This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: JHOW3C/snkN06bfyghvuhFbCmDbM8px89kV+u4bRIVw= Subject key identifier: 49:EE:4C:52:AE:9A:F9:47:68:C3:7D:49:AA:74:FC:44:BB:30:B3:9B Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: E9 Signing time: Fri 19 Dec 2025 04:31:24 +0000 Manifest this update: Fri 19 Dec 2025 04:31:24 +0000 Manifest next update: Fri 26 Dec 2025 04:31:24 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: yQEcMiEimBKKP9zI+q5eFC9R/bmjwB/wm5RdpdtgZeM=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: bXsYiFs/1LAAvnPFWc2oF5LhYtHyhSVuRh2eDok+L9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Dec 19 04:31:24 2025 GMT Not After : Dec 26 04:31:24 2025 GMT Subject: CN=6944d51c-f838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:6f:e8:86:e1:3a:6d:82:32:72:64:21:48: d6:84:a5:fa:d0:7d:03:98:df:5c:72:07:0f:04:a8: ac:6d:c1:f9:42:58:f4:cd:b6:22:ca:69:73:a6:17: 05:a1:22:cd:b0:01:57:b3:8c:75:16:af:5b:60:df: e1:de:e0:69:7b:28:ba:86:e1:dd:95:11:b1:87:f1: fb:8c:53:ab:2d:e7:ce:b0:64:25:39:b9:17:43:bf: c6:68:3b:cb:97:86:87:3e:b7:c6:59:40:c0:a9:e5: d6:9a:11:64:b1:b3:be:ee:47:d5:25:d0:43:49:05: 91:8d:4a:39:02:40:ab:0a:d0:5a:cc:1c:50:a0:d6: 79:26:e4:5e:b1:c2:67:2b:0b:1c:87:f5:ad:fb:83: 30:fd:e1:7f:3f:bb:23:c8:b8:6b:4a:e2:f5:99:31: 42:34:c0:89:8b:90:98:41:33:82:da:10:ce:f8:35: cc:75:f7:17:0f:9f:40:83:d0:c0:ee:35:9c:f5:b9: 04:8b:db:b8:c5:f9:5d:25:a7:1d:f6:a0:1a:ff:9b: 3c:f9:ee:78:98:49:a2:7c:2c:87:df:18:06:27:ae: 19:f2:70:93:79:2d:89:85:5c:69:cc:c6:49:1d:69: 63:a8:34:49:99:e8:20:7f:55:02:d5:95:b0:0a:ab: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:4C:52:AE:9A:F9:47:68:C3:7D:49:AA:74:FC:44:BB:30:B3:9B X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:73:ed:5d:7e:d6:c1:e9:72:35:4f:cc:43:52:e7:e4:04:1e: 79:5d:f3:1f:15:39:32:32:b3:18:22:00:29:1c:6b:49:89:ce: 1c:4a:78:95:a9:3b:28:8d:84:d9:97:bb:be:75:da:45:d0:45: a6:6f:be:cb:95:2d:b8:d7:b5:03:16:a6:f4:91:03:90:65:6c: 40:50:f8:9b:67:85:13:7f:ff:63:b9:0c:dc:20:8b:24:01:8b: 1a:2d:e7:6b:0f:b2:0d:6e:f6:c7:b6:22:79:dd:80:2a:1a:a6: 0c:5c:0d:55:b8:aa:27:84:ed:7c:20:12:b3:cf:10:b6:c3:1d: 7f:39:4b:01:11:29:d2:9a:db:f8:ae:f9:51:16:4b:59:69:12: ce:96:bc:97:16:d8:68:40:d4:f5:53:b5:8c:84:03:5a:19:01: 74:b0:6e:6b:5c:fd:ab:90:d4:7e:05:45:0f:6d:74:ac:d9:e8: e0:06:d3:dd:ae:94:d7:04:fb:5c:25:d9:70:d5:ab:92:2f:8e: aa:f8:4c:09:f1:f8:29:38:c5:0a:28:b8:35:0c:82:0f:87:8b: c2:85:a3:62:4d:31:2c:cc:c4:c1:cd:6c:7e:fb:0c:fb:bd:3d: 78:be:b2:b3:c4:06:87:dd:20:0a:d6:f1:90:44:b6:02:7e:01: 47:5d:49:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUxMjE5MDQzMTI0WhcNMjUxMjI2MDQzMTI0WjAYMRYwFAYD VQQDDA02OTQ0ZDUxYy1mODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDFv6IbhOm2CMnJkIUjWhKX60H0DmN9ccgcPBKisbcH5Qlj0zbYiymlzphcF oSLNsAFXs4x1Fq9bYN/h3uBpeyi6huHdlRGxh/H7jFOrLefOsGQlObkXQ7/GaDvL l4aHPrfGWUDAqeXWmhFksbO+7kfVJdBDSQWRjUo5AkCrCtBazBxQoNZ5JuRescJn Kwsch/Wt+4Mw/eF/P7sjyLhrSuL1mTFCNMCJi5CYQTOC2hDO+DXMdfcXD59Ag9DA 7jWc9bkEi9u4xfldJacd9qAa/5s8+e54mEmifCyH3xgGJ64Z8nCTeS2JhVxpzMZJ HWljqDRJmeggf1UC1ZWwCqsaAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnuTFKu mvlHaMN9Sap0/ES7MLObMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSc+1dftbB6XI1T8xDUufkBB55XfMfFTkyMrMYIgApHGtJic4cSniV qTsojYTZl7u+ddpF0EWmb77LlS2417UDFqb0kQOQZWxAUPibZ4UTf/9juQzcIIsk AYsaLedrD7INbvbHtiJ53YAqGqYMXA1VuKonhO18IBKzzxC2wx1/OUsBESnSmtv4 rvlRFktZaRLOlryXFthoQNT1U7WMhANaGQF0sG5rXP2rkNR+BUUPbXSs2ejgBtPd rpTXBPtcJdlw1auSL46q+EwJ8fgpOMUKKLg1DIIPh4vChaNiTTEszMTBzWx++wz7 vT14vrKzxAaH3SAK1vGQRLYCfgFHXUmw -----END CERTIFICATE-----Generated at Fri Dec 19 18:47:57 2025 by rpki-client