This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft File: 3UhfmiMRbUEQwHvThx70phTsTSw.mft (raw, json) Hash identifier: ru+E2oAhaAhEezavnMoYRlKKcV/p6M9N/PSzoGNBAdM= Subject key identifier: 38:88:8A:63:A8:13:75:74:5D:B1:34:53:DD:E7:7C:60:22:26:9A:F8 Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft Manifest number: 0F Signing time: Fri 19 Dec 2025 06:53:20 +0000 Manifest this update: Fri 19 Dec 2025 06:53:20 +0000 Manifest next update: Fri 26 Dec 2025 06:53:20 +0000 Files and hashes: 1: 3UhfmiMRbUEQwHvThx70phTsTSw.crl (hash: h0NG9GiWhuXVQHsVMbERCtQbIj001Np5RzdY+Zy8hK8=) 2: DAC133B0C8EC11F08ED15548C4F9AE02.roa (hash: PjuAZHymRLgjyU1+dD4M+di6u+meaNL5ZJGfrmfJ0m8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Validity Not Before: Dec 19 06:53:20 2025 GMT Not After : Dec 26 06:53:20 2025 GMT Subject: CN=6944f660-46e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:bb:de:78:31:18:ef:1d:9b:42:f9:93:19: 0f:7f:cc:8c:21:74:78:52:0d:be:b0:72:27:7b:77: c5:b1:ff:a4:b8:8f:d4:d9:07:b0:f5:84:1b:e0:b1: d8:3d:20:5b:99:b6:c3:b2:4b:00:44:f2:7e:7c:ec: f8:09:37:66:0d:14:8f:ae:24:cd:ed:67:2b:69:d3: d4:c6:b3:5e:ef:f6:ca:82:9d:07:c4:8c:59:bb:e9: 98:f1:2e:65:ba:6e:ce:5f:c6:a9:fc:8c:f9:45:5d: 97:b4:be:e3:6e:3a:b2:72:02:89:de:54:04:da:83: 9c:48:77:0f:44:0e:8b:ac:1c:15:47:56:a0:76:18: 0a:c9:25:d5:cd:ef:a4:28:c0:c1:1f:1d:8c:6b:ef: a0:bd:fa:c4:c1:f4:bd:dc:00:b2:00:b3:95:1b:6e: 3b:41:e0:da:d6:f5:22:18:14:82:6f:46:59:c4:58: 03:81:99:a8:78:33:01:54:aa:0a:c5:bc:40:9b:f9: 2a:4f:1a:e9:2a:e2:77:a7:2a:ca:87:8c:89:59:bf: 56:a1:ac:4a:95:84:40:d0:7d:09:d7:c1:ca:41:f7: 60:94:41:69:74:40:d6:b1:7e:53:e1:de:46:9b:95: da:76:32:77:44:07:0b:b3:4e:d9:59:df:30:2d:7a: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:88:8A:63:A8:13:75:74:5D:B1:34:53:DD:E7:7C:60:22:26:9A:F8 X509v3 Authority Key Identifier: keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:fe:fa:8b:68:86:db:fb:87:46:53:20:47:ed:02:d2:4c:98: ca:8f:2b:fe:7a:af:2b:47:8c:8a:cf:0c:d2:21:71:87:fb:9d: 82:70:26:42:86:ed:32:c5:8f:54:0d:4b:42:02:67:56:20:f7: 89:8a:ff:19:ff:6c:72:1b:b0:0a:85:ec:f6:e0:bf:e3:6c:ba: 41:4a:68:d0:6d:b5:00:a6:6d:de:9e:15:30:c0:23:9e:c7:19: 7a:96:c8:19:8d:f5:6c:b2:fe:51:61:aa:f6:40:55:3f:d0:3c: 07:59:36:d3:7a:f4:d1:d0:dc:71:86:46:1f:6d:01:1a:08:49: 2d:a3:51:d7:ec:74:03:70:55:5c:85:a0:5c:04:ad:23:5a:d5: f0:b2:ce:0f:01:e6:b5:af:32:a4:67:84:96:aa:f4:72:c8:2a: f5:3a:5e:46:ce:4b:7e:a2:50:b9:2c:ae:71:6f:86:5d:1e:81: fb:d9:1e:79:1f:1b:fd:d3:f3:97:7e:c2:48:cb:5a:43:ba:4f: ac:7e:0f:7f:05:70:93:55:ab:6b:f5:f0:fe:e7:1e:3c:ae:fa: 26:20:8d:6f:99:87:67:1e:ed:21:e0:a2:32:f7:52:99:a9:82: c6:c4:0f:a3:36:fe:35:ae:f0:94:c8:c0:72:18:e7:df:95:e4: ce:5b:d4:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzFBQTExMC8GA1UEBRMoREQ0ODVGOUEyMzExNkQ0MTEwQzA3QkQzODcxRUY0QTYx NEVDNEQyQzAeFw0yNTEyMTkwNjUzMjBaFw0yNTEyMjYwNjUzMjBaMBgxFjAUBgNV BAMMDTY5NDRmNjYwLTQ2ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8BrveeDEY7x2bQvmTGQ9/zIwhdHhSDb6wcid7d8Wx/6S4j9TZB7D1hBvgsdg9 IFuZtsOySwBE8n587PgJN2YNFI+uJM3tZytp09TGs17v9sqCnQfEjFm76ZjxLmW6 bs5fxqn8jPlFXZe0vuNuOrJyAoneVATag5xIdw9EDousHBVHVqB2GArJJdXN76Qo wMEfHYxr76C9+sTB9L3cALIAs5UbbjtB4NrW9SIYFIJvRlnEWAOBmah4MwFUqgrF vECb+SpPGukq4nenKsqHjIlZv1ahrEqVhEDQfQnXwcpB92CUQWl0QNaxflPh3kab ldp2MndEBwuzTtlZ3zAteuPdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOIiKY6gT dXRdsTRT3ed8YCImmvgwHwYDVR0jBBgwFoAU3UhfmiMRbUEQwHvThx70phTsTSww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMUFBLzhBRkJEQjYwQzhF QjExRjA4NjE4N0I4MEM0RjlBRTAyLzNVaGZtaU1SYlVFUXdIdlRoeDcwcGhUc1RT dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1VoZm1pTVJiVUVRd0h2VGh4NzBwaFRzVFN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MUFBLzhBRkJEQjYwQzhFQjExRjA4NjE4N0I4MEM0RjlBRTAyLzNVaGZtaU1SYlVF UXdIdlRoeDcwcGhUc1RTdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKb++otohtv7h0ZTIEftAtJMmMqPK/56rytHjIrPDNIhcYf7nYJwJkKG 7TLFj1QNS0ICZ1Yg94mK/xn/bHIbsAqF7Pbgv+NsukFKaNBttQCmbd6eFTDAI57H GXqWyBmN9Wyy/lFhqvZAVT/QPAdZNtN69NHQ3HGGRh9tARoISS2jUdfsdANwVVyF oFwErSNa1fCyzg8B5rWvMqRnhJaq9HLIKvU6XkbOS36iULksrnFvhl0egfvZHnkf G/3T85d+wkjLWkO6T6x+D38FcJNVq2v18P7nHjyu+iYgjW+Zh2ce7SHgojL3Upmp gsbED6M2/jWu8JTIwHIY59+V5M5b1EQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:14:38 2025 by rpki-client