This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: BKJEb4Qt+r8jfW1tA/KdeaWW50mnmPKhcTzSaD3+a4w= Subject key identifier: B7:40:86:70:9C:3A:98:88:64:3E:77:B1:07:91:2F:66:6A:5F:B4:18 Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 408E Signing time: Thu 18 Dec 2025 14:46:40 +0000 Manifest this update: Thu 18 Dec 2025 14:46:40 +0000 Manifest next update: Thu 25 Dec 2025 14:46:40 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: y7O2oCgWguLlqvJGEegdp9TsiJtIWSy/2Et/kc7HlJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2980 (0xba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Dec 18 14:46:40 2025 GMT Not After : Dec 25 14:46:40 2025 GMT Subject: CN=694413d0-23f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:56:c4:ab:d9:f7:cb:a0:c7:bf:a7:ef:ad:d8: 75:1e:4a:ab:a0:c5:de:d1:0c:27:5c:d4:7a:7e:78: 9e:1d:62:e0:d8:29:f2:0b:b8:d6:fc:dc:9f:23:91: ea:23:45:6f:60:de:a2:59:49:49:8c:c8:ac:0c:2f: ac:bd:d9:a5:c9:af:60:c4:b9:84:f2:5e:c9:b8:c6: a3:cc:5c:57:2f:a9:95:e1:0c:c1:9f:57:b5:62:8e: b8:a0:2f:e2:d3:7b:19:09:4b:b6:e2:b4:ad:be:e3: f1:57:2b:8a:c7:d6:2f:9b:65:d5:fd:d0:09:a7:0e: b1:8a:a6:26:49:7d:bb:29:b3:c5:39:81:0f:67:08: 76:61:97:92:a7:fd:f6:02:f9:7c:56:20:3e:ed:f8: cc:a7:4f:22:ff:98:ff:ac:65:99:be:8a:52:3e:e4: a8:5e:12:f5:80:16:d6:0c:64:8b:5b:f6:d7:f2:95: 07:fd:21:14:9f:8f:f1:0a:f7:68:43:93:bd:74:a7: 47:b0:58:e1:97:4b:28:11:5f:21:e0:ad:cd:61:32: f9:a3:94:9b:68:9a:8a:88:4e:a0:6a:35:c2:c7:1a: 6b:38:66:a7:d3:04:ac:73:ae:61:1e:f8:7e:0a:e0: a1:6c:52:a7:bd:a2:c1:a1:82:89:b3:4c:24:f1:94: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:86:70:9C:3A:98:88:64:3E:77:B1:07:91:2F:66:6A:5F:B4:18 X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:18:43:b1:4e:91:17:75:33:0f:e2:e3:ae:3d:18:8b:f3:97: 02:8e:1b:ea:f0:a0:a8:24:64:ca:65:6a:f4:fd:bd:31:75:d2: fb:95:dd:e6:dc:5a:36:ed:05:87:98:0a:c6:42:14:c0:c6:dd: f6:2a:3f:f8:8e:60:8d:cb:d6:14:29:36:af:70:3c:d6:29:36: f0:56:b1:42:5b:7b:d5:5b:d3:f2:d0:b6:1a:90:bb:a3:be:a6: ca:95:92:2d:97:33:37:ee:2e:94:8c:be:a8:10:60:c2:f6:26: d7:70:93:80:a4:19:c0:53:df:01:93:0c:da:94:3e:a5:e5:0f: 08:31:fb:57:9e:f0:b9:df:3d:ee:99:99:d1:fc:72:3e:4d:6a: f1:60:6e:68:08:5f:a6:22:d6:9d:eb:04:d2:31:2b:99:33:07: 2b:bc:f7:78:61:ee:b6:b6:aa:cf:03:6c:ee:09:87:88:94:41: 03:23:f3:93:6a:56:02:6c:f1:ee:41:26:94:41:8f:4f:25:b7: 6b:cc:20:0c:a5:63:83:5b:aa:03:e1:93:7f:86:d2:10:d3:b5: 65:e2:76:64:3f:c7:81:d0:e7:f9:8c:ab:f0:a2:5d:3f:de:df: cd:03:7c:3a:3e:16:98:48:50:5c:fc:5a:63:5b:2e:87:6f:56: bd:25:5a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUxMjE4MTQ0NjQwWhcNMjUxMjI1MTQ0NjQwWjAYMRYwFAYD VQQDDA02OTQ0MTNkMC0yM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lbEq9n3y6DHv6fvrdh1HkqroMXe0QwnXNR6fnieHWLg2CnyC7jW/NyfI5Hq I0VvYN6iWUlJjMisDC+svdmlya9gxLmE8l7JuMajzFxXL6mV4QzBn1e1Yo64oC/i 03sZCUu24rStvuPxVyuKx9Yvm2XV/dAJpw6xiqYmSX27KbPFOYEPZwh2YZeSp/32 Avl8ViA+7fjMp08i/5j/rGWZvopSPuSoXhL1gBbWDGSLW/bX8pUH/SEUn4/xCvdo Q5O9dKdHsFjhl0soEV8h4K3NYTL5o5SbaJqKiE6gajXCxxprOGan0wSsc65hHvh+ CuChbFKnvaLBoYKJs0wk8ZSsbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdAhnCc OpiIZD53sQeRL2ZqX7QYMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfGEOxTpEXdTMP4uOuPRiL85cCjhvq8KCoJGTKZWr0/b0xddL7ld3m 3Fo27QWHmArGQhTAxt32Kj/4jmCNy9YUKTavcDzWKTbwVrFCW3vVW9Py0LYakLuj vqbKlZItlzM37i6UjL6oEGDC9ibXcJOApBnAU98BkwzalD6l5Q8IMftXnvC53z3u mZnR/HI+TWrxYG5oCF+mItad6wTSMSuZMwcrvPd4Ye62tqrPA2zuCYeIlEEDI/OT alYCbPHuQSaUQY9PJbdrzCAMpWODW6oD4ZN/htIQ07Vl4nZkP8eB0Of5jKvwol0/ 3t/NA3w6PhaYSFBc/FpjWy6Hb1a9JVo0 -----END CERTIFICATE-----Generated at Fri Dec 19 19:02:58 2025 by rpki-client