This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: mzSbUSz+nGVN/I4lBz3fkOE4F1UF5T2Sjf1/TvtRKP4= Subject key identifier: B3:B6:9C:03:D1:FB:50:D9:5F:90:E8:93:60:EB:9F:00:EB:00:03:60 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 01D3 Signing time: Tue 23 Dec 2025 01:55:19 +0000 Manifest this update: Tue 23 Dec 2025 01:55:18 +0000 Manifest next update: Tue 30 Dec 2025 01:55:18 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: mBZbtdWAS5tSuyDceVU9HgjREsRlNJOz/9QvZzPZ0fY=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Dec 23 01:55:18 2025 GMT Not After : Dec 30 01:55:18 2025 GMT Subject: CN=6949f687-e765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:8d:f5:d1:da:ec:eb:5c:e0:1e:9a:3d:43: 6a:56:15:82:93:0b:bc:12:36:a1:83:4f:0d:45:df: d2:bc:cd:9f:4b:b0:dc:e2:2d:b0:07:ae:81:0d:e3: b1:06:c5:d1:d2:ba:68:46:ad:38:ca:f5:e3:2d:1d: d1:96:1d:1d:03:86:f3:bf:bc:ac:82:0a:7e:1f:03: 6b:4c:87:05:dd:fa:90:6f:d0:31:25:23:58:59:07: 7d:1a:41:35:79:d4:3e:c2:48:30:63:e3:24:46:02: 97:4a:87:37:97:23:3c:e0:6b:b6:8d:77:f3:85:e9: d7:79:2a:14:c1:ef:5d:4b:72:28:f8:c2:67:af:2d: 7d:30:0c:ba:1c:6c:4d:99:50:d0:43:8e:7a:da:94: 19:f2:72:75:ad:90:68:64:ce:1b:52:8a:3a:65:8b: 82:f3:8d:b1:ff:9d:3f:9d:65:ed:c9:f0:c1:8e:4e: 19:6a:df:3f:c3:85:68:fa:61:67:19:b9:15:e0:33: 4d:d7:b3:8d:ed:30:d8:21:8e:51:a0:7b:65:8d:9d: be:6b:e3:7a:4b:4a:d8:df:35:de:e0:04:27:50:fc: d9:4f:b0:08:0c:22:19:e1:06:48:c9:bd:df:ec:f1: 20:6e:db:24:aa:3e:1c:0a:97:ac:e7:b2:22:3d:be: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:9C:03:D1:FB:50:D9:5F:90:E8:93:60:EB:9F:00:EB:00:03:60 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:be:4c:bb:c2:d4:4f:a1:60:48:4d:37:40:87:22:c0:01: bd:45:de:5e:44:ff:9b:9e:77:b9:07:f2:c1:3e:62:c3:ce:23: c9:e0:07:9f:fd:1d:9f:39:7a:36:37:da:33:43:e5:ec:a3:a1: b9:de:df:a2:7d:e0:d4:26:43:fe:7f:75:3e:a2:eb:44:3b:2b: c1:ad:0c:69:00:a5:f5:72:ab:f0:52:ed:1b:e7:f7:78:55:cf: 31:48:80:2a:fb:fd:3e:4e:39:6c:a0:48:f7:ff:24:00:bb:3e: 9c:8e:38:fa:be:9c:b7:50:31:17:cf:ce:dc:ec:eb:d2:57:0b: bb:6d:a0:56:a4:ef:87:ef:da:e8:cd:21:9b:19:51:19:f8:12: af:69:6c:42:2b:98:70:18:88:9c:bd:ab:25:51:de:4e:dc:14: 61:db:5f:30:e6:f2:fa:46:fe:14:6e:a4:95:87:1c:bc:dd:fa: b6:68:61:ec:7d:79:64:48:8c:59:43:8f:cb:54:ad:e5:bc:98: 2e:94:4d:f2:3a:b3:e4:aa:22:cd:31:da:b4:d4:b2:14:3e:e5: ab:50:30:55:01:55:50:7e:55:76:7b:4e:f1:40:cb:c0:da:17: f0:b4:15:e5:ee:bd:48:49:30:4a:62:45:6f:7a:3f:76:4f:81: 77:7e:e0:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUxMjIzMDE1NTE4WhcNMjUxMjMwMDE1NTE4WjAYMRYwFAYD VQQDDA02OTQ5ZjY4Ny1lNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocKN9dHa7Otc4B6aPUNqVhWCkwu8Ejahg08NRd/SvM2fS7Dc4i2wB66BDeOx BsXR0rpoRq04yvXjLR3Rlh0dA4bzv7ysggp+HwNrTIcF3fqQb9AxJSNYWQd9GkE1 edQ+wkgwY+MkRgKXSoc3lyM84Gu2jXfzhenXeSoUwe9dS3Io+MJnry19MAy6HGxN mVDQQ4562pQZ8nJ1rZBoZM4bUoo6ZYuC842x/50/nWXtyfDBjk4Zat8/w4Vo+mFn GbkV4DNN17ON7TDYIY5RoHtljZ2+a+N6S0rY3zXe4AQnUPzZT7AIDCIZ4QZIyb3f 7PEgbtskqj4cCpes57IiPb5w1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO2nAPR +1DZX5Dok2DrnwDrAANgMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWeb5Mu8LUT6FgSE03QIciwAG9Rd5eRP+bnne5B/LBPmLDziPJ4Aef /R2fOXo2N9ozQ+Xso6G53t+ifeDUJkP+f3U+outEOyvBrQxpAKX1cqvwUu0b5/d4 Vc8xSIAq+/0+TjlsoEj3/yQAuz6cjjj6vpy3UDEXz87c7OvSVwu7baBWpO+H79ro zSGbGVEZ+BKvaWxCK5hwGIicvaslUd5O3BRh218w5vL6Rv4UbqSVhxy83fq2aGHs fXlkSIxZQ4/LVK3lvJgulE3yOrPkqiLNMdq01LIUPuWrUDBVAVVQflV2e07xQMvA 2hfwtBXl7r1ISTBKYkVvej92T4F3fuBC -----END CERTIFICATE-----Generated at Tue Dec 23 04:11:47 2025 by rpki-client