This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: 8JDOawULeqmKCn6MFuA5G3z4JCUW2mHvFA5Mff04DGA= Subject key identifier: D7:2D:19:BF:AF:E4:B0:48:05:E8:AC:13:47:68:C1:1D:BB:29:90:02 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 6C Signing time: Thu 25 Dec 2025 05:53:33 +0000 Manifest this update: Thu 25 Dec 2025 05:53:33 +0000 Manifest next update: Thu 01 Jan 2026 05:53:33 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: 0Kvld+TB2dW85AicgnunWnDAs1XfVg/v0eRqcvhGTAU=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Dec 25 05:53:33 2025 GMT Not After : Jan 1 05:53:33 2026 GMT Subject: CN=694cd15d-90b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:28:23:0a:f2:4b:cc:55:5e:d8:9f:47:23: 16:fe:0a:42:58:b2:b5:ea:8b:99:87:01:8e:d3:20: a5:df:51:06:bb:88:10:ca:ea:47:42:bc:1e:86:05: fd:81:de:0f:1c:3a:08:dd:db:3f:6d:8f:7c:7b:c6: 1d:21:1a:bf:29:a8:9a:46:8e:72:87:ea:79:24:64: de:14:51:1d:82:13:14:f5:cd:3e:6b:e8:75:25:68: 38:fe:94:97:ee:e1:8a:bb:14:df:fd:46:46:8e:31: 6c:bf:a5:de:df:c8:a0:82:06:1e:fd:a2:4a:54:ae: a3:d8:6f:8b:54:2f:86:69:e5:1c:4e:a4:18:b1:37: 47:ea:25:7a:0f:2b:67:a1:69:f8:65:30:cc:d4:95: 25:04:d5:4a:ea:6a:a6:66:80:c0:b4:11:d5:0e:21: 07:ac:2e:8e:14:d5:ed:66:1f:43:81:a2:46:ee:05: 10:38:61:81:41:4b:c8:01:af:c9:fa:ce:eb:db:02: eb:f3:b7:8a:57:f2:17:da:90:28:62:49:56:77:52: 49:3b:b6:a3:b8:f8:94:85:ce:93:9d:49:48:b5:84: f7:04:5c:15:c8:4a:d0:76:99:c1:a8:71:2c:c1:ca: c5:1c:af:19:41:28:cf:78:db:e4:cd:4f:e1:d2:bd: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:19:BF:AF:E4:B0:48:05:E8:AC:13:47:68:C1:1D:BB:29:90:02 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:c8:ef:58:43:b9:3a:75:25:34:cd:0e:5f:81:2d:8d:e1: 0d:7a:0e:0a:7e:9e:e0:b4:9c:0a:b6:63:04:31:41:33:21:25: 5a:5e:48:09:17:e2:dd:4b:a8:93:b4:9e:12:09:ec:ab:70:d5: 86:db:1c:65:67:d4:83:3b:76:c0:06:13:c9:19:9a:3a:be:a3: 48:83:c8:c6:05:a4:10:51:4b:07:57:0b:2e:24:ee:7f:f3:b3: 5f:64:cd:7a:89:4e:c1:bd:91:50:76:63:e3:8e:c3:b0:45:63: e1:b7:c5:6f:f5:6b:4b:36:bc:60:04:aa:55:ae:88:a9:d1:52: ae:01:e8:35:ae:ab:07:4c:34:20:4c:26:88:f9:54:63:7c:74: 03:08:d8:2e:10:68:41:24:ad:0d:e9:5b:b9:c1:f6:5f:73:4c: 62:db:2c:ac:09:8a:91:8c:65:68:ed:e7:b3:de:fc:5a:68:9c: 4e:af:c5:23:ed:60:fb:b2:26:a4:ec:fa:42:a6:b2:b0:d7:a3: 6e:1b:3c:ce:7b:6e:d2:90:09:7a:f4:25:81:3c:0c:a8:a2:b0: af:79:c4:8e:ad:a6:0d:68:36:07:77:18:e1:bd:8f:40:8f:76: e8:98:ae:c5:7f:56:76:40:01:fd:19:88:6f:70:1c:b3:7e:cc: 30:c5:7a:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTEyMjUwNTUzMzNaFw0yNjAxMDEwNTUzMzNaMBgxFjAUBgNV BAMMDTY5NGNkMTVkLTkwYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiUygjCvJLzFVe2J9HIxb+CkJYsrXqi5mHAY7TIKXfUQa7iBDK6kdCvB6GBf2B 3g8cOgjd2z9tj3x7xh0hGr8pqJpGjnKH6nkkZN4UUR2CExT1zT5r6HUlaDj+lJfu 4Yq7FN/9RkaOMWy/pd7fyKCCBh79okpUrqPYb4tUL4Zp5RxOpBixN0fqJXoPK2eh afhlMMzUlSUE1UrqaqZmgMC0EdUOIQesLo4U1e1mH0OBokbuBRA4YYFBS8gBr8n6 zuvbAuvzt4pX8hfakChiSVZ3Ukk7tqO4+JSFzpOdSUi1hPcEXBXIStB2mcGocSzB ysUcrxlBKM942+TNT+HSvRPxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1y0Zv6/k sEgF6KwTR2jBHbspkAIwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9wyO9YQ7k6dSU0zQ5fgS2N4Q16Dgp+nuC0nAq2YwQxQTMhJVpeSAkX 4t1LqJO0nhIJ7Ktw1YbbHGVn1IM7dsAGE8kZmjq+o0iDyMYFpBBRSwdXCy4k7n/z s19kzXqJTsG9kVB2Y+OOw7BFY+G3xW/1a0s2vGAEqlWuiKnRUq4B6DWuqwdMNCBM Joj5VGN8dAMI2C4QaEEkrQ3pW7nB9l9zTGLbLKwJipGMZWjt57Pe/FponE6vxSPt YPuyJqTs+kKmsrDXo24bPM57btKQCXr0JYE8DKiisK95xI6tpg1oNgd3GOG9j0CP duiYrsV/VnZAAf0ZiG9wHLN+zDDFes0= -----END CERTIFICATE-----Generated at Fri Dec 26 06:36:18 2025 by rpki-client