This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: /fUd0b9Jj8RQXwFn3PFPJTaOjnbG4RxSFiaBLmZPeSc= Subject key identifier: 57:29:99:13:D9:00:B4:52:79:DD:24:D3:FD:96:13:C6:4B:24:E4:91 Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 18FD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 18F6 Signing time: Sat 20 Dec 2025 15:39:13 +0000 Manifest this update: Sat 20 Dec 2025 15:39:13 +0000 Manifest next update: Sat 27 Dec 2025 15:39:13 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: pIHfduHwQZ5hIaRrgRRDN4jlQ9Nc7gCU8e3vvT7WXag=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: iFM56WrKeXwdoA2Uh6qPu0ZtIRkJDq6/ES1KC7jnXoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6397 (0x18fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Dec 20 15:39:13 2025 GMT Not After : Dec 27 15:39:13 2025 GMT Subject: CN=6946c321-7933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:2c:38:5c:60:bc:d3:8d:c0:ae:7c:81:84: 29:6e:ef:0f:8a:40:f4:1c:c5:6b:ea:72:d1:1f:37: 2f:54:ee:0c:0a:ef:f3:91:32:52:4f:12:00:e1:4a: 84:6c:bf:59:99:f8:3a:fc:79:c9:a8:67:1c:f5:ca: 16:43:05:05:fb:f9:0e:00:d9:f1:a0:e1:de:f8:f9: 4c:b7:e0:8e:e3:db:2c:bf:dd:f5:2d:0a:22:55:3a: 19:7d:f5:3a:b6:1f:ca:eb:4c:0a:40:5f:cf:1b:e7: 32:98:cb:5f:60:99:80:3d:80:3e:af:97:5d:93:fc: d9:d6:ad:4f:1e:e2:a0:36:db:0f:9b:22:ce:74:2c: 16:22:bc:8b:f4:c4:4d:61:f0:58:53:43:1d:27:4f: 96:5e:96:38:74:34:35:37:d0:d8:60:03:4c:51:06: 82:60:8c:9f:9b:37:69:02:2b:b7:23:67:ba:ff:5d: 14:7a:4f:c7:ba:29:b9:06:04:5f:69:9d:7c:89:41: a4:fa:e7:61:03:a9:f8:f8:9f:f8:83:18:44:bf:78: 7c:82:ee:be:c0:c9:7b:a2:0f:2b:76:71:c2:70:36: 74:d4:be:fc:92:18:6c:61:18:15:05:eb:de:4a:40: 34:25:df:09:5d:69:ac:bc:3f:76:1c:dc:bc:2a:ba: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:29:99:13:D9:00:B4:52:79:DD:24:D3:FD:96:13:C6:4B:24:E4:91 X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:74:6a:0b:f0:de:6e:ed:1e:2b:dc:90:d6:49:f7:2f:a9:a7: e9:01:ff:38:e8:3e:06:5e:3c:4f:ae:7e:e0:60:50:3e:52:3c: 05:da:d8:65:46:75:8a:c4:d5:40:90:6a:01:12:f0:b2:f1:b8: 7e:d8:fc:3c:a5:63:ec:44:db:02:7c:52:43:45:b6:43:4d:2a: 2f:e6:84:9f:c6:7b:3e:c1:33:95:8f:8a:3d:03:a4:64:94:af: 1f:2e:2d:b3:b6:b8:38:b8:8a:b4:80:29:d4:bd:24:67:0b:36: 6f:33:4a:eb:16:07:76:66:b4:62:40:df:76:d8:24:df:01:31: 84:ac:5e:40:ac:7f:a9:9e:9f:4c:55:5f:74:31:57:96:00:29: 6d:59:cc:c8:9d:56:fa:44:31:d0:a0:a5:c9:f2:42:18:74:6a: 9e:24:6c:56:b0:e8:84:72:27:9c:ba:66:15:3b:42:93:63:d3: 85:ff:0c:5e:75:5e:50:19:00:5b:6f:b2:06:b9:5d:dd:4f:26: 44:c0:c4:a3:b9:a2:dd:21:c9:b5:f4:36:b3:51:fe:9f:80:21: a8:a6:40:96:51:c8:6b:e9:96:c1:36:e2:26:c8:60:e9:43:1e: b7:c1:f4:87:0c:b2:ae:54:1e:1d:53:f9:09:60:5b:7a:74:73: 2e:27:ed:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjUxMjIwMTUzOTEzWhcNMjUxMjI3MTUzOTEzWjAYMRYwFAYD VQQDDA02OTQ2YzMyMS03OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwUsOFxgvNONwK58gYQpbu8PikD0HMVr6nLRHzcvVO4MCu/zkTJSTxIA4UqE bL9Zmfg6/HnJqGcc9coWQwUF+/kOANnxoOHe+PlMt+CO49ssv931LQoiVToZffU6 th/K60wKQF/PG+cymMtfYJmAPYA+r5ddk/zZ1q1PHuKgNtsPmyLOdCwWIryL9MRN YfBYU0MdJ0+WXpY4dDQ1N9DYYANMUQaCYIyfmzdpAiu3I2e6/10Uek/Huim5BgRf aZ18iUGk+udhA6n4+J/4gxhEv3h8gu6+wMl7og8rdnHCcDZ01L78khhsYRgVBeve SkA0Jd8JXWmsvD92HNy8KrrQgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcpmRPZ ALRSed0k0/2WE8ZLJOSRMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWdGoL8N5u7R4r3JDWSfcvqafpAf846D4GXjxPrn7gYFA+UjwF2thl RnWKxNVAkGoBEvCy8bh+2Pw8pWPsRNsCfFJDRbZDTSov5oSfxns+wTOVj4o9A6Rk lK8fLi2ztrg4uIq0gCnUvSRnCzZvM0rrFgd2ZrRiQN922CTfATGErF5ArH+pnp9M VV90MVeWACltWczInVb6RDHQoKXJ8kIYdGqeJGxWsOiEciecumYVO0KTY9OF/wxe dV5QGQBbb7IGuV3dTyZEwMSjuaLdIcm19DazUf6fgCGopkCWUchr6ZbBNuImyGDp Qx63wfSHDLKuVB4dU/kJYFt6dHMuJ+19 -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:58 2025 by rpki-client