This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: WaLyYZTSRF3Zpnb54uSHP+rAuOH5DqfhQoeOcT/eUK4= Subject key identifier: 8C:22:CA:BC:3B:DC:F7:DE:5E:CC:32:B2:A8:F6:B7:C9:12:5A:74:89 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 157B Signing time: Sun 28 Dec 2025 16:31:23 +0000 Manifest this update: Sun 28 Dec 2025 16:31:23 +0000 Manifest next update: Sun 04 Jan 2026 16:31:23 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: In2clIth1B1e4LqbSfWpeAStJ9AZRly5y4X/DnGQ4ow=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 16:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5507 (0x1583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Dec 28 16:31:23 2025 GMT Not After : Jan 4 16:31:23 2026 GMT Subject: CN=69515b5b-87d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:e2:f6:0f:4e:70:e9:a9:b7:3e:0a:ea:0f: fa:86:67:92:cb:e6:03:38:54:bc:9d:d4:d2:a9:07: eb:f0:82:f8:28:3a:82:81:5e:09:be:0a:3b:50:85: e9:27:8a:3b:03:dd:67:2d:4b:9f:ea:b0:f7:d3:88: f9:73:bc:55:d1:40:8d:6f:c8:ef:af:ac:b3:1c:27: a8:b4:31:53:fa:2a:8d:ba:fb:96:8e:b5:71:fb:c2: a2:fb:80:64:74:8b:a8:d6:39:bd:1b:78:5f:4f:1f: 26:3d:47:70:b9:37:22:92:f0:ca:77:18:55:d3:e6: c0:3f:fc:2c:63:81:c8:94:53:a2:57:1f:c9:27:4e: a7:ac:19:01:43:79:8c:03:b5:0e:31:d1:7c:ec:1e: 17:ed:0d:12:4a:6b:e5:03:57:d0:54:25:6d:8f:bb: d4:2f:ab:5c:30:f6:ed:c4:db:17:0d:c2:86:a4:6e: 33:85:a8:26:b5:e3:4f:e7:ff:75:28:bc:d7:ca:95: c0:6b:d5:f2:64:9d:a9:48:55:51:4e:59:46:94:0d: a1:c3:67:6e:cc:67:d8:e3:b3:ee:92:99:1f:8f:16: c6:9e:a1:6a:51:1f:56:74:4a:19:cd:89:e1:26:d6: 96:84:e2:af:27:0f:db:18:1b:26:75:cf:6c:5b:25: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:22:CA:BC:3B:DC:F7:DE:5E:CC:32:B2:A8:F6:B7:C9:12:5A:74:89 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:32:1c:7c:c5:48:75:8b:2f:ba:be:7b:95:de:72:55:89:63: e1:99:5e:2b:2e:ab:82:74:88:01:02:6e:00:d1:94:fe:a8:c9: cc:34:25:5a:b2:89:a0:3c:bc:f4:22:ca:fc:f3:44:1e:90:c8: da:7f:e0:5f:b1:ce:f9:82:81:d6:5b:b6:19:27:08:09:ac:fb: 2d:c9:cc:5d:c1:07:21:79:29:68:7f:31:79:95:fc:d5:78:d5: 18:05:02:35:e3:f3:ed:fd:9c:60:de:22:15:f0:7a:54:30:c6: 6b:fa:8a:05:54:0a:27:7b:f8:dd:1f:a8:f2:71:58:9d:80:cc: 71:ee:65:40:a6:b5:0a:82:ac:fb:77:60:45:70:6f:0e:e8:aa: b3:96:65:28:87:c1:c2:90:95:46:34:de:99:eb:5c:e5:35:7f: 2c:80:c1:b6:8c:78:12:ad:57:f9:b3:21:bf:a5:af:e9:5a:71: 2d:28:b6:be:43:68:a4:8e:bb:67:00:0b:a2:8e:c8:2a:07:a3: 03:db:5d:d5:c2:49:53:ac:2d:5f:4b:50:d6:93:c3:3a:73:fa: c4:ad:c6:63:83:82:01:e8:57:08:d2:97:e9:8b:86:37:7f:38: b1:72:0f:d2:20:8b:84:22:e1:8a:64:01:8c:ed:85:50:cc:f0: 82:4a:e0:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUxMjI4MTYzMTIzWhcNMjYwMTA0MTYzMTIzWjAYMRYwFAYD VQQDDA02OTUxNWI1Yi04N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8ni9g9OcOmptz4K6g/6hmeSy+YDOFS8ndTSqQfr8IL4KDqCgV4Jvgo7UIXp J4o7A91nLUuf6rD304j5c7xV0UCNb8jvr6yzHCeotDFT+iqNuvuWjrVx+8Ki+4Bk dIuo1jm9G3hfTx8mPUdwuTcikvDKdxhV0+bAP/wsY4HIlFOiVx/JJ06nrBkBQ3mM A7UOMdF87B4X7Q0SSmvlA1fQVCVtj7vUL6tcMPbtxNsXDcKGpG4zhagmteNP5/91 KLzXypXAa9XyZJ2pSFVRTllGlA2hw2duzGfY47PukpkfjxbGnqFqUR9WdEoZzYnh JtaWhOKvJw/bGBsmdc9sWyWKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwiyrw7 3PfeXswysqj2t8kSWnSJMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjMhx8xUh1iy+6vnuV3nJViWPhmV4rLquCdIgBAm4A0ZT+qMnMNCVa somgPLz0Isr880QekMjaf+Bfsc75goHWW7YZJwgJrPstycxdwQcheSlofzF5lfzV eNUYBQI14/Pt/Zxg3iIV8HpUMMZr+ooFVAone/jdH6jycVidgMxx7mVAprUKgqz7 d2BFcG8O6KqzlmUoh8HCkJVGNN6Z61zlNX8sgMG2jHgSrVf5syG/pa/pWnEtKLa+ Q2ikjrtnAAuijsgqB6MD213VwklTrC1fS1DWk8M6c/rErcZjg4IB6FcI0pfpi4Y3 fzixcg/SIIuEIuGKZAGM7YVQzPCCSuAb -----END CERTIFICATE-----Generated at Sun Dec 28 23:40:04 2025 by rpki-client