This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: XZFfRJW06uTtK4Zg8FEv+IsvQ6S7RDhBS6oC6VNd61U= Subject key identifier: 71:90:BC:00:00:F8:5C:9F:12:AD:B3:55:3E:93:7F:81:07:72:E4:C7 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 0528 Signing time: Mon 22 Dec 2025 22:39:57 +0000 Manifest this update: Mon 22 Dec 2025 22:39:57 +0000 Manifest next update: Mon 29 Dec 2025 22:39:57 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: NabDLqFyK1i3oSsTq7kxXe1CZ2aqQwb7l4mOFWxfeAw=) 2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: iFC8MgE5SfSQ16rr4AK5f5Pz7LFrrXaQbjH1tabI/5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Dec 22 22:39:57 2025 GMT Not After : Dec 29 22:39:57 2025 GMT Subject: CN=6949c8bd-cccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:da:e1:0f:60:fd:64:b5:5e:47:fb:44:7e: 9a:cd:35:68:76:81:d1:dc:c7:bd:bd:58:eb:1b:58: 54:ed:f4:0c:d9:b9:46:56:af:84:fc:10:b2:8d:4f: 73:91:c8:c8:6a:ef:10:be:f0:46:b8:c7:d7:d7:c3: 9d:11:f5:26:a3:cc:3d:2a:b0:f6:f7:c4:b7:9e:cc: d2:3f:39:81:fa:cc:41:a6:96:b3:4e:bf:cd:13:5b: 4a:19:e7:67:31:59:e6:21:7a:4a:03:99:1a:78:22: a6:a3:2e:4b:08:24:c5:6c:51:2e:e7:ba:fd:0e:dd: c9:34:21:01:9b:03:3a:a1:86:ce:3b:25:85:1d:56: f0:9c:df:1d:0a:96:b5:a5:41:a9:0c:ae:4f:f8:51: 50:4e:47:1d:61:98:a3:f4:cd:0c:1e:63:09:84:f7: 6a:51:42:2d:72:c0:e0:41:5f:4d:b9:3c:d0:3b:61: 0d:e2:f1:1b:92:4b:c7:3b:37:48:2d:03:fa:cb:a2: 3b:fd:b0:7f:f1:17:14:09:23:93:ba:3f:57:d2:cf: d9:ea:99:aa:b2:97:ed:3b:4d:dc:de:fe:38:c6:df: 61:9e:e4:ff:20:78:75:a5:9a:44:9d:0b:82:28:35: 5f:4e:d0:84:68:2c:9a:32:2e:a9:91:20:0f:8c:a8: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:BC:00:00:F8:5C:9F:12:AD:B3:55:3E:93:7F:81:07:72:E4:C7 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:88:11:98:1b:84:94:51:4f:19:18:94:74:70:9d:a7:fe: ce:e0:61:0f:11:4d:45:b1:c0:c8:a4:4f:91:2d:f2:83:f1:8f: 20:f0:0f:b0:bd:7c:af:03:a1:40:cc:aa:aa:26:bb:77:c8:57: de:a5:3f:38:ec:e4:1b:92:c4:a0:6d:e4:9c:02:8e:e4:54:ba: ea:b3:e1:70:2f:78:0c:6d:3d:90:a9:94:45:7a:4b:88:61:2f: 3b:18:6d:ef:52:69:3b:9a:0b:d4:88:0d:eb:56:3c:66:af:8a: dc:49:e5:a1:66:4d:b4:f3:e4:39:83:2c:00:fc:d5:8b:8c:fd: 6d:89:43:cf:2c:4e:96:ae:3c:c1:17:54:14:18:79:9b:be:43: c2:ec:65:6b:5c:d4:ce:21:55:3e:b3:e7:6c:8f:a8:6d:44:67: ff:5d:91:97:2b:ed:42:18:9c:98:1b:74:83:3c:9c:7d:e2:12: 92:34:b1:3d:49:e2:95:92:48:ed:6b:eb:6a:32:24:0b:73:e8: 21:d4:08:18:d9:e1:ea:b2:af:f2:3d:fe:49:1e:7d:af:e8:8a: 14:0e:57:43:6b:24:b1:2e:a4:99:9a:37:5b:c7:c1:1a:e1:27: ff:3e:cc:e4:61:3d:a4:4d:d3:72:0f:64:b8:15:99:fa:db:63: 99:d7:34:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUxMjIyMjIzOTU3WhcNMjUxMjI5MjIzOTU3WjAYMRYwFAYD VQQDDA02OTQ5YzhiZC1jY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAheTa4Q9g/WS1Xkf7RH6azTVodoHR3Me9vVjrG1hU7fQM2blGVq+E/BCyjU9z kcjIau8QvvBGuMfX18OdEfUmo8w9KrD298S3nszSPzmB+sxBppazTr/NE1tKGedn MVnmIXpKA5kaeCKmoy5LCCTFbFEu57r9Dt3JNCEBmwM6oYbOOyWFHVbwnN8dCpa1 pUGpDK5P+FFQTkcdYZij9M0MHmMJhPdqUUItcsDgQV9NuTzQO2EN4vEbkkvHOzdI LQP6y6I7/bB/8RcUCSOTuj9X0s/Z6pmqspftO03c3v44xt9hnuT/IHh1pZpEnQuC KDVfTtCEaCyaMi6pkSAPjKhOYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGQvAAA +FyfEq2zVT6Tf4EHcuTHMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALdIgRmBuElFFPGRiUdHCdp/7O4GEPEU1FscDIpE+RLfKD8Y8g8A+w vXyvA6FAzKqqJrt3yFfepT847OQbksSgbeScAo7kVLrqs+FwL3gMbT2QqZRFekuI YS87GG3vUmk7mgvUiA3rVjxmr4rcSeWhZk208+Q5gywA/NWLjP1tiUPPLE6WrjzB F1QUGHmbvkPC7GVrXNTOIVU+s+dsj6htRGf/XZGXK+1CGJyYG3SDPJx94hKSNLE9 SeKVkkjta+tqMiQLc+gh1AgY2eHqsq/yPf5JHn2v6IoUDldDaySxLqSZmjdbx8Ea 4Sf/PszkYT2kTdNyD2S4FZn622OZ1zSg -----END CERTIFICATE-----Generated at Wed Dec 24 11:09:22 2025 by rpki-client