This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: 0jbeKxy7FMW56YRUoj8Cb9IhMRCsDdkwjOxBMTZen6E= Subject key identifier: 32:AA:3D:1D:77:FF:FE:7E:9F:A1:36:DC:DE:F0:A1:51:98:9F:50:6E Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 01D4 Signing time: Wed 03 Dec 2025 00:48:47 +0000 Manifest this update: Wed 03 Dec 2025 00:48:46 +0000 Manifest next update: Wed 10 Dec 2025 00:48:46 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 9Wx32L+AVlV4+J2+MpzMkGWJagVTZesT+cCNaAbb+W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Dec 3 00:48:46 2025 GMT Not After : Dec 10 00:48:46 2025 GMT Subject: CN=692f88ee-099f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:ca:92:e7:5f:8f:26:f6:37:2c:ae:2d:9a: a1:c9:20:91:1c:76:ab:c9:d7:20:07:1d:e9:a7:79: 75:e1:85:08:e5:10:74:bb:2f:d0:16:bc:38:2b:ca: 4d:70:23:67:b6:75:df:a5:32:fe:e1:56:55:ec:f0: 0f:83:c1:b4:48:eb:41:5c:ff:6d:42:ce:c2:54:9a: a6:c0:0b:cd:6f:f5:c1:1d:63:b0:0c:e6:63:a1:80: ea:03:9d:4d:79:12:52:d8:56:74:a2:2a:25:c6:2e: 53:c5:51:11:70:0c:1c:e9:55:f6:28:c1:62:54:10: 27:7d:b5:88:b4:15:b8:b6:b3:93:3b:2f:1c:9d:70: 4b:32:07:96:3d:a7:b2:27:bc:fa:c6:ad:bb:a5:fd: 4f:af:f7:df:19:db:af:90:42:40:7b:4f:dc:ff:18: ec:fb:e7:1a:55:ee:ce:aa:e4:84:03:ab:0c:8c:54: 14:bf:ce:9d:46:95:ec:2b:96:24:9b:9c:df:0c:90: d2:22:c6:80:fa:55:37:15:eb:38:06:58:33:a8:bb: e4:51:29:c4:14:88:ff:41:ce:4b:bf:f9:e4:9c:9a: f8:70:3b:03:e5:e0:94:8a:40:09:23:31:71:a6:28: 32:49:7c:1a:fa:28:57:c1:5a:d6:27:52:e4:51:16: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:3D:1D:77:FF:FE:7E:9F:A1:36:DC:DE:F0:A1:51:98:9F:50:6E X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:3a:6b:99:ba:c6:ad:a5:4c:dc:4a:f0:05:14:62:1a:2a:36: 20:ea:9d:99:dc:2c:a6:3d:98:21:a8:a9:84:29:27:b0:5f:78: 85:36:26:af:5a:9c:a9:37:66:f9:03:f8:e2:4c:b2:e0:86:63: 6a:6f:b9:ac:7c:36:a6:1a:f7:1a:d2:ca:38:28:42:40:0f:6a: 2e:ae:de:3a:e0:24:09:86:eb:a1:cd:f4:46:33:14:fc:42:1b: 37:67:5b:99:bc:05:c8:3f:cb:d0:c0:cc:d6:70:dd:38:12:42: 71:b4:5d:3b:40:01:1f:32:9e:3d:9d:63:56:55:59:f7:17:6e: 08:4f:48:b9:bb:5d:c8:9b:dc:ea:ca:e0:19:b6:9f:d3:fa:30: 9a:81:ac:08:9c:00:18:92:f2:c2:27:67:a3:d0:ef:8f:09:84: 74:95:d4:2c:92:cc:2b:93:cb:fc:13:e9:5d:9a:ef:49:2e:a5: 5f:62:cf:66:a6:58:25:f3:67:9b:e7:62:95:71:3f:c2:8a:39: f7:bb:e1:20:45:83:e0:55:97:ce:bb:e2:03:e9:b9:b2:6e:d3: a0:be:3e:a5:92:a3:cd:f8:04:69:b2:0b:65:22:c8:b3:1b:8f: a2:a7:f0:7b:27:a5:a0:0a:3e:1b:a8:0c:fa:1b:f5:c2:fd:87: 50:9f:0c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUxMjAzMDA0ODQ2WhcNMjUxMjEwMDA0ODQ2WjAYMRYwFAYD VQQDEw02OTJmODhlZS0wOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gXKkudfjyb2NyyuLZqhySCRHHarydcgBx3pp3l14YUI5RB0uy/QFrw4K8pN cCNntnXfpTL+4VZV7PAPg8G0SOtBXP9tQs7CVJqmwAvNb/XBHWOwDOZjoYDqA51N eRJS2FZ0oiolxi5TxVERcAwc6VX2KMFiVBAnfbWItBW4trOTOy8cnXBLMgeWPaey J7z6xq27pf1Pr/ffGduvkEJAe0/c/xjs++caVe7OquSEA6sMjFQUv86dRpXsK5Yk m5zfDJDSIsaA+lU3Fes4BlgzqLvkUSnEFIj/Qc5Lv/nknJr4cDsD5eCUikAJIzFx pigySXwa+ihXwVrWJ1LkURYVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKqPR13 //5+n6E23N7woVGYn1BuMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOOmuZusatpUzcSvAFFGIaKjYg6p2Z3CymPZghqKmEKSewX3iFNiav WpypN2b5A/jiTLLghmNqb7msfDamGvca0so4KEJAD2ourt464CQJhuuhzfRGMxT8 Qhs3Z1uZvAXIP8vQwMzWcN04EkJxtF07QAEfMp49nWNWVVn3F24IT0i5u13Im9zq yuAZtp/T+jCagawInAAYkvLCJ2ej0O+PCYR0ldQskswrk8v8E+ldmu9JLqVfYs9m plgl82eb52KVcT/Cijn3u+EgRYPgVZfOu+ID6bmybtOgvj6lkqPN+ARpsgtlIsiz G4+ip/B7J6WgCj4bqAz6G/XC/YdQnwx6 -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:41 2025 by rpki-client