This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: TiIzIe9D0WZfayArH0iY6yZwkGJVBdCnv3mWxdMRfYE= Subject key identifier: E9:BE:25:D9:40:80:AF:64:59:AD:25:38:09:54:26:73:84:5E:78:36 Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 0398 Signing time: Fri 19 Dec 2025 00:01:51 +0000 Manifest this update: Fri 19 Dec 2025 00:01:51 +0000 Manifest next update: Fri 26 Dec 2025 00:01:51 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: noKEqkgahDSU6vKr4u+WVZfUD8wMENWuioeY/snVFhI=) 2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: rSusYrdxwzMZ/h0NAAbSd/+Fpawy/2pH16Z/11B0adc=) 3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: 0dwKgZ8jlIMiRytgvBci6vNzPpvAs9BdKSq60BEmluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Dec 19 00:01:51 2025 GMT Not After : Dec 26 00:01:51 2025 GMT Subject: CN=694495ef-51b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:6e:30:61:b8:87:f7:86:86:3c:33:03:cf: 4f:97:cc:a7:47:c8:b2:e0:64:35:8b:1b:65:98:c7: 16:6b:59:2e:d9:6e:06:c4:8c:fc:b2:58:5e:56:64: d6:62:79:bf:18:e4:ef:3a:e9:24:d1:12:b5:f6:7d: a7:2d:70:04:ba:a4:d3:c2:62:ce:05:31:fe:7b:c6: 47:4d:da:0c:38:fe:10:08:f8:ab:9c:b9:ff:b9:37: 28:8f:68:60:38:f1:24:45:17:b1:a6:74:24:df:70: f4:7f:84:48:e4:8b:20:ca:84:0f:fd:dc:1f:ef:53: b0:35:78:57:4c:4f:b5:2e:50:ad:20:e2:5c:cf:36: 48:2a:91:f4:b3:07:d6:c3:e3:a7:e8:66:f0:0e:58: 06:8c:aa:2e:66:81:65:4f:54:29:3e:a7:72:fb:4f: dd:ca:b5:50:de:71:66:21:15:a5:a4:e1:f2:3b:e8: 14:e1:d2:da:cc:f0:42:f6:b7:bb:4b:89:38:23:d1: e9:58:77:9f:68:bc:b9:30:0b:20:39:36:5b:49:8d: 59:14:3c:9c:bd:d3:6a:1e:62:f6:c0:50:94:12:fd: 6a:7a:ea:32:d7:09:e2:8e:10:81:ea:ed:57:9d:f8: 2b:8b:36:1e:28:ae:41:84:66:87:19:88:42:6c:a6: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BE:25:D9:40:80:AF:64:59:AD:25:38:09:54:26:73:84:5E:78:36 X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0c:bc:65:80:68:27:8a:75:03:59:58:cc:d6:39:58:8a:ab: 1b:4c:ee:4c:32:26:f3:b5:62:e5:d0:36:b6:55:15:36:6e:8e: 99:a8:76:12:6a:0d:00:0c:f1:7a:1d:4c:4a:17:63:d1:53:72: 48:be:43:5c:3c:f3:ca:d6:a3:29:4f:c5:c4:1d:0b:1d:38:01: a9:70:ee:13:6d:91:c6:1a:b1:9d:96:1a:c1:76:b1:05:5c:18: 20:12:41:26:a6:c5:b8:62:dd:49:21:44:de:97:33:3f:d0:c0: 8c:78:24:91:cb:5f:b0:c6:59:46:c7:cb:71:1a:bb:6b:e0:5a: 47:57:2c:f3:78:80:01:e7:5e:3c:9d:3c:f5:f4:0c:73:55:26: b3:15:75:b0:28:ee:23:7b:a4:d5:ac:83:11:f6:74:a8:53:b9: fe:f9:01:d7:03:7a:26:ee:ff:9e:a2:f6:d1:6a:48:6a:13:42: f4:7c:b2:43:27:d2:18:73:e2:2f:b9:82:12:67:54:0d:7b:16: c0:b3:47:58:3b:70:9a:10:23:6b:91:97:3f:0f:55:2a:e4:89: 0b:61:ac:fc:6c:a0:6a:90:d3:64:58:46:40:8a:1b:2b:dc:a3: d9:56:12:1d:bc:51:24:d4:60:88:09:4e:aa:9f:91:54:6d:87: 50:45:f6:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjUxMjE5MDAwMTUxWhcNMjUxMjI2MDAwMTUxWjAYMRYwFAYD VQQDDA02OTQ0OTVlZi01MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzduMGG4h/eGhjwzA89Pl8ynR8iy4GQ1ixtlmMcWa1ku2W4GxIz8slheVmTW Ynm/GOTvOukk0RK19n2nLXAEuqTTwmLOBTH+e8ZHTdoMOP4QCPirnLn/uTcoj2hg OPEkRRexpnQk33D0f4RI5IsgyoQP/dwf71OwNXhXTE+1LlCtIOJczzZIKpH0swfW w+On6GbwDlgGjKouZoFlT1QpPqdy+0/dyrVQ3nFmIRWlpOHyO+gU4dLazPBC9re7 S4k4I9HpWHefaLy5MAsgOTZbSY1ZFDycvdNqHmL2wFCUEv1qeuoy1wnijhCB6u1X nfgrizYeKK5BhGaHGYhCbKaAEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm+JdlA gK9kWa0lOAlUJnOEXng2MB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/DLxlgGgninUDWVjM1jlYiqsbTO5MMibztWLl0Da2VRU2bo6ZqHYS ag0ADPF6HUxKF2PRU3JIvkNcPPPK1qMpT8XEHQsdOAGpcO4TbZHGGrGdlhrBdrEF XBggEkEmpsW4Yt1JIUTelzM/0MCMeCSRy1+wxllGx8txGrtr4FpHVyzzeIAB5148 nTz19AxzVSazFXWwKO4je6TVrIMR9nSoU7n++QHXA3om7v+eovbRakhqE0L0fLJD J9IYc+IvuYISZ1QNexbAs0dYO3CaECNrkZc/D1Uq5IkLYaz8bKBqkNNkWEZAihsr 3KPZVhIdvFEk1GCICU6qn5FUbYdQRfb8 -----END CERTIFICATE-----Generated at Fri Dec 19 18:34:37 2025 by rpki-client