This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: KrrkyufUoLU/bJyJUM/78Ff+PTAAE4oRYhttcAeyNfI= Subject key identifier: E1:E4:8E:FD:C2:D1:9F:D2:61:BC:04:84:C3:35:FE:B1:ED:65:40:73 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: E3 Signing time: Sun 21 Dec 2025 04:36:42 +0000 Manifest this update: Sun 21 Dec 2025 04:36:41 +0000 Manifest next update: Sun 28 Dec 2025 04:36:41 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: lQZRs1C0mCQoM77dIF8nfMnNgssPw7vrucLN+wIdKzs=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: sBDPY7rsFbT6fhu5rc+2MguV1coxbEaU8Tzb3L7ehlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Dec 21 04:36:41 2025 GMT Not After : Dec 28 04:36:41 2025 GMT Subject: CN=6947795a-d618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:77:07:3b:ab:c7:3a:4c:19:c4:35:59:5d: a4:14:eb:1f:fd:34:22:d9:1a:30:66:fb:c7:b1:38: ad:18:39:8a:ed:33:70:6a:66:30:f7:62:c9:90:13: a4:50:8b:d7:29:30:a6:bc:59:1b:32:72:1d:19:83: 24:66:26:2b:dc:40:1b:3a:a1:eb:79:eb:4c:89:a0: 65:85:ec:3f:ae:29:fb:33:b3:86:6f:18:18:8b:83: 28:25:36:9a:82:52:54:21:88:27:8c:cb:c2:88:42: 6e:34:79:d4:15:63:15:cc:22:31:ae:64:b6:20:fa: 52:9e:bf:8b:ea:25:53:0e:14:fc:3e:31:11:6d:52: dc:1c:34:ea:b5:2b:26:df:37:98:5c:41:6b:14:e4: 50:8c:60:13:9a:29:12:e2:05:b1:86:8a:14:b6:a4: 92:ac:10:dd:ae:a3:fa:55:7c:90:77:5e:2a:37:aa: 5d:be:d7:9c:88:39:9b:6d:be:2b:e0:ed:5e:65:06: 8e:33:c5:72:73:af:ee:ba:a5:1c:06:82:39:80:25: c4:51:01:f8:77:4c:d5:31:82:11:5a:55:f6:ef:9e: 1f:a3:19:70:28:54:ce:bf:68:91:29:aa:41:07:fd: 20:d4:af:a8:a7:18:ce:7d:e0:a8:64:16:52:23:9f: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:8E:FD:C2:D1:9F:D2:61:BC:04:84:C3:35:FE:B1:ED:65:40:73 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:95:56:91:2a:3d:fb:06:41:0e:1e:de:5e:9b:e3:85:49:d0: 0c:a8:d3:34:61:7e:a5:1c:86:3d:9b:01:fe:14:13:76:40:89: 69:14:b7:42:66:d8:38:c0:c8:6c:52:d7:57:c0:36:8f:04:71: 9d:c6:57:35:b7:2e:02:d7:7f:a6:b3:34:0d:5a:bb:3d:4f:70: b6:ad:45:7f:1e:fb:ff:f6:da:97:94:63:1e:86:25:37:f4:ec: 72:4b:f4:b5:c6:e3:6d:56:e7:d0:cb:4f:1c:65:3d:17:21:02: 37:21:65:00:60:52:ca:9c:7b:47:fb:61:38:0e:46:14:cb:7d: 23:65:26:be:c9:e4:89:ac:a3:f2:af:5f:cf:dd:08:a9:1a:5a: 26:6d:c5:99:27:90:c6:39:31:58:1e:9a:81:04:31:07:8f:3e: bc:9b:4e:40:c9:45:e0:7d:a5:67:83:f7:8d:26:64:30:13:8c: 3d:af:8b:de:29:7e:34:e0:96:4e:56:1b:34:1e:30:5a:97:0a: 92:8a:d7:0f:54:1e:40:5b:9c:08:6b:67:64:1e:76:e6:ad:90: e1:52:02:80:ce:a7:c0:8f:50:18:cd:1b:08:4e:cf:2c:b2:84: 61:bd:b4:7c:d2:a9:60:72:31:36:d4:61:9d:89:2a:d5:8e:3f: 36:cb:fa:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE QTU2ODdCRjAwHhcNMjUxMjIxMDQzNjQxWhcNMjUxMjI4MDQzNjQxWjAYMRYwFAYD VQQDDA02OTQ3Nzk1YS1kNjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kp3BzurxzpMGcQ1WV2kFOsf/TQi2RowZvvHsTitGDmK7TNwamYw92LJkBOk UIvXKTCmvFkbMnIdGYMkZiYr3EAbOqHreetMiaBlhew/rin7M7OGbxgYi4MoJTaa glJUIYgnjMvCiEJuNHnUFWMVzCIxrmS2IPpSnr+L6iVTDhT8PjERbVLcHDTqtSsm 3zeYXEFrFORQjGATmikS4gWxhooUtqSSrBDdrqP6VXyQd14qN6pdvteciDmbbb4r 4O1eZQaOM8Vyc6/uuqUcBoI5gCXEUQH4d0zVMYIRWlX2754foxlwKFTOv2iRKapB B/0g1K+opxjOfeCoZBZSI5+LzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHkjv3C 0Z/SYbwEhMM1/rHtZUBzMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1 MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHlVaRKj37BkEOHt5em+OFSdAMqNM0YX6lHIY9mwH+FBN2QIlpFLdC Ztg4wMhsUtdXwDaPBHGdxlc1ty4C13+mszQNWrs9T3C2rUV/Hvv/9tqXlGMehiU3 9OxyS/S1xuNtVufQy08cZT0XIQI3IWUAYFLKnHtH+2E4DkYUy30jZSa+yeSJrKPy r1/P3QipGlombcWZJ5DGOTFYHpqBBDEHjz68m05AyUXgfaVng/eNJmQwE4w9r4ve KX404JZOVhs0HjBalwqSitcPVB5AW5wIa2dkHnbmrZDhUgKAzqfAj1AYzRsITs8s soRhvbR80qlgcjE21GGdiSrVjj82y/rJ -----END CERTIFICATE-----Generated at Tue Dec 23 02:42:21 2025 by rpki-client