This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: XYR+f13rrruxoa39gOe0Le+8L8uAvmaJ/DoZTkHZra8= Subject key identifier: 73:71:6B:37:EE:F7:36:EF:33:64:58:A1:45:D0:7C:E4:36:2F:77:07 Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 0214 Signing time: Thu 25 Dec 2025 01:50:08 +0000 Manifest this update: Thu 25 Dec 2025 01:50:07 +0000 Manifest next update: Thu 01 Jan 2026 01:50:07 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: RqHwC6cLL8aNhI1geU4PejpypLjzLYfo+WVPbJP9IeE=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 4yj8sZR6Z/FxcvXrPscntmMUZkXTFX7XG+1HhFVkn+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Dec 25 01:50:07 2025 GMT Not After : Jan 1 01:50:07 2026 GMT Subject: CN=694c9850-424d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:4f:3a:bf:2f:11:ec:e9:a9:95:6c:8d:56: 6e:72:f4:f0:77:13:d8:8c:f3:23:bb:52:1a:f2:9a: c7:e9:45:b9:7f:11:0b:3d:33:24:a2:fa:9d:d8:54: a3:df:1f:df:43:9d:22:5f:97:93:71:10:28:45:57: 26:68:a5:2e:09:10:c0:bc:41:b3:dc:ee:4e:9e:19: 2e:23:c4:b6:fb:8c:a1:5d:67:75:a6:45:69:a4:73: 6b:fc:d8:45:c8:43:cb:f6:52:86:9c:c1:fd:08:ac: 92:90:19:fe:26:d5:b3:15:e6:a1:07:7c:e8:3d:7e: 39:56:2c:7c:77:3e:43:f2:49:fe:b9:13:94:e4:ea: 8d:45:8b:80:0c:0d:90:7b:10:67:27:0d:32:b5:1e: d0:eb:1b:bb:73:66:cd:9b:ac:76:e9:3c:77:3f:9d: 56:b9:bb:19:b0:15:eb:78:cf:63:24:79:29:c1:c5: 39:cf:26:5c:de:94:fa:22:ad:22:20:36:e8:7d:44: 90:63:19:c2:e1:ed:ed:9d:58:72:fc:90:87:4b:ee: 27:ce:59:70:89:6e:c9:bd:31:a5:63:81:d4:c8:2b: 78:c7:75:7f:61:a4:f0:42:4c:74:f1:20:66:fe:ef: 40:4b:a9:93:3e:65:f7:00:01:6c:b9:ac:ec:fe:73: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:71:6B:37:EE:F7:36:EF:33:64:58:A1:45:D0:7C:E4:36:2F:77:07 X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d9:ef:9e:c1:22:09:b6:0c:9d:82:8f:70:94:69:a1:a1:9b: e1:75:0b:a6:00:51:53:b3:58:20:60:ec:cb:53:91:39:60:a9: ea:24:9b:f5:06:45:07:4d:a6:2a:b8:36:d6:df:6b:35:26:49: fc:94:cc:da:9a:c9:09:45:11:bb:15:34:bd:5b:0b:4a:e8:64: e2:fc:38:21:92:d3:69:a9:9c:ed:d2:6c:7e:56:c2:76:43:b4: c2:da:ab:82:7c:ef:d6:4c:30:7c:49:53:fc:3d:ae:57:9e:c5: b2:c6:43:60:4b:0f:f8:2a:c4:30:a9:34:f8:16:5f:5b:89:06: 8f:84:6c:1f:34:08:bc:0d:42:1e:8d:3b:67:3e:d6:52:1e:fd: 1c:30:95:33:d7:0b:71:cc:dd:a1:c6:7d:90:5f:e2:e8:22:e0: ab:05:db:d4:84:8e:85:1d:17:33:92:8f:24:43:ce:ab:98:f3: b4:46:19:3f:09:b3:ac:ed:90:9e:5a:b4:ae:d9:89:0d:d9:2c: a5:b7:25:3f:bf:98:f8:c7:56:03:f8:80:ab:7a:1f:d4:52:56: f4:8f:03:d1:24:e9:54:92:ba:30:83:58:8a:93:1b:69:d7:e7: b0:f9:c3:f4:cd:b8:ce:f3:ac:2b:cf:2c:37:52:44:73:73:2d: 87:47:80:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjUxMjI1MDE1MDA3WhcNMjYwMTAxMDE1MDA3WjAYMRYwFAYD VQQDDA02OTRjOTg1MC00MjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWtPOr8vEezpqZVsjVZucvTwdxPYjPMju1Ia8prH6UW5fxELPTMkovqd2FSj 3x/fQ50iX5eTcRAoRVcmaKUuCRDAvEGz3O5OnhkuI8S2+4yhXWd1pkVppHNr/NhF yEPL9lKGnMH9CKySkBn+JtWzFeahB3zoPX45Vix8dz5D8kn+uROU5OqNRYuADA2Q exBnJw0ytR7Q6xu7c2bNm6x26Tx3P51WubsZsBXreM9jJHkpwcU5zyZc3pT6Iq0i IDbofUSQYxnC4e3tnVhy/JCHS+4nzllwiW7JvTGlY4HUyCt4x3V/YaTwQkx08SBm /u9AS6mTPmX3AAFsuazs/nNpIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNxazfu 9zbvM2RYoUXQfOQ2L3cHMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu2e+ewSIJtgydgo9wlGmhoZvhdQumAFFTs1ggYOzLU5E5YKnqJJv1 BkUHTaYquDbW32s1Jkn8lMzamskJRRG7FTS9WwtK6GTi/DghktNpqZzt0mx+VsJ2 Q7TC2quCfO/WTDB8SVP8Pa5XnsWyxkNgSw/4KsQwqTT4Fl9biQaPhGwfNAi8DUIe jTtnPtZSHv0cMJUz1wtxzN2hxn2QX+LoIuCrBdvUhI6FHRczko8kQ86rmPO0Rhk/ CbOs7ZCeWrSu2YkN2SyltyU/v5j4x1YD+ICreh/UUlb0jwPRJOlUkrowg1iKkxtp 1+ew+cP0zbjO86wrzyw3UkRzcy2HR4AC -----END CERTIFICATE-----Generated at Thu Dec 25 12:34:10 2025 by rpki-client