This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: 1uJiB0WmAXj5+KlqGfrOJ/WtCdV+suSrWokjCqEfvsM= Subject key identifier: CB:0D:FC:47:1C:DC:B2:4C:AA:40:C2:FA:E7:07:A0:DF:7B:DC:77:86 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0CCE Signing time: Mon 22 Dec 2025 17:49:06 +0000 Manifest this update: Mon 22 Dec 2025 17:49:06 +0000 Manifest next update: Mon 29 Dec 2025 17:49:06 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: bPYmXPsqRNZx8RQ2W2xmq48Wub2kYra6Ftm5MQQgbRw=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Dec 22 17:49:06 2025 GMT Not After : Dec 29 17:49:06 2025 GMT Subject: CN=69498492-5b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:cf:04:42:3b:09:dc:2d:dc:c4:a5:42:fe: 9f:ce:3d:93:19:23:5a:d7:e3:70:41:ee:61:7c:89: 96:02:42:cd:5d:13:09:83:4f:a9:42:f0:18:26:c1: 3f:7c:33:03:f5:98:79:67:9e:57:c4:45:ac:db:67: b8:8b:99:9c:8e:2a:98:41:e5:9d:26:01:90:55:09: d8:4e:2f:58:e7:f5:ff:5a:92:e8:13:c7:d3:8f:b8: de:88:b1:95:30:85:e7:ed:c5:97:a7:f3:5b:df:bd: 6f:31:27:37:6f:32:19:de:eb:ec:dd:16:7d:db:8c: c2:bb:46:2c:2b:9b:9b:b7:26:57:2a:53:81:9d:0c: 36:af:0b:7c:a1:b3:63:cd:a6:2e:9c:ce:ce:11:ef: 7b:f9:52:3f:53:78:57:8b:cd:5a:34:17:82:6e:25: 2a:80:a3:f1:35:82:81:93:37:03:26:bf:a9:c8:4a: c4:b4:68:58:b1:5e:d1:0b:16:a2:d3:c8:c7:89:11: 82:31:8e:89:ea:f6:64:97:73:99:92:e8:b7:5a:0e: 0a:93:53:aa:a3:5e:54:58:fa:b9:43:c2:70:e1:fd: ab:bc:96:bd:6e:d5:8b:ba:07:2a:b2:00:27:bc:ab: 62:da:37:22:16:9c:1a:9a:ad:14:29:9e:90:7a:e0: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:FC:47:1C:DC:B2:4C:AA:40:C2:FA:E7:07:A0:DF:7B:DC:77:86 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:65:75:6a:d2:c7:f7:d2:cc:23:3c:50:24:74:4f:c8:94:a6: 12:a8:75:c0:c6:49:9e:8d:b0:44:dc:e3:65:a9:24:d4:8f:f8: 4a:4f:44:3c:86:34:b5:75:14:7e:dc:a2:e7:8d:f3:41:13:ed: 26:1e:dd:12:26:63:b9:33:2d:55:ff:09:aa:40:60:f9:d6:c2: 1c:41:28:be:f2:f0:39:e5:d4:bd:05:f6:8e:98:6a:46:91:02: 83:7f:5b:d2:03:a7:4e:09:55:08:c5:73:b1:a2:45:e9:31:0a: b3:2f:84:67:c5:44:ef:03:60:4d:54:8f:2a:2a:9f:e4:f5:22: f9:bb:20:c9:05:9c:0a:09:ee:58:fc:fd:61:d1:12:85:a2:02: 0e:f1:b0:0f:d8:7f:ce:85:13:1d:ad:8b:69:6d:06:7a:b9:7c: 94:e2:12:ff:ef:76:ee:a1:71:d6:9e:02:58:02:69:a8:4f:cd: 48:fb:78:cb:4a:86:83:03:31:12:c1:32:9d:38:20:44:e7:01: a4:7d:7c:62:1d:55:43:d7:ab:18:77:ed:7c:27:c3:de:72:37: de:66:5b:d3:88:47:14:91:9f:bf:9f:24:e8:2e:36:54:96:8f: 56:f0:9f:15:3b:14:c8:71:37:18:9f:b9:60:89:76:95:da:ae: ba:43:8b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjUxMjIyMTc0OTA2WhcNMjUxMjI5MTc0OTA2WjAYMRYwFAYD VQQDDA02OTQ5ODQ5Mi01YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH3PBEI7Cdwt3MSlQv6fzj2TGSNa1+NwQe5hfImWAkLNXRMJg0+pQvAYJsE/ fDMD9Zh5Z55XxEWs22e4i5mcjiqYQeWdJgGQVQnYTi9Y5/X/WpLoE8fTj7jeiLGV MIXn7cWXp/Nb371vMSc3bzIZ3uvs3RZ924zCu0YsK5ubtyZXKlOBnQw2rwt8obNj zaYunM7OEe97+VI/U3hXi81aNBeCbiUqgKPxNYKBkzcDJr+pyErEtGhYsV7RCxai 08jHiRGCMY6J6vZkl3OZkui3Wg4Kk1Oqo15UWPq5Q8Jw4f2rvJa9btWLugcqsgAn vKti2jciFpwamq0UKZ6QeuC75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsN/Ecc 3LJMqkDC+ucHoN973HeGMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ZXVq0sf30swjPFAkdE/IlKYSqHXAxkmejbBE3ONlqSTUj/hKT0Q8 hjS1dRR+3KLnjfNBE+0mHt0SJmO5My1V/wmqQGD51sIcQSi+8vA55dS9BfaOmGpG kQKDf1vSA6dOCVUIxXOxokXpMQqzL4RnxUTvA2BNVI8qKp/k9SL5uyDJBZwKCe5Y /P1h0RKFogIO8bAP2H/OhRMdrYtpbQZ6uXyU4hL/73buoXHWngJYAmmoT81I+3jL SoaDAzESwTKdOCBE5wGkfXxiHVVD16sYd+18J8PecjfeZlvTiEcUkZ+/nyToLjZU lo9W8J8VOxTIcTcYn7lgiXaV2q66Q4vj -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:48 2025 by rpki-client