This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json) Hash identifier: rJ0Y4Xr8u7e7uETeb+m47pahcN5MCeW9jnDap4Pis6I= Subject key identifier: 9F:3E:04:B3:A4:2D:9C:32:4D:61:DD:6D:E6:8F:EB:3B:77:EF:70:0E Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft Manifest number: 01DD Signing time: Sat 20 Dec 2025 15:10:44 +0000 Manifest this update: Sat 20 Dec 2025 15:10:43 +0000 Manifest next update: Sat 27 Dec 2025 15:10:43 +0000 Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: XaeYHelndd29hLJGK1/YypkoDkEdkmKXw5AgHECKxhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Validity Not Before: Dec 20 15:10:43 2025 GMT Not After : Dec 27 15:10:43 2025 GMT Subject: CN=6946bc74-3099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:9b:7b:df:88:e6:77:19:6d:f6:61:0b:2a: 98:a0:36:6c:16:9c:e3:63:7b:45:44:19:f5:1e:22: a2:f5:f7:00:ec:00:04:0a:84:a5:b1:a4:e0:ab:d8: e8:1a:13:33:df:cc:2a:bb:a1:06:d2:50:13:fa:03: 80:f7:2c:2a:01:df:7c:ff:c9:1c:2a:f1:ed:2f:f4: 30:74:3a:46:99:5b:41:45:1f:84:42:cc:e7:88:3f: 38:bc:ca:b1:9f:7d:72:bf:d4:2e:88:f6:cb:a7:3e: fa:27:48:5c:ea:56:74:c9:d4:a7:5a:f8:f9:73:be: 39:8b:ef:f0:e5:8b:b8:ec:d5:06:b8:da:29:83:d6: e5:ff:d2:ab:e7:4a:9b:42:59:02:9c:7f:2a:16:b0: 86:59:e2:da:8b:a5:98:e4:f8:7c:88:2d:56:01:bc: 61:c4:9e:b0:d3:79:27:37:61:a1:a6:bf:06:da:0e: cd:5e:af:b1:c4:ec:81:a8:1c:ad:53:25:31:02:c1: c2:d6:6c:c7:61:32:41:eb:c9:ac:e0:a1:cc:c2:47: 4c:81:02:a3:a0:f2:98:3b:a5:45:f5:5b:7e:52:eb: fe:b0:38:4c:a2:b4:38:51:81:f5:49:c2:3e:91:c5: 98:9f:ed:b3:f3:a3:19:1b:73:47:19:06:f6:e3:79: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3E:04:B3:A4:2D:9C:32:4D:61:DD:6D:E6:8F:EB:3B:77:EF:70:0E X509v3 Authority Key Identifier: keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b1:d5:9f:ea:87:86:ab:30:8d:38:2d:79:6e:35:5a:66:9c: d3:ed:3c:6a:ae:a6:66:ee:55:fe:13:2e:6b:02:2a:ec:58:ea: fe:8b:d0:19:f6:dd:5f:35:13:1e:d2:6c:6e:45:35:34:6d:45: c4:05:87:45:63:02:b2:94:ea:57:5d:49:2e:dd:dd:06:cc:c5: 02:98:b8:be:99:52:ac:82:6c:a1:a8:3e:90:f2:c4:56:1d:40: eb:4e:ca:5a:67:36:ab:b7:ce:7a:bf:bc:aa:6a:92:f9:4a:d7: cd:99:4e:c5:c8:8d:71:d6:f4:72:21:67:81:22:28:57:d9:7f: 35:11:48:b0:14:97:65:51:37:c2:29:7c:81:4d:e7:3e:3d:34: 1a:52:71:04:54:26:45:bc:e4:aa:f1:07:ce:1e:e9:c5:3c:9e: 52:2a:4a:0a:d6:fb:58:50:d1:42:30:45:9a:fb:6d:e6:3a:51: f5:30:c9:56:b6:62:43:85:c8:d0:9e:15:33:42:d8:dc:af:64: 82:b7:16:d3:bc:97:54:d5:3d:d9:b2:83:a7:c8:7d:72:38:10: f7:ad:d6:2b:cd:58:e5:e2:06:45:21:47:be:1b:e2:28:f2:5a: 8d:99:0f:a5:54:c8:98:2e:4e:1e:a6:79:e3:b6:00:ec:b3:3b: 95:fd:5b:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD NjFGRDE2QUUwHhcNMjUxMjIwMTUxMDQzWhcNMjUxMjI3MTUxMDQzWjAYMRYwFAYD VQQDDA02OTQ2YmM3NC0zMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDGbe9+I5ncZbfZhCyqYoDZsFpzjY3tFRBn1HiKi9fcA7AAECoSlsaTgq9jo GhMz38wqu6EG0lAT+gOA9ywqAd98/8kcKvHtL/QwdDpGmVtBRR+EQszniD84vMqx n31yv9QuiPbLpz76J0hc6lZ0ydSnWvj5c745i+/w5Yu47NUGuNopg9bl/9Kr50qb QlkCnH8qFrCGWeLai6WY5Ph8iC1WAbxhxJ6w03knN2Ghpr8G2g7NXq+xxOyBqByt UyUxAsHC1mzHYTJB68ms4KHMwkdMgQKjoPKYO6VF9Vt+Uuv+sDhMorQ4UYH1ScI+ kcWYn+2z86MZG3NHGQb243l9CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8+BLOk LZwyTWHdbeaP6zt373AOMB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16 UFZpVXRNemNrUVhHSDlGcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJsdWf6oeGqzCNOC15bjVaZpzT7TxqrqZm7lX+Ey5rAirsWOr+i9AZ 9t1fNRMe0mxuRTU0bUXEBYdFYwKylOpXXUku3d0GzMUCmLi+mVKsgmyhqD6Q8sRW HUDrTspaZzart856v7yqapL5StfNmU7FyI1x1vRyIWeBIihX2X81EUiwFJdlUTfC KXyBTec+PTQaUnEEVCZFvOSq8QfOHunFPJ5SKkoK1vtYUNFCMEWa+23mOlH1MMlW tmJDhcjQnhUzQtjcr2SCtxbTvJdU1T3ZsoOnyH1yOBD3rdYrzVjl4gZFIUe+G+Io 8lqNmQ+lVMiYLk4epnnjtgDsszuV/VuN -----END CERTIFICATE-----Generated at Sat Dec 20 20:25:11 2025 by rpki-client