This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: r2R4MRK/ihaJjkwzvxFsaRRSrz5QwOXlcc7fo5EAtD4= Subject key identifier: 7A:A4:3E:C4:48:F9:A3:42:6D:9C:94:99:78:20:2F:B6:70:AB:B3:ED Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 081D Signing time: Thu 18 Dec 2025 20:30:37 +0000 Manifest this update: Thu 18 Dec 2025 20:30:36 +0000 Manifest next update: Thu 25 Dec 2025 20:30:36 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: 9hfVfIXd9BJMagrW8j+LXhgCNjP3XtCi1eNlok/3j8Y=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=) 3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: U1bQn0cREbDCYE8np1FOgxq7ZLPbZTRmflBcUUu8DFM=) 4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Dec 18 20:30:36 2025 GMT Not After : Dec 25 20:30:36 2025 GMT Subject: CN=6944646c-722e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:71:f2:b6:bf:b1:7f:f8:f8:2c:c2:39:2a: 95:f3:80:8b:e4:93:ff:d9:ed:26:8a:b0:7f:5e:c0: 66:cf:af:2a:8e:a6:21:1d:d2:48:94:3f:00:c0:65: b5:8f:92:92:11:d5:f2:29:e7:92:0d:c1:6a:8b:7e: 4d:7d:a7:67:a6:5d:0d:36:15:b5:19:62:ad:2b:97: 70:ec:79:9e:78:33:92:74:ab:47:04:0f:f8:10:51: 5c:16:c9:ba:6b:62:17:a1:09:ee:e2:26:0b:d3:7e: eb:3d:4b:8e:52:fb:f5:7b:eb:cb:90:d3:e1:9a:f2: db:32:ae:d9:91:0c:b8:bd:79:b6:dd:06:47:9a:59: 9f:3b:9e:1a:4c:1a:72:27:75:1f:d1:7e:2a:1f:da: 72:5f:0e:ff:2e:00:dc:8b:74:93:f8:4d:67:2c:a9: ea:6c:12:dc:37:4c:a5:6a:63:da:13:46:7c:9a:03: 9d:ad:80:83:5c:80:f7:59:1c:3d:e3:fa:b9:69:c8: 51:34:a6:81:30:3c:e7:db:24:c7:2a:4c:f4:8c:7b: 22:5b:23:d5:7e:04:93:fb:fe:0c:29:7f:c3:0f:19: c3:c5:cb:fc:1f:2b:b5:df:64:ef:a4:59:6a:ef:b9: 0a:2e:53:ab:ce:0b:43:1f:73:20:0a:1c:d5:77:a0: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A4:3E:C4:48:F9:A3:42:6D:9C:94:99:78:20:2F:B6:70:AB:B3:ED X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:17:7c:0b:99:f6:18:3e:e4:9e:bc:13:24:5b:3b:d5:6d:a2: ba:31:31:ec:8a:be:33:cb:70:76:6a:92:22:5e:64:95:e8:51: 0c:46:0a:28:98:74:48:e0:c4:fa:94:09:af:ff:71:03:e6:94: f4:29:dd:5f:3d:b2:12:e8:a3:71:f6:2b:fb:34:7e:b8:fb:90: b2:40:e4:33:9f:7c:33:72:83:76:16:97:27:c0:d8:c2:95:4d: 6c:43:f3:1c:96:92:5b:bd:a4:1c:6e:36:c2:e8:e0:5f:88:1d: 3b:e6:9b:0d:2c:0b:2f:6f:62:b7:46:b7:48:a9:fa:ab:b3:7a: 18:0b:a2:68:90:d5:0d:d3:3e:44:70:45:2c:24:1d:fc:54:b0: 15:e2:c7:c0:14:44:bc:7b:2a:5f:79:35:4a:33:43:0a:63:a3: 58:4c:a2:48:72:13:3d:17:79:5c:8b:42:83:1c:8d:bc:8c:33: 4a:ac:de:62:60:f7:fc:c1:d7:83:d4:cf:13:8e:51:59:d0:c0: e9:f5:58:de:b0:e6:21:00:c4:98:50:be:e6:01:57:1c:10:7f: fa:66:bf:19:be:74:02:00:78:5b:b4:c2:42:ac:ae:e0:b9:1e: df:36:06:77:2a:c9:08:97:2f:8f:da:8b:c0:2c:67:92:32:c8: 89:22:2c:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUxMjE4MjAzMDM2WhcNMjUxMjI1MjAzMDM2WjAYMRYwFAYD VQQDDA02OTQ0NjQ2Yy03MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmg5x8ra/sX/4+CzCOSqV84CL5JP/2e0mirB/XsBmz68qjqYhHdJIlD8AwGW1 j5KSEdXyKeeSDcFqi35Nfadnpl0NNhW1GWKtK5dw7HmeeDOSdKtHBA/4EFFcFsm6 a2IXoQnu4iYL037rPUuOUvv1e+vLkNPhmvLbMq7ZkQy4vXm23QZHmlmfO54aTBpy J3Uf0X4qH9pyXw7/LgDci3ST+E1nLKnqbBLcN0ylamPaE0Z8mgOdrYCDXID3WRw9 4/q5achRNKaBMDzn2yTHKkz0jHsiWyPVfgST+/4MKX/DDxnDxcv8Hyu132TvpFlq 77kKLlOrzgtDH3MgChzVd6CWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqkPsRI +aNCbZyUmXggL7Zwq7PtMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkF3wLmfYYPuSevBMkWzvVbaK6MTHsir4zy3B2apIiXmSV6FEMRgoo mHRI4MT6lAmv/3ED5pT0Kd1fPbIS6KNx9iv7NH64+5CyQOQzn3wzcoN2FpcnwNjC lU1sQ/MclpJbvaQcbjbC6OBfiB075psNLAsvb2K3RrdIqfqrs3oYC6JokNUN0z5E cEUsJB38VLAV4sfAFES8eypfeTVKM0MKY6NYTKJIchM9F3lci0KDHI28jDNKrN5i YPf8wdeD1M8TjlFZ0MDp9VjesOYhAMSYUL7mAVccEH/6Zr8ZvnQCAHhbtMJCrK7g uR7fNgZ3KskIly+P2ovALGeSMsiJIixa -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:48 2025 by rpki-client