This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: VSUaKcH8hpIgbh8RhSDdwRLuqQPqbR1u25NlZgGCYBo= Subject key identifier: 2D:0D:61:C9:8E:2A:27:C4:59:A3:18:BC:53:1C:DC:D1:46:21:9C:A6 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: F9 Signing time: Fri 19 Dec 2025 04:19:18 +0000 Manifest this update: Fri 19 Dec 2025 04:19:17 +0000 Manifest next update: Fri 26 Dec 2025 04:19:17 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: +ZVoWvkpJHABJ5LZZz/3PrwiBrJaCqu+NAMNTXCPJ9Y=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: hjZJ+P+DDZEo0McDoaqGVpFBbzW2XOruqYUk9+Z9bak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Dec 19 04:19:17 2025 GMT Not After : Dec 26 04:19:17 2025 GMT Subject: CN=6944d245-c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:b2:db:2a:03:58:18:c7:34:31:f2:18:71: e2:9c:dd:2f:03:8f:7b:6f:4d:d8:60:3d:50:ac:1d: 49:1d:ae:d0:bb:f4:da:d1:a3:87:33:ba:77:f2:94: 37:64:6a:fb:68:d5:d1:37:3c:2b:f6:77:df:d4:92: 48:ea:2a:57:6e:3f:16:61:14:57:ab:46:5f:74:19: b4:a6:1b:b3:95:cc:5d:81:db:28:6c:09:24:4b:bb: 39:2e:54:37:19:41:bd:e0:d7:9a:79:ba:80:1a:ec: c2:ca:d1:55:37:2a:7d:ce:91:ae:bd:03:5c:0f:ec: 03:8c:db:25:d6:f3:49:32:29:04:06:bb:44:09:96: 96:da:8a:e9:cc:16:6b:ad:16:1f:98:ea:f7:8c:70: 9d:06:b2:2d:39:1d:a9:fe:15:49:14:fa:da:42:e9: 80:74:ed:5f:74:12:9a:72:47:eb:98:6a:8f:e3:d8: 2f:c5:36:1a:e5:9d:08:47:d9:53:a5:e8:24:f2:0e: 07:c4:a9:75:88:fd:c1:7c:c3:81:d4:c9:da:05:f6: 3c:c6:13:c1:4a:80:09:f8:67:04:71:57:62:1c:c0: de:dd:2e:f9:3c:8f:e1:3d:3a:23:64:c7:8b:20:d0: f7:dd:ca:68:0a:37:f4:97:a5:e0:ed:6a:49:58:d2: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0D:61:C9:8E:2A:27:C4:59:A3:18:BC:53:1C:DC:D1:46:21:9C:A6 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6c:4a:a0:1d:b7:91:4b:8a:2f:ae:f6:fc:10:8f:4b:89:9c: 98:21:fa:8b:f7:1f:32:13:fd:a7:e1:bb:e2:d9:63:ce:55:cd: b1:32:59:75:a1:17:8b:3c:28:c3:3a:b2:e6:6a:e1:df:22:33: f6:ad:fd:5d:dc:13:d6:70:63:2f:5e:c2:d0:c3:e6:61:e3:2f: 5f:49:4d:54:ab:47:54:46:8c:4c:20:62:2f:24:ac:c3:40:06: 81:40:e6:2e:b5:63:73:ad:5f:8d:be:b5:89:49:d2:63:7d:a9: 72:55:45:5d:4c:f7:f8:7c:3e:08:29:0e:70:5d:c3:4e:78:0d: d0:ca:e4:1a:a3:7b:42:9e:2d:80:69:ae:0a:f4:ff:b6:cc:0b: 8c:5b:3a:44:46:b8:15:2b:4a:0a:b9:e9:f2:ba:8e:1e:1e:36: ac:3f:2a:79:34:98:86:83:93:ec:34:88:6b:68:e8:79:ed:be: 32:e8:f2:f6:2e:da:b6:87:c5:72:85:e1:61:eb:d4:b1:4f:9f: a6:9a:0b:ff:1d:ae:83:3c:fc:82:52:24:21:64:01:72:3a:16: ea:3a:96:a3:e6:53:a7:cf:de:10:4a:53:a3:af:a6:54:57:40: 73:ee:7a:23:b8:81:83:16:7a:32:17:86:69:11:ea:3e:01:db: 3d:f9:08:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjUxMjE5MDQxOTE3WhcNMjUxMjI2MDQxOTE3WjAYMRYwFAYD VQQDDA02OTQ0ZDI0NS1jOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3+y2yoDWBjHNDHyGHHinN0vA497b03YYD1QrB1JHa7Qu/Ta0aOHM7p38pQ3 ZGr7aNXRNzwr9nff1JJI6ipXbj8WYRRXq0ZfdBm0phuzlcxdgdsobAkkS7s5LlQ3 GUG94NeaebqAGuzCytFVNyp9zpGuvQNcD+wDjNsl1vNJMikEBrtECZaW2orpzBZr rRYfmOr3jHCdBrItOR2p/hVJFPraQumAdO1fdBKackfrmGqP49gvxTYa5Z0IR9lT pegk8g4HxKl1iP3BfMOB1MnaBfY8xhPBSoAJ+GcEcVdiHMDe3S75PI/hPTojZMeL IND33cpoCjf0l6Xg7WpJWNJQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0NYcmO KifEWaMYvFMc3NFGIZymMB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKbEqgHbeRS4ovrvb8EI9LiZyYIfqL9x8yE/2n4bvi2WPOVc2xMll1 oReLPCjDOrLmauHfIjP2rf1d3BPWcGMvXsLQw+Zh4y9fSU1Uq0dURoxMIGIvJKzD QAaBQOYutWNzrV+NvrWJSdJjfalyVUVdTPf4fD4IKQ5wXcNOeA3QyuQao3tCni2A aa4K9P+2zAuMWzpERrgVK0oKuenyuo4eHjasPyp5NJiGg5PsNIhraOh57b4y6PL2 Ltq2h8VyheFh69SxT5+mmgv/Ha6DPPyCUiQhZAFyOhbqOpaj5lOnz94QSlOjr6ZU V0Bz7nojuIGDFnoyF4ZpEeo+Ads9+Qi4 -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:52 2025 by rpki-client