This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: 7ZN5GnA6hjLt2eR9OxCfi6gWd/QnRlaPTA8420ui6mc= Subject key identifier: E8:A8:45:E0:51:EF:15:93:01:53:D7:B3:B8:2F:C9:C0:8F:5B:93:B4 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 70 Signing time: Thu 01 Jan 2026 06:24:36 +0000 Manifest this update: Thu 01 Jan 2026 06:24:35 +0000 Manifest next update: Thu 08 Jan 2026 06:24:35 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: ibcRXbLvVRqw52dBX+fAYqrfgfJt2rnD+YDXX+R/99M=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 06:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Jan 1 06:24:35 2026 GMT Not After : Jan 8 06:24:35 2026 GMT Subject: CN=69561324-326b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:5a:0e:b5:86:5a:d8:35:f2:ba:25:d1:a3: 7f:9a:fa:5a:3b:03:1b:da:9f:4f:93:af:43:af:27: 89:fa:5e:f7:61:84:41:41:94:30:3e:e7:84:da:0d: 9f:5a:a7:f1:3f:45:0c:c3:60:8a:2a:f7:f5:da:b2: 76:cb:05:1d:23:59:89:5a:89:60:85:eb:14:4a:b7: 0d:33:d3:12:6d:37:d3:96:22:e8:b7:29:5c:ef:b1: 82:83:83:ae:78:b8:fe:50:a0:aa:a8:54:00:a6:a7: 19:c5:0b:93:53:41:83:f2:1d:32:6a:c3:31:03:4d: 5a:47:53:57:2d:91:69:51:94:73:83:72:ad:a4:94: df:92:b6:52:e9:83:b9:f1:b9:60:22:47:3a:47:51: dd:06:35:b7:41:ed:53:88:1a:51:64:1f:41:32:ed: 06:56:59:d4:70:83:67:61:93:a3:bf:fe:02:58:3e: 5d:0b:5a:52:9d:e5:4b:4b:0e:3e:da:eb:00:56:4a: c5:a6:3b:16:68:f3:24:39:dd:cc:ae:97:7a:75:c2: 8e:b8:6d:8f:21:c5:39:78:af:28:c3:05:51:f8:b2: 7b:b8:88:c0:55:4c:80:1f:8a:bd:ad:26:b6:03:df: d9:81:54:45:65:d9:db:75:91:05:b9:6a:4c:e5:78: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:45:E0:51:EF:15:93:01:53:D7:B3:B8:2F:C9:C0:8F:5B:93:B4 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:be:76:50:52:ec:39:b3:61:18:a1:ea:00:28:98:9a:87:13: 2b:53:f6:12:3c:ff:2e:7e:ad:75:68:70:d6:5d:d6:f5:24:41: d6:19:60:5c:f3:6c:e5:74:df:1b:7a:21:3a:00:14:7f:ec:4b: 06:09:2e:a3:ff:78:e6:b0:3a:8d:8a:27:3a:74:ed:4b:1f:9b: 08:5d:83:ee:25:05:ae:43:4a:d6:e0:0e:c8:37:d1:5e:86:72: 5c:84:c8:f5:06:a9:79:0b:64:9b:e7:e6:29:35:9b:18:5b:1e: d0:6b:38:38:69:8d:d7:df:35:46:49:1d:e7:e7:a0:ee:e5:ec: d3:5d:09:d9:c8:77:ac:f8:68:c7:a9:26:59:f4:d7:4f:16:f2: da:b9:c9:9f:12:21:fe:06:26:6b:c4:52:a3:c1:18:65:59:8b: 55:5d:11:3f:c0:82:11:a5:7b:7c:b1:f7:18:5b:19:8b:d4:35: e6:4a:ed:f4:79:6c:85:44:44:b7:e9:7c:48:38:20:de:d7:3d: 34:65:03:e3:7b:7e:10:90:23:21:55:03:a5:64:08:20:bb:df: 92:6d:ef:e5:ed:20:89:10:53:94:1e:13:44:fc:ea:b4:c5:dd: f9:86:23:c8:af:6c:79:85:af:39:87:0b:f1:17:fb:75:8c:f9: 91:92:e6:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNjAxMDEwNjI0MzVaFw0yNjAxMDgwNjI0MzVaMBgxFjAUBgNV BAMMDTY5NTYxMzI0LTMyNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCIM1oOtYZa2DXyuiXRo3+a+lo7Axvan0+Tr0OvJ4n6XvdhhEFBlDA+54TaDZ9a p/E/RQzDYIoq9/XasnbLBR0jWYlaiWCF6xRKtw0z0xJtN9OWIui3KVzvsYKDg654 uP5QoKqoVACmpxnFC5NTQYPyHTJqwzEDTVpHU1ctkWlRlHODcq2klN+StlLpg7nx uWAiRzpHUd0GNbdB7VOIGlFkH0Ey7QZWWdRwg2dhk6O//gJYPl0LWlKd5UtLDj7a 6wBWSsWmOxZo8yQ53cyul3p1wo64bY8hxTl4ryjDBVH4snu4iMBVTIAfir2tJrYD 39mBVEVl2dt1kQW5akzleGkbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6KhF4FHv FZMBU9ezuC/JwI9bk7QwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJW+dlBS7DmzYRih6gAomJqHEytT9hI8/y5+rXVocNZd1vUkQdYZYFzz bOV03xt6IToAFH/sSwYJLqP/eOawOo2KJzp07Usfmwhdg+4lBa5DStbgDsg30V6G clyEyPUGqXkLZJvn5ik1mxhbHtBrODhpjdffNUZJHefnoO7l7NNdCdnId6z4aMep Jln0108W8tq5yZ8SIf4GJmvEUqPBGGVZi1VdET/AghGle3yx9xhbGYvUNeZK7fR5 bIVERLfpfEg4IN7XPTRlA+N7fhCQIyFVA6VkCCC735Jt7+XtIIkQU5QeE0T86rTF 3fmGI8ivbHmFrzmHC/EX+3WM+ZGS5v4= -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:50 2026 by rpki-client