This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: LUKiRiUL5UpgIcbsbYQImblGTsa9qDA8WrueOcg5EQk= Subject key identifier: 61:88:66:16:2A:E8:E3:26:A5:62:20:B1:25:86:FD:D0:A2:4A:AD:8D Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 01D3 Signing time: Tue 23 Dec 2025 01:54:02 +0000 Manifest this update: Tue 23 Dec 2025 01:54:02 +0000 Manifest next update: Tue 30 Dec 2025 01:54:02 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: nj1SBnyNX3WF657KxCoC/J4pD46varHT5TVZ4dKOXVs=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: HYndX1hAZ5qMkJtz/BumiLhkqJaaPEm/ej37V7+JGfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: Dec 23 01:54:02 2025 GMT Not After : Dec 30 01:54:02 2025 GMT Subject: CN=6949f63a-8e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:b1:95:1c:97:b6:9d:74:89:15:bb:3b:c1: dc:aa:5a:c2:07:a1:29:c8:ad:51:2a:76:a6:ad:3b: 09:ed:26:28:36:c1:7b:5f:02:a9:1a:8d:3f:a1:a4: 56:2d:9c:60:7d:ea:0b:69:2b:8e:82:48:4d:54:eb: 0f:2b:99:d0:ae:9b:62:69:e1:b1:41:98:46:47:63: 96:ea:b3:d4:af:31:85:69:4e:90:ae:64:af:6f:67: e3:b4:bc:c3:f4:e0:c0:ee:c4:cf:5f:f9:61:cf:a6: 79:a6:a7:a3:41:7e:d7:18:03:c4:28:f7:c0:97:51: ae:23:c3:a3:7f:4d:fc:d7:2f:04:de:cb:c9:f3:16: b0:e2:fd:71:c8:a7:d7:ee:35:20:86:d2:69:bb:47: f7:0f:03:ac:2b:41:14:ce:38:fd:4d:43:7f:3e:59: 2a:57:a2:74:54:e4:db:30:7e:23:f8:01:a2:7a:3a: cf:8c:2c:d5:ed:22:bc:e2:ee:30:00:68:85:39:66: ba:e7:c7:6e:3e:9a:59:de:4b:7c:8d:40:54:ae:6c: 9d:54:bf:1d:e8:48:65:b2:72:2f:6b:f7:5b:6a:8e: 10:0d:a5:f9:f3:d5:1d:fb:76:e8:29:85:d9:74:f9: 9b:2e:13:2a:a4:9e:da:2c:fe:6c:b2:89:ac:bf:95: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:88:66:16:2A:E8:E3:26:A5:62:20:B1:25:86:FD:D0:A2:4A:AD:8D X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f2:c6:1f:b4:51:f4:38:7f:a6:24:0e:1d:f4:ae:05:9a:9c: 47:e5:22:16:5e:f4:6f:8e:37:ff:2b:6d:cc:c8:a2:6f:50:29: d7:18:17:cc:b8:5c:bd:a0:71:0a:1a:c3:3a:33:76:a2:87:4b: 14:06:9f:e8:d4:39:76:8b:e8:43:34:f1:91:e1:85:0f:ac:96: 41:9a:3f:57:58:54:e3:27:13:5d:24:64:ed:3f:29:83:d8:07: ac:b6:8b:79:6e:ea:32:1a:ad:1d:04:52:fd:94:47:e6:3d:2c: 37:e1:c2:17:6a:b5:cd:2c:e7:5a:4e:81:dd:0f:20:ee:89:67: 64:7c:f8:cf:41:6c:92:d2:68:85:a3:e8:75:95:c0:76:7d:d0: 59:36:9b:69:2e:01:fb:00:88:3a:2a:9d:37:73:7c:c3:f3:39: e1:21:9a:d9:23:e4:aa:0b:5c:12:86:88:be:31:db:30:c8:26: 04:91:a5:96:86:ea:a5:81:ee:0c:aa:4e:88:c8:b5:05:4b:1a: 1f:3d:48:6c:18:30:fd:78:43:28:d6:88:d2:54:5c:d8:ef:5f: 2e:ea:51:3b:67:6d:05:c7:b7:e1:19:e5:32:0c:e7:24:df:fa: 6f:53:81:2c:19:28:cd:e5:fe:5b:0b:4a:92:24:64:61:b2:66: aa:b8:f9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUxMjIzMDE1NDAyWhcNMjUxMjMwMDE1NDAyWjAYMRYwFAYD VQQDDA02OTQ5ZjYzYS04ZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxCxlRyXtp10iRW7O8HcqlrCB6EpyK1RKnamrTsJ7SYoNsF7XwKpGo0/oaRW LZxgfeoLaSuOgkhNVOsPK5nQrptiaeGxQZhGR2OW6rPUrzGFaU6QrmSvb2fjtLzD 9ODA7sTPX/lhz6Z5pqejQX7XGAPEKPfAl1GuI8Ojf0381y8E3svJ8xaw4v1xyKfX 7jUghtJpu0f3DwOsK0EUzjj9TUN/PlkqV6J0VOTbMH4j+AGiejrPjCzV7SK84u4w AGiFOWa658duPppZ3kt8jUBUrmydVL8d6EhlsnIva/dbao4QDaX589Ud+3boKYXZ dPmbLhMqpJ7aLP5ssomsv5VDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGIZhYq 6OMmpWIgsSWG/dCiSq2NMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw8sYftFH0OH+mJA4d9K4FmpxH5SIWXvRvjjf/K23MyKJvUCnXGBfM uFy9oHEKGsM6M3aih0sUBp/o1Dl2i+hDNPGR4YUPrJZBmj9XWFTjJxNdJGTtPymD 2Aestot5buoyGq0dBFL9lEfmPSw34cIXarXNLOdaToHdDyDuiWdkfPjPQWyS0miF o+h1lcB2fdBZNptpLgH7AIg6Kp03c3zD8znhIZrZI+SqC1wShoi+MdswyCYEkaWW huqlge4Mqk6IyLUFSxofPUhsGDD9eEMo1ojSVFzY718u6lE7Z20Fx7fhGeUyDOck 3/pvU4EsGSjN5f5bC0qSJGRhsmaquPkK -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:50 2025 by rpki-client