This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: XeROlGJuEhILMlbjvpIenyaCqZNuQC+6fCyGuvtG2AM= Subject key identifier: D7:C6:8E:CD:2C:43:08:7D:AF:7D:7A:1E:1B:7F:0F:56:5E:E9:88:2B Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 0232 Signing time: Fri 19 Dec 2025 01:16:55 +0000 Manifest this update: Fri 19 Dec 2025 01:16:55 +0000 Manifest next update: Fri 26 Dec 2025 01:16:55 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: Bv38mSaSV1c+E2FHsJcRTDXl0QUSByhcWB+BRn+ajnU=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: zxrXFqsfD+7NRRncl+qUeb1Nz8SeSSAW+8BU/fya5cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Dec 19 01:16:55 2025 GMT Not After : Dec 26 01:16:55 2025 GMT Subject: CN=6944a787-591c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:ff:2e:fe:eb:5d:10:ef:d2:4c:59:6a:7a: 48:67:5c:1f:c8:2d:70:6f:d3:4e:b1:f0:41:1f:ed: 18:51:21:8f:62:de:a4:bb:08:81:be:0f:6f:8e:03: cf:ba:3e:7b:85:58:0f:b1:93:b8:d1:7b:bc:0c:b9: 4f:24:b1:73:5f:f4:96:87:9c:4e:50:f6:be:91:f5: f3:d0:7e:05:5a:e3:e1:db:77:54:97:1d:05:fc:ee: de:6b:45:2b:8c:14:a7:aa:79:e3:f2:9b:86:95:31: d4:05:1b:af:76:4e:fd:7b:da:2b:2f:8e:15:e0:28: db:3b:4e:4d:04:1b:11:e6:1a:5a:bd:f6:4e:b3:af: 2a:6b:d6:11:62:2d:21:43:27:9c:1e:e1:c9:7d:d7: 69:45:be:ce:c5:0e:2d:44:21:4c:7d:6f:bb:d5:e3: 40:87:ed:be:e3:76:4f:c4:dd:f0:97:cb:c5:35:fb: 3b:9b:d1:e1:4c:c9:5e:a4:58:9e:3b:68:7b:1f:10: a6:06:40:a6:05:63:ed:5a:e1:45:84:36:a1:70:36: eb:31:4b:a7:f4:90:4c:a7:3a:f0:99:2d:54:1e:37: 90:9c:94:5b:86:60:7c:18:6a:7a:43:bd:83:d9:7e: be:7b:7a:fd:27:51:b3:a3:55:fa:e2:fc:2b:59:9b: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C6:8E:CD:2C:43:08:7D:AF:7D:7A:1E:1B:7F:0F:56:5E:E9:88:2B X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:32:cb:72:10:17:a5:87:9b:1d:ff:54:48:7a:5d:a0:ea: 03:c3:ac:ca:31:d0:45:ea:68:e2:fc:1e:16:30:00:20:13:90: 61:c1:26:a0:10:b6:6c:ab:a2:71:e4:17:0e:17:86:62:40:ce: 40:b6:d1:65:90:59:78:18:73:c1:b9:4f:ae:a7:e1:20:76:a4: c5:04:f6:eb:8a:ac:e7:75:24:0b:24:ee:33:23:27:8b:5f:77: e7:7c:b0:7a:25:9c:2e:21:4e:05:e7:90:e5:c0:a7:91:c1:47: 4c:cf:8b:50:2a:69:aa:a9:73:10:b3:27:91:a1:84:20:a8:ef: 8a:50:43:32:14:87:6e:4e:8b:c7:20:05:95:e3:38:a5:fb:fe: a3:a5:3f:1a:aa:0c:05:be:13:f3:89:f8:19:b9:21:5d:fd:39: 21:93:6a:64:87:5d:ee:7c:b9:8a:23:fd:a2:88:d2:0c:f3:f8: 00:7c:1d:fc:91:e9:35:0f:cf:53:47:79:76:f3:9d:b4:93:dd: ee:9d:5e:91:86:33:db:2c:ee:e4:d3:2f:f0:87:23:6b:d3:16: ae:56:6c:af:6a:51:37:eb:ca:4a:b6:53:c6:5f:2f:d2:e4:d5: cb:8c:7e:af:02:ae:8a:7b:f8:7d:64:0b:3e:0c:09:b0:f0:ff: 3f:e6:99:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUxMjE5MDExNjU1WhcNMjUxMjI2MDExNjU1WjAYMRYwFAYD VQQDDA02OTQ0YTc4Ny01OTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudH/Lv7rXRDv0kxZanpIZ1wfyC1wb9NOsfBBH+0YUSGPYt6kuwiBvg9vjgPP uj57hVgPsZO40Xu8DLlPJLFzX/SWh5xOUPa+kfXz0H4FWuPh23dUlx0F/O7ea0Ur jBSnqnnj8puGlTHUBRuvdk79e9orL44V4CjbO05NBBsR5hpavfZOs68qa9YRYi0h QyecHuHJfddpRb7OxQ4tRCFMfW+71eNAh+2+43ZPxN3wl8vFNfs7m9HhTMlepFie O2h7HxCmBkCmBWPtWuFFhDahcDbrMUun9JBMpzrwmS1UHjeQnJRbhmB8GGp6Q72D 2X6+e3r9J1Gzo1X64vwrWZtdywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfGjs0s Qwh9r316Hht/D1Ze6YgrMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhijLLchAXpYebHf9USHpdoOoDw6zKMdBF6mji/B4WMAAgE5BhwSag ELZsq6Jx5BcOF4ZiQM5AttFlkFl4GHPBuU+up+EgdqTFBPbriqzndSQLJO4zIyeL X3fnfLB6JZwuIU4F55DlwKeRwUdMz4tQKmmqqXMQsyeRoYQgqO+KUEMyFIduTovH IAWV4zil+/6jpT8aqgwFvhPzifgZuSFd/Tkhk2pkh13ufLmKI/2iiNIM8/gAfB38 kek1D89TR3l28520k93unV6RhjPbLO7k0y/whyNr0xauVmyvalE368pKtlPGXy/S 5NXLjH6vAq6Ke/h9ZAs+DAmw8P8/5pmH -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:49 2025 by rpki-client