This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: 3V/5vmAybZQuLr7vDfCshLmUUk621u8BT/EqRysCKVw= Subject key identifier: 29:E4:A6:9F:17:31:B0:58:7B:A0:67:80:B8:74:84:63:D2:25:8F:60 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 0140 Signing time: Fri 19 Dec 2025 03:33:26 +0000 Manifest this update: Fri 19 Dec 2025 03:33:26 +0000 Manifest next update: Fri 26 Dec 2025 03:33:26 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: krYHeGh1eA/qmB9H+r494R217x9OdQQYihv89/9E0xQ=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: /IMJX7XsSqXWSBpPQa+GU6jkXrtHKjX0kCU46WfMzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Dec 19 03:33:26 2025 GMT Not After : Dec 26 03:33:26 2025 GMT Subject: CN=6944c786-f9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:72:df:89:22:0c:77:8d:dc:ac:a9:5c:e8: 7a:d5:26:f3:e4:b1:70:8d:cb:7d:a9:49:f0:c8:83: 6c:9b:4f:b8:91:7c:ad:d6:a8:f0:85:c4:ad:5a:f7: f6:8a:8a:b5:8b:5c:73:9d:2c:c0:eb:25:27:43:49: 7f:2b:d4:b3:0a:71:d3:cd:bd:79:03:77:40:77:d5: 08:06:13:3b:97:78:46:88:2c:97:2b:af:2f:99:dd: 8a:bc:f2:c4:c8:88:0f:58:a2:fe:8b:19:4e:99:38: c0:41:9a:6f:4b:4d:47:6b:6a:48:e6:39:81:78:6a: 1c:d1:e6:f2:79:bb:8c:7a:94:7b:83:2d:7d:3f:2d: d6:ed:7e:50:7a:1d:34:a8:e4:98:71:ee:c9:b3:31: df:50:79:45:97:c6:38:7c:36:68:be:dd:13:a6:eb: 63:36:d3:ac:a0:56:dd:50:47:61:47:1e:92:0d:76: 5c:49:b1:e8:12:05:7e:d0:75:a9:1e:1a:f5:79:16: 8b:ca:23:8d:1a:e3:55:0b:fd:ea:d6:14:55:a8:a8: 31:69:2c:72:06:9e:17:40:3d:44:a1:ed:e3:6d:67: ba:a7:6f:b1:6b:5a:c7:df:f4:b1:0d:75:4a:c6:5d: 3a:0b:11:10:1b:9a:8c:67:2e:62:14:4f:b9:43:e8: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E4:A6:9F:17:31:B0:58:7B:A0:67:80:B8:74:84:63:D2:25:8F:60 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:76:42:63:01:07:99:75:50:1a:90:77:09:95:07:66:2e:82: 90:2c:41:8e:b0:bb:16:89:b9:74:90:56:82:e0:80:f9:95:23: fc:88:f2:b6:27:98:9f:4b:8c:74:77:95:55:de:61:f6:01:a9: 54:2e:8f:5e:cf:68:c6:c1:dc:f3:8d:ad:df:86:a2:48:1b:22: 62:6b:c5:d9:14:41:f1:dc:c6:b1:a1:30:3e:35:5a:89:a2:ad: d8:18:59:64:40:01:96:45:14:6b:81:36:a6:d5:97:5d:26:a4: 14:33:fd:05:28:ca:91:4b:c8:6b:66:79:d5:31:d5:ec:ad:10: ce:2a:9e:70:29:3a:5b:ab:9b:6b:55:17:1a:4a:d0:13:19:29: 59:3f:5b:82:c7:cb:98:e9:cf:89:79:e7:44:04:09:5a:08:30: 03:b1:3d:a2:e7:3e:c6:8f:c4:b9:51:eb:cc:00:2f:ef:42:fa: 68:ce:27:1d:37:e5:86:56:c8:9b:d8:c8:41:10:f6:7b:07:08: c2:be:eb:eb:08:40:a8:29:69:44:44:ee:1c:d7:f9:59:b7:35: 6c:98:c0:1c:a3:b2:60:4e:d9:c0:39:23:db:26:8b:c9:8b:c1: 69:5d:e6:a1:80:e4:b3:fb:f0:10:d6:bf:03:bf:30:4f:3d:f6: a7:72:3b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUxMjE5MDMzMzI2WhcNMjUxMjI2MDMzMzI2WjAYMRYwFAYD VQQDDA02OTQ0Yzc4Ni1mOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTly34kiDHeN3KypXOh61Sbz5LFwjct9qUnwyINsm0+4kXyt1qjwhcStWvf2 ioq1i1xznSzA6yUnQ0l/K9SzCnHTzb15A3dAd9UIBhM7l3hGiCyXK68vmd2KvPLE yIgPWKL+ixlOmTjAQZpvS01Ha2pI5jmBeGoc0ebyebuMepR7gy19Py3W7X5Qeh00 qOSYce7JszHfUHlFl8Y4fDZovt0TputjNtOsoFbdUEdhRx6SDXZcSbHoEgV+0HWp Hhr1eRaLyiONGuNVC/3q1hRVqKgxaSxyBp4XQD1Eoe3jbWe6p2+xa1rH3/SxDXVK xl06CxEQG5qMZy5iFE+5Q+jMeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnkpp8X MbBYe6BngLh0hGPSJY9gMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbdkJjAQeZdVAakHcJlQdmLoKQLEGOsLsWibl0kFaC4ID5lSP8iPK2 J5ifS4x0d5VV3mH2AalULo9ez2jGwdzzja3fhqJIGyJia8XZFEHx3MaxoTA+NVqJ oq3YGFlkQAGWRRRrgTam1ZddJqQUM/0FKMqRS8hrZnnVMdXsrRDOKp5wKTpbq5tr VRcaStATGSlZP1uCx8uY6c+JeedEBAlaCDADsT2i5z7Gj8S5UevMAC/vQvpozicd N+WGVsib2MhBEPZ7BwjCvuvrCECoKWlERO4c1/lZtzVsmMAco7JgTtnAOSPbJovJ i8FpXeahgOSz+/AQ1r8DvzBPPfancjte -----END CERTIFICATE-----Generated at Fri Dec 19 19:22:38 2025 by rpki-client