This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: p7ra3zdB11yb0S4SkCOAihMKuMB5IlsvMsmEM1/QDrY= Subject key identifier: 53:23:59:3E:37:8E:D4:DA:05:15:57:E9:44:85:3E:69:93:80:05:52 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3500 Signing time: Mon 22 Dec 2025 14:32:53 +0000 Manifest this update: Mon 22 Dec 2025 14:32:53 +0000 Manifest next update: Mon 29 Dec 2025 14:32:53 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: 1jnmenDKry9OF4QF6JeCDhelhfCbN7RVM9LuO6yhiUc=) 2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: 7XJqHJEnhdUplCJ4iz+cv5gM2kcVkpUwLnhh4FUX6U8=) 3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: WAqkzYiOMG3eVsSlxconspeITWeLsHW6M6BKW5GBoNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Dec 22 14:32:53 2025 GMT Not After : Dec 29 14:32:53 2025 GMT Subject: CN=69495695-b3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7e:3f:bc:1f:f0:25:51:2f:57:19:b3:6c:51: 13:55:f5:48:37:6b:e3:4d:7c:b0:6c:bc:68:45:9f: 3e:75:b3:0a:19:12:86:3a:c5:5f:c8:5f:cd:d3:a1: 5e:37:29:0a:88:94:a9:14:62:c0:72:0a:8b:23:94: 72:02:3a:7c:95:df:aa:59:a8:33:ef:e0:dc:cf:58: 6c:e5:b0:bf:52:ea:37:e1:80:dc:9b:4b:39:50:b9: 7a:81:c4:ff:d6:82:4d:de:29:7c:17:f7:7d:64:27: d6:eb:2e:09:10:9c:cf:a5:55:50:f9:02:3b:e7:c0: 22:20:a6:cb:12:7f:07:34:1b:f8:17:40:1e:4b:45: 55:ab:ec:04:03:74:6f:bc:88:7a:38:f8:24:9f:3f: 32:a2:0e:9d:c1:5d:80:7c:a7:34:a1:b1:e5:af:1f: f2:db:c8:16:17:3d:f0:78:cc:b3:ef:8a:22:be:d0: a4:51:26:19:ed:f2:1f:c5:33:9c:19:06:5b:a6:54: 42:4a:1b:8f:3d:49:cb:f5:39:9e:54:10:4f:f8:de: 51:ad:a8:ca:8e:3a:f7:18:94:0b:b7:30:63:52:94: 62:c2:90:51:cb:53:7d:36:61:96:17:ff:35:30:ae: 14:c1:08:b9:6f:8e:09:85:75:e5:d1:cf:72:50:45: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:23:59:3E:37:8E:D4:DA:05:15:57:E9:44:85:3E:69:93:80:05:52 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:47:cd:e8:e0:d0:0d:ff:bf:00:b8:92:21:71:66:70:0f: 2b:93:ed:06:e4:6f:6c:6d:e6:a4:39:13:a0:fb:d8:92:e0:90: a0:15:74:28:f9:49:56:ed:af:92:c3:7e:56:62:d6:b6:ba:dd: 18:30:1c:05:57:d3:cd:4a:7e:cf:7d:89:05:e5:46:04:f9:f7: e6:2f:1f:62:05:b2:8e:3c:c4:d9:9a:84:07:d5:8e:61:e6:2b: 03:fe:01:fb:b2:e2:59:7a:e2:9b:0b:0e:d4:97:0a:46:9d:d6: 8a:9f:02:6c:92:70:10:81:13:fa:a6:f9:dc:ac:f1:fe:66:cb: 92:f2:08:87:1e:e2:90:03:0f:d8:1a:e1:b0:7a:29:f4:46:93: 2a:17:66:35:ad:c0:90:b1:fc:9a:68:d4:99:e0:8e:f0:6b:e7: eb:a6:5f:17:e5:c9:73:2f:cc:9a:12:30:21:bb:0f:fe:4b:b3: 0a:09:10:fa:db:7e:a5:b6:42:da:a9:44:c2:d4:c3:da:98:cf: 4e:9d:03:8d:d8:fc:c5:6c:5a:db:1d:c5:66:e2:8e:15:b1:6f: 39:8e:0f:56:fa:54:9e:62:ee:a4:5d:65:71:b5:23:09:3d:53: 93:5f:33:d0:10:b9:a4:89:f8:a5:86:65:bb:7b:5f:ad:f1:31: b3:70:9e:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUxMjIyMTQzMjUzWhcNMjUxMjI5MTQzMjUzWjAYMRYwFAYD VQQDDA02OTQ5NTY5NS1iM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA734/vB/wJVEvVxmzbFETVfVIN2vjTXywbLxoRZ8+dbMKGRKGOsVfyF/N06Fe NykKiJSpFGLAcgqLI5RyAjp8ld+qWagz7+Dcz1hs5bC/Uuo34YDcm0s5ULl6gcT/ 1oJN3il8F/d9ZCfW6y4JEJzPpVVQ+QI758AiIKbLEn8HNBv4F0AeS0VVq+wEA3Rv vIh6OPgknz8yog6dwV2AfKc0obHlrx/y28gWFz3weMyz74oivtCkUSYZ7fIfxTOc GQZbplRCShuPPUnL9TmeVBBP+N5RrajKjjr3GJQLtzBjUpRiwpBRy1N9NmGWF/81 MK4UwQi5b44JhXXl0c9yUEUG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMjWT43 jtTaBRVX6USFPmmTgAVSMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANiUfN6ODQDf+/ALiSIXFmcA8rk+0G5G9sbeakOROg+9iS4JCgFXQo +UlW7a+Sw35WYta2ut0YMBwFV9PNSn7PfYkF5UYE+ffmLx9iBbKOPMTZmoQH1Y5h 5isD/gH7suJZeuKbCw7UlwpGndaKnwJsknAQgRP6pvncrPH+ZsuS8giHHuKQAw/Y GuGwein0RpMqF2Y1rcCQsfyaaNSZ4I7wa+frpl8X5clzL8yaEjAhuw/+S7MKCRD6 236ltkLaqUTC1MPamM9OnQON2PzFbFrbHcVm4o4VsW85jg9W+lSeYu6kXWVxtSMJ PVOTXzPQELmkifilhmW7e1+t8TGzcJ7d -----END CERTIFICATE-----Generated at Tue Dec 23 10:52:15 2025 by rpki-client