This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json) Hash identifier: dcqdeyyzHy67sLqBs12KKNOmJqWYBYqsFAMAWn8abE8= Subject key identifier: F1:B8:F9:3F:90:2C:24:C0:EA:B7:7B:5C:2F:A3:2C:C3:84:6D:CD:99 Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft Manifest number: 73 Signing time: Tue 23 Dec 2025 05:49:57 +0000 Manifest this update: Tue 23 Dec 2025 05:49:57 +0000 Manifest next update: Tue 30 Dec 2025 05:49:57 +0000 Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: LickBFx/6q6bXeo4n8pMlp+La598FWx77ie2g+uNB3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Validity Not Before: Dec 23 05:49:57 2025 GMT Not After : Dec 30 05:49:57 2025 GMT Subject: CN=694a2d85-1a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:f6:9d:34:be:fc:50:1e:71:e9:ea:ac:9e: ee:be:74:7a:68:b7:cf:6e:60:5b:88:6c:88:e0:ae: ea:52:4f:ca:86:b7:db:3c:0d:9a:63:36:bc:24:7f: 8e:0b:cf:63:bf:32:dc:43:78:9d:d1:7c:47:40:fd: 31:3f:d3:e8:aa:f5:02:3d:5e:14:82:4e:49:0e:b8: 4b:28:48:27:f4:ff:09:8f:de:ca:a9:e9:47:6e:1a: e4:a0:50:0b:ac:12:84:9e:f4:cf:fe:4c:4b:99:21: 96:f2:70:5d:4a:93:0a:32:b3:d9:c4:ae:1e:34:2f: 55:27:c3:7b:61:0c:5c:fa:af:a0:ad:ac:9f:95:76: ed:36:9a:7a:38:22:e9:f2:ad:19:35:72:1f:2f:f3: fd:21:8a:14:4f:98:a8:7a:dc:58:1d:50:70:77:ba: 33:40:2e:32:da:a9:46:08:3e:2f:d8:ce:6b:24:80: 36:e0:8c:b0:0b:dd:de:01:24:7f:61:44:dc:9d:44: 07:73:89:42:79:57:d7:c7:80:0d:dd:af:60:17:9c: bf:95:b6:ff:07:f3:90:12:0e:33:77:84:23:06:f2: 89:a2:70:92:87:53:06:d9:37:bc:df:1a:11:48:fa: 63:41:b2:74:14:b8:ae:a6:9e:7f:1f:6d:c1:c4:2f: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B8:F9:3F:90:2C:24:C0:EA:B7:7B:5C:2F:A3:2C:C3:84:6D:CD:99 X509v3 Authority Key Identifier: keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b0:1a:fb:0f:fc:cd:0d:b0:75:86:ac:5e:82:69:7f:5c:b5: 90:6d:19:60:02:5f:81:bf:b1:9b:7f:3f:1e:80:71:45:c9:49: 09:c1:f8:5e:b7:25:37:70:11:4c:5d:ea:80:ff:27:54:14:e6: f8:e3:43:c9:a9:a2:37:c1:09:f8:db:0d:70:66:05:bb:75:7c: b1:e4:4b:44:0d:89:e2:ab:fc:df:74:7e:ae:0e:53:95:29:f7: 2f:26:9f:5d:f2:9a:6a:da:49:db:8c:0c:5c:80:2f:43:20:97: ed:08:53:a1:e4:b7:54:38:b1:6a:5e:5a:ff:bb:25:e2:e8:2d: 64:0a:02:50:73:db:fa:54:38:ef:b1:ba:ca:44:12:fd:80:dd: 06:d2:02:27:76:69:d3:0d:6a:55:19:ec:a2:e7:87:25:ea:c4: e7:78:d4:92:7f:a2:ac:4d:74:bb:48:65:3e:29:6a:fc:0f:7a: ea:f0:b6:d1:f7:3a:ce:9c:7c:20:58:62:67:0f:9e:b6:cf:1d: 77:cc:4a:e9:4e:bf:7b:e0:c2:30:ab:55:cf:a9:5a:80:29:41: 6a:78:ff:c7:57:39:a8:ff:77:2f:d9:ce:64:0c:49:fe:b6:3f: dd:9e:bd:be:19:64:ba:d1:58:97:e4:f2:15:fd:e5:fe:54:a3: 40:a9:48:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTgyRDExMC8GA1UEBRMoRENDQjQ2RUFBRERDRDczRjVBQUZBRTBCM0YwMDJFRDky MEMwRTg3RTAeFw0yNTEyMjMwNTQ5NTdaFw0yNTEyMzAwNTQ5NTdaMBgxFjAUBgNV BAMMDTY5NGEyZDg1LTFhODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQsPadNL78UB5x6eqsnu6+dHpot89uYFuIbIjgrupST8qGt9s8DZpjNrwkf44L z2O/MtxDeJ3RfEdA/TE/0+iq9QI9XhSCTkkOuEsoSCf0/wmP3sqp6UduGuSgUAus EoSe9M/+TEuZIZbycF1Kkwoys9nErh40L1Unw3thDFz6r6CtrJ+Vdu02mno4Iuny rRk1ch8v8/0hihRPmKh63FgdUHB3ujNALjLaqUYIPi/YzmskgDbgjLAL3d4BJH9h RNydRAdziUJ5V9fHgA3dr2AXnL+Vtv8H85ASDjN3hCMG8omicJKHUwbZN7zfGhFI +mNBsnQUuK6mnn8fbcHEL53ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8bj5P5As JMDqt3tcL6Msw4RtzZkwHwYDVR0jBBgwFoAU3MtG6q3c1z9ar64LPwAu2SDA6H4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxODJELzQwNzQ0OEJBM0I4 NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM010RzZxM2MxejlhcjY0TFB3QXUyU0RBNkg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx ODJELzQwNzQ0OEJBM0I4NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5 YXI2NExQd0F1MlNEQTZINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFuwGvsP/M0NsHWGrF6CaX9ctZBtGWACX4G/sZt/Px6AcUXJSQnB+F63 JTdwEUxd6oD/J1QU5vjjQ8mpojfBCfjbDXBmBbt1fLHkS0QNieKr/N90fq4OU5Up 9y8mn13ymmraSduMDFyAL0Mgl+0IU6Hkt1Q4sWpeWv+7JeLoLWQKAlBz2/pUOO+x uspEEv2A3QbSAid2adMNalUZ7KLnhyXqxOd41JJ/oqxNdLtIZT4pavwPeurwttH3 Os6cfCBYYmcPnrbPHXfMSulOv3vgwjCrVc+pWoApQWp4/8dXOaj/dy/ZzmQMSf62 P92evb4ZZLrRWJfk8hX95f5Uo0CpSIw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:40 2025 by rpki-client