This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 6k2iOGehStTEquXhyITQm05/rZIRg20aOxn/fOZ6Nmo= Subject key identifier: CF:88:08:EC:D5:DA:D4:06:87:D9:3C:74:79:D0:1B:E0:6E:4B:6A:AB Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: E8 Signing time: Fri 19 Dec 2025 04:31:03 +0000 Manifest this update: Fri 19 Dec 2025 04:31:02 +0000 Manifest next update: Fri 26 Dec 2025 04:31:02 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: UixfX1LVL01XrhAhOPt0STXW5DMlmItW1Iyb64d8Mj0=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 29JJitgeZibCuMLwmFZOe7Iewb0yCQvMIqLz7xwmm+U=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: dW58Y+pKYUf1WCLV35cEdJ/OqwM43ahP5CXKmE1/xaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Dec 19 04:31:02 2025 GMT Not After : Dec 26 04:31:02 2025 GMT Subject: CN=6944d506-b9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:2d:9e:11:b2:8b:2a:92:4b:13:db:9d:1c: 5a:52:df:6c:c7:ea:38:a5:54:67:9f:92:b0:38:97: ed:f7:fd:b0:6c:bc:f1:1a:bf:95:d4:c8:7b:27:d6: 0d:67:51:60:16:8d:9c:21:2f:d5:bb:9c:7c:b1:23: 2d:15:b6:51:5d:9d:01:a6:82:e3:0e:13:86:8c:f0: db:7d:d1:20:b3:34:e2:be:76:8d:cd:7a:1a:71:ab: 70:c4:e6:53:a6:45:9c:b1:10:8e:fa:62:29:94:26: b7:2f:f6:1b:c0:24:9d:f3:18:6a:f7:b7:c2:01:be: 02:f1:14:26:d7:ad:70:9c:d1:2a:a7:53:8f:64:b6: 3d:1d:af:2a:ca:07:58:b5:52:1d:e4:fe:e7:5a:f6: 39:97:45:ca:c7:b8:9d:79:93:b6:4f:03:27:1b:26: db:64:9b:f0:8e:4d:40:7f:e4:f9:d7:fc:e6:53:9e: dd:73:d8:2f:a7:6b:ce:56:6c:44:0e:f8:20:c1:09: 63:4e:b0:0a:28:a0:c4:82:d8:12:08:23:51:0c:67: 6a:45:8f:b5:9f:a2:c3:ed:b1:e4:fc:0d:53:c6:dd: 9c:7a:66:5d:6c:3b:19:52:9b:44:92:7d:dd:28:ed: 22:d0:ff:78:1c:ca:8b:6c:4c:c5:c3:c8:a4:cf:64: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:88:08:EC:D5:DA:D4:06:87:D9:3C:74:79:D0:1B:E0:6E:4B:6A:AB X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:21:90:62:4d:ba:9b:f9:e6:4d:d2:d1:15:03:ac:c8:75:03: 79:1a:ac:c9:01:1f:11:28:49:45:99:58:80:f2:2d:ce:35:08: 14:2d:47:cd:21:00:26:77:99:ec:75:57:01:b4:d7:bf:57:5d: fe:78:b2:ad:6c:8a:fd:98:ee:27:af:e3:fe:28:44:da:c2:aa: 44:4e:99:f1:55:c0:4d:db:31:40:ca:28:9b:5c:3f:b7:eb:5c: 6d:fc:95:40:b6:9f:4c:0c:35:f6:05:cc:5c:67:ea:fb:93:69: d1:67:70:45:22:e8:51:41:94:ea:42:e2:41:6f:57:ad:b7:9a: 23:b6:b3:fc:c3:e1:02:41:e0:d7:82:7f:5a:d5:a1:60:37:6b: c2:6b:ab:b0:c9:3b:97:6f:f9:c2:4d:e0:04:3a:70:50:37:17: a2:70:49:f9:e7:13:60:8b:cd:4a:89:a8:e4:8d:fc:cf:6f:e4: 3f:e1:03:73:a9:5d:24:2b:8d:73:2d:1e:82:2f:b1:1b:8c:01: 3b:83:5a:95:f7:ef:c2:95:60:46:68:33:ef:da:0f:e0:14:07: 3b:74:92:e1:bc:e8:43:ee:5f:34:13:8c:58:6a:27:05:57:77: 4e:74:d0:07:e1:83:f9:c6:60:f0:b0:35:f8:a6:73:ec:60:9a: ea:17:df:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUxMjE5MDQzMTAyWhcNMjUxMjI2MDQzMTAyWjAYMRYwFAYD VQQDDA02OTQ0ZDUwNi1iOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocItnhGyiyqSSxPbnRxaUt9sx+o4pVRnn5KwOJft9/2wbLzxGr+V1Mh7J9YN Z1FgFo2cIS/Vu5x8sSMtFbZRXZ0BpoLjDhOGjPDbfdEgszTivnaNzXoacatwxOZT pkWcsRCO+mIplCa3L/YbwCSd8xhq97fCAb4C8RQm161wnNEqp1OPZLY9Ha8qygdY tVId5P7nWvY5l0XKx7ideZO2TwMnGybbZJvwjk1Af+T51/zmU57dc9gvp2vOVmxE DvggwQljTrAKKKDEgtgSCCNRDGdqRY+1n6LD7bHk/A1Txt2cemZdbDsZUptEkn3d KO0i0P94HMqLbEzFw8ikz2QHxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+ICOzV 2tQGh9k8dHnQG+BuS2qrMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXIZBiTbqb+eZN0tEVA6zIdQN5GqzJAR8RKElFmViA8i3ONQgULUfN IQAmd5nsdVcBtNe/V13+eLKtbIr9mO4nr+P+KETawqpETpnxVcBN2zFAyiibXD+3 61xt/JVAtp9MDDX2BcxcZ+r7k2nRZ3BFIuhRQZTqQuJBb1ett5ojtrP8w+ECQeDX gn9a1aFgN2vCa6uwyTuXb/nCTeAEOnBQNxeicEn55xNgi81KiajkjfzPb+Q/4QNz qV0kK41zLR6CL7EbjAE7g1qV9+/ClWBGaDPv2g/gFAc7dJLhvOhD7l80E4xYaicF V3dOdNAH4YP5xmDwsDX4pnPsYJrqF98X -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:54 2025 by rpki-client