQAN7LaZjGzs959ITSZ8tobW5+MsRzaMqrpd0Ninqi2Ye4OTgApCYC tlXmHBowbAwj7DWiZ5poI52ZStx5Eh3RXfB+Wjmcm9l32HOzt8p7cR/sJJu13SAS BCftgVrHWvUEZwH/ISQBL0UZxcJowY2shg8TyuAt2pnardk61tCSlO5e1MnzKS4Y 0xxpCZ7Ig4e68wtcDJhvucFBpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBO3PF8W IKsVLXlAebl+FwdUojGhMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIyTxAiXNs1c8j6Uj6lRDPZ00MXgrOL6DNhXLQ4iRZbQl+Ecnp80wW bO42a7hwOQT8u5nZgzQNOeWbVktFrpjRVjOacdS9/4Y7VWOb2Tjl38VMA60jPDOQ vg0Ca5m197Z2kEH8lbJmww1WKxvUSF8UopN8NrPiut2Yk1Kw60nlvALNTOyJztVk ylFgmaZpO/5FJ857tVkodjmjMMT2/+k2AwLCUdIfVfAmIkadzVcq3s3NP/FdEcJX FlejmjF0VPSob13lzv2V7iATYq7lihld/vAKhl8HSbUBZ0JM2AjrQnoKoFkTs3vs MP/n/MSct5y1nPHsLuxDhYq0qTlawmzA -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:07 2025 by rpki-client