This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: CNTg0TrKfNZTRvDelgG8byVQOCBYfTdz3degLz1dsIk= Subject key identifier: 5E:5C:4A:7B:6A:1E:CD:8B:7A:20:3C:A8:C6:8F:9F:BC:4F:83:4A:78 Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 069B Signing time: Sat 20 Dec 2025 21:43:23 +0000 Manifest this update: Sat 20 Dec 2025 21:43:22 +0000 Manifest next update: Sat 27 Dec 2025 21:43:22 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: 9A/d64olS3N3zkCn8lby0FVm3jnOiAXIyYQX2XNZ+xE=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Dec 20 21:43:22 2025 GMT Not After : Dec 27 21:43:22 2025 GMT Subject: CN=6947187b-aff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:2b:e9:d8:78:af:2b:a7:53:29:91:f8:f2: 34:1b:a9:d0:02:6f:10:f5:7a:a2:f4:96:44:5e:cc: db:0d:d9:6f:a6:4f:46:88:b1:40:9b:4f:30:38:08: f7:26:24:89:ef:5f:cd:5d:c3:ae:0d:24:6f:b0:48: bb:07:83:00:ee:17:1e:62:73:31:fb:67:1b:37:a6: f5:59:ec:29:d4:b0:3d:e7:39:e7:86:82:d5:5b:4a: dd:2d:ff:cd:06:d0:65:22:8c:c5:54:cd:02:59:81: e7:89:aa:13:0c:39:b4:d2:6a:9f:b1:a6:9b:22:ee: e6:e6:49:e0:42:06:3e:f4:4e:b6:49:e5:00:ab:15: db:a3:ca:59:7a:62:fc:95:69:25:89:e9:4f:8c:90: 20:11:05:77:0b:43:c8:90:a4:32:17:bf:94:d2:b7: 5b:66:35:a5:d0:30:06:ff:4f:aa:60:79:f0:da:ca: df:d7:5a:cd:68:0f:fb:5c:7c:5c:f3:a1:01:46:0e: 81:71:61:a5:bd:16:e1:18:7f:06:ab:ea:76:f1:d7: 93:bb:75:3e:28:32:a0:36:99:5b:b0:79:a1:a0:d9: c2:bc:fe:8a:02:81:87:8e:19:c7:e0:15:69:88:9e: 61:1c:05:61:17:ad:6c:78:6e:2b:9f:ad:dc:e7:1d: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5C:4A:7B:6A:1E:CD:8B:7A:20:3C:A8:C6:8F:9F:BC:4F:83:4A:78 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:32:4c:ff:3e:33:3a:9e:2b:d9:d8:f3:c6:6d:f4:33:27:5d: 15:61:97:9a:d2:b1:c9:e9:f8:5d:c0:5c:8d:3d:0c:29:dc:f5: 20:59:8c:9c:50:af:42:08:a6:10:56:93:fb:2f:01:19:8d:df: 5e:42:00:25:b9:e0:ec:23:44:1d:1d:59:d6:0c:9e:a4:1d:28: ee:bf:df:5b:85:67:0e:2d:46:5a:72:4e:13:01:7f:93:02:41: 19:f4:82:e2:d4:73:38:32:68:68:6b:e7:bb:06:b6:9e:86:3d: da:a0:80:30:88:bf:2b:7a:3c:e3:d6:a5:86:fe:e2:35:27:a6: 70:38:6d:b7:dc:43:c1:de:e9:f5:a3:10:6e:ab:a9:35:f7:ed: 84:31:f6:25:2c:41:cb:15:98:c4:78:31:ee:57:9f:8c:5e:59: 3a:99:9d:80:61:8a:d7:2d:08:a5:1f:0c:c3:54:13:c9:9b:c8: e8:5e:12:03:df:44:51:7c:5a:b7:01:29:9d:42:92:c9:3a:b1: 08:a1:4e:ff:81:ea:fa:00:9d:7b:ae:fd:39:57:7c:97:ce:1a: 0f:54:61:fc:65:08:ed:59:e0:e6:be:72:29:a7:51:f3:45:8c: 8f:35:27:17:81:55:48:58:69:b6:03:a4:d9:d6:e1:a3:6c:45: d7:20:88:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUxMjIwMjE0MzIyWhcNMjUxMjI3MjE0MzIyWjAYMRYwFAYD VQQDDA02OTQ3MTg3Yi1hZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttEr6dh4ryunUymR+PI0G6nQAm8Q9Xqi9JZEXszbDdlvpk9GiLFAm08wOAj3 JiSJ71/NXcOuDSRvsEi7B4MA7hceYnMx+2cbN6b1Wewp1LA95znnhoLVW0rdLf/N BtBlIozFVM0CWYHniaoTDDm00mqfsaabIu7m5kngQgY+9E62SeUAqxXbo8pZemL8 lWklielPjJAgEQV3C0PIkKQyF7+U0rdbZjWl0DAG/0+qYHnw2srf11rNaA/7XHxc 86EBRg6BcWGlvRbhGH8Gq+p28deTu3U+KDKgNplbsHmhoNnCvP6KAoGHjhnH4BVp iJ5hHAVhF61seG4rn63c5x1urQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5cSntq Hs2LeiA8qMaPn7xPg0p4MB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIMkz/PjM6nivZ2PPGbfQzJ10VYZea0rHJ6fhdwFyNPQwp3PUgWYyc UK9CCKYQVpP7LwEZjd9eQgAlueDsI0QdHVnWDJ6kHSjuv99bhWcOLUZack4TAX+T AkEZ9ILi1HM4Mmhoa+e7Braehj3aoIAwiL8rejzj1qWG/uI1J6ZwOG233EPB3un1 oxBuq6k19+2EMfYlLEHLFZjEeDHuV5+MXlk6mZ2AYYrXLQilHwzDVBPJm8joXhID 30RRfFq3ASmdQpLJOrEIoU7/ger6AJ17rv05V3yXzhoPVGH8ZQjtWeDmvnIpp1Hz RYyPNScXgVVIWGm2A6TZ1uGjbEXXIIit -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:27 2025 by rpki-client