This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: 57uqmFovegTeEr6+jpnVWvjYEo66u+7T9Ru76FpPD5A= Subject key identifier: 62:A5:7A:C1:C7:75:F0:BA:BB:A0:9D:33:BB:F6:50:67:FE:7C:D9:9C Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 07:02:57 +0000 Manifest this update: Fri 19 Dec 2025 07:02:57 +0000 Manifest next update: Fri 26 Dec 2025 07:02:57 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: zewR8Dv/lLJSd6wzbeeliVSB3DuCqioXf4CV3LhFqAM=) 2: 4A2FDB94DA3F11F0A550B47F8ED3641D.roa (hash: wIVDcovfjaW48Qb333j3HFf+Ank1H8nyxSPomJxTa+M=) 3: 4AB6B736DA3F11F0A550B47F8ED3641D.roa (hash: o21jgh9wurw+Q8rhFWS/mFvCRGzFGONSERAdmnvicAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Dec 19 07:02:57 2025 GMT Not After : Dec 26 07:02:57 2025 GMT Subject: CN=6944f8a1-22c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:13:c5:6b:3e:ed:2b:76:ba:77:7c:57:68: b1:2b:70:26:2e:23:cf:30:97:54:91:0a:09:04:df: 30:55:77:2e:1e:d5:a0:bf:ef:ac:89:94:49:87:53: 4a:af:47:97:5b:57:a4:8a:43:80:8c:a2:78:92:3e: d9:b2:7c:17:7a:8e:67:4d:7a:5c:83:35:94:57:44: d3:d5:97:77:74:55:d0:ac:6d:2b:b6:ee:7b:e1:39: b7:02:a0:26:6d:43:31:82:39:8b:e3:fc:5d:3d:e2: 80:f9:a6:83:6f:5f:70:9f:fb:7b:01:8a:42:bc:65: 19:0a:1b:ae:ef:ef:98:cb:e9:77:81:91:85:d7:8d: 47:99:03:9f:64:87:00:5f:bd:24:6d:b0:81:a0:2e: e1:e6:9d:a1:c8:a6:c5:7c:0a:21:35:15:15:4c:6c: 79:c7:52:36:37:de:15:d0:6a:be:ee:01:98:ce:c6: f8:ca:06:d2:25:bb:a0:28:35:f9:fa:dc:75:62:92: 98:fa:12:91:91:40:55:d1:3f:3d:3e:c1:ac:ff:4e: d8:ed:2a:1f:c6:14:b3:82:58:76:d4:2b:1e:ee:a9: 74:75:ba:e4:33:f4:b6:94:23:22:a8:f0:bd:39:9b: e6:3e:55:e1:23:0c:a7:e6:94:29:e9:95:ba:45:0e: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A5:7A:C1:C7:75:F0:BA:BB:A0:9D:33:BB:F6:50:67:FE:7C:D9:9C X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5f:d5:1e:ed:31:c8:1d:0a:b7:40:24:16:39:a6:9a:0d:11: 3e:2a:e9:4b:99:60:96:6b:65:c2:56:93:1c:5f:4d:7f:72:26: db:cb:25:38:7d:5e:2a:78:87:d1:93:7e:9f:36:18:a1:26:c0: f2:33:78:7d:6e:5f:b5:c8:34:e8:49:cd:a6:32:b1:52:94:75: 5b:e8:cb:f4:b0:7d:7b:c9:52:99:2a:8d:30:af:3f:9e:84:8d: 67:04:a8:2b:7f:27:21:45:32:4d:dd:25:83:10:03:76:11:dd: d9:1c:5b:f5:28:a3:ef:36:6a:3f:c3:75:b4:bf:75:27:7e:f0: ab:70:78:d3:f5:bd:dd:89:7a:36:b4:3f:89:d7:45:ff:0f:e2: cd:fa:8b:61:ea:97:ee:c8:30:f4:a7:a2:01:d6:24:dd:f1:8c: f0:46:7e:58:f9:ba:0d:12:13:f8:28:ef:6d:e6:78:6d:a4:29: 90:d4:a3:3b:0d:4b:3a:f7:2e:7f:d8:38:c9:50:86:47:e6:bf: 79:ce:b8:61:45:53:6a:b2:0a:1e:11:d2:c5:eb:85:6c:85:76: 2d:ce:ab:2b:3a:77:f1:c4:34:50:ca:f1:46:1c:9d:77:d7:9e: 90:23:c2:d6:49:01:b3:c1:b3:ef:c1:bf:ad:06:9c:48:d5:de: 8e:59:d7:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNTEyMTkwNzAyNTdaFw0yNTEyMjYwNzAyNTdaMBgxFjAUBgNV BAMMDTY5NDRmOGExLTIyYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0OxPFaz7tK3a6d3xXaLErcCYuI88wl1SRCgkE3zBVdy4e1aC/76yJlEmHU0qv R5dbV6SKQ4CMoniSPtmyfBd6jmdNelyDNZRXRNPVl3d0VdCsbSu27nvhObcCoCZt QzGCOYvj/F094oD5poNvX3Cf+3sBikK8ZRkKG67v75jL6XeBkYXXjUeZA59khwBf vSRtsIGgLuHmnaHIpsV8CiE1FRVMbHnHUjY33hXQar7uAZjOxvjKBtIlu6AoNfn6 3HVikpj6EpGRQFXRPz0+waz/TtjtKh/GFLOCWHbUKx7uqXR1uuQz9LaUIyKo8L05 m+Y+VeEjDKfmlCnplbpFDonlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYqV6wcd1 8Lq7oJ0zu/ZQZ/582ZwwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1f1R7tMcgdCrdAJBY5ppoNET4q6UuZYJZrZcJWkxxfTX9yJtvLJTh9 Xip4h9GTfp82GKEmwPIzeH1uX7XINOhJzaYysVKUdVvoy/SwfXvJUpkqjTCvP56E jWcEqCt/JyFFMk3dJYMQA3YR3dkcW/Uoo+82aj/DdbS/dSd+8KtweNP1vd2Jeja0 P4nXRf8P4s36i2Hql+7IMPSnogHWJN3xjPBGflj5ug0SE/go723meG2kKZDUozsN Szr3Ln/YOMlQhkfmv3nOuGFFU2qyCh4R0sXrhWyFdi3Oqys6d/HENFDK8UYcnXfX npAjwtZJAbPBs+/Bv60GnEjV3o5Z1+o= -----END CERTIFICATE-----Generated at Fri Dec 19 17:40:59 2025 by rpki-client