This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: cGU/b4FcYadpQBoQUIAM05YEMqmDg20q1RXFnWqXZRM= Subject key identifier: 5F:52:20:14:67:25:18:E0:38:D2:38:64:E4:D2:9E:A4:15:1D:47:2E Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 05B2 Signing time: Thu 18 Dec 2025 22:27:38 +0000 Manifest this update: Thu 18 Dec 2025 22:27:38 +0000 Manifest next update: Thu 25 Dec 2025 22:27:38 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: cHKgJdPTUICK7O07g6pHyXvBcAxYg75TW8vR1ZIiIWo=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Dec 18 22:27:38 2025 GMT Not After : Dec 25 22:27:38 2025 GMT Subject: CN=69447fda-4ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b1:2c:4c:e1:9a:2f:94:0b:77:17:eb:af:64: dc:a7:c9:48:59:d6:e2:d6:f3:98:92:aa:05:f8:d2: da:b5:3c:72:07:cf:2c:48:82:62:18:ac:e1:ec:9a: 58:85:b4:96:72:e7:34:02:b9:5a:10:08:a1:66:c3: 3a:ae:24:85:04:d0:2b:bf:0f:bd:80:62:2d:d8:85: ab:5f:64:34:7f:e8:a0:e6:98:fc:06:83:ed:ed:4d: b9:8f:b4:1d:83:31:44:24:94:e2:cf:e1:35:85:bb: 27:6f:e6:e0:f8:54:0c:88:95:df:b8:d0:2d:65:95: f4:42:fe:b3:89:db:d9:06:e2:a3:9d:09:f5:f8:ff: 33:4d:d3:33:c3:53:e1:b9:29:e6:53:69:9e:f3:06: 97:11:0a:cf:66:d5:06:19:9e:53:7a:1f:57:df:62: 8c:69:4d:77:47:62:02:fe:e0:bf:37:de:3f:b1:9f: 1f:c9:c3:12:a0:c5:c6:f6:f5:fb:e5:60:3c:e5:f8: be:0d:25:1e:8b:03:c2:03:9b:f8:38:2c:21:6f:61: 92:95:2a:db:bd:25:11:2c:30:20:01:69:86:05:fe: 6f:b6:e6:08:5c:3c:fc:87:80:ea:53:d8:0b:e9:06: ec:c6:2a:19:d0:e2:e1:e3:b7:1e:cc:c7:bb:b0:95: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:52:20:14:67:25:18:E0:38:D2:38:64:E4:D2:9E:A4:15:1D:47:2E X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b6:f5:8e:0e:05:1e:09:c7:9a:4a:63:05:d1:04:c3:40:f6: 70:8a:cc:5d:be:32:39:8b:b6:c4:af:63:d3:5e:9f:69:11:7c: 8d:f0:e6:1b:51:33:74:b2:f2:ed:46:ba:82:b0:07:f3:0d:8a: fb:4f:04:d7:21:68:cc:11:8e:64:1a:aa:21:46:5b:b5:ae:9a: 6d:4d:99:39:7a:fb:09:79:99:79:8d:34:b5:35:5f:88:c4:51: 6c:96:5f:59:40:10:12:18:81:a4:11:b8:49:b0:9d:a5:3a:0e: 85:50:e4:7c:69:99:f5:89:1b:25:67:4d:f6:a5:70:4f:d8:5a: 42:07:88:43:a0:18:1d:a7:24:d1:02:53:eb:4a:f9:89:25:4e: b8:93:fe:05:e9:79:1e:f9:17:19:03:12:56:1f:df:8b:38:01: 9e:2b:9a:b7:de:c1:e3:cb:66:e0:69:57:84:56:74:d3:33:13: 6d:eb:5d:25:ef:16:d7:bb:e8:03:b0:83:fb:57:1e:1a:0f:6b: 80:aa:27:da:c5:e0:31:63:5d:6c:26:86:92:c7:9e:3e:ea:74: 50:10:6e:17:be:e8:b3:a2:34:36:e2:a1:19:cd:0c:f8:e9:2b: 1c:12:cb:8b:3a:2d:32:c2:dd:3b:6c:0b:7d:0e:6a:83:38:58: a1:85:ca:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUxMjE4MjIyNzM4WhcNMjUxMjI1MjIyNzM4WjAYMRYwFAYD VQQDDA02OTQ0N2ZkYS00Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+LEsTOGaL5QLdxfrr2Tcp8lIWdbi1vOYkqoF+NLatTxyB88sSIJiGKzh7JpY hbSWcuc0ArlaEAihZsM6riSFBNArvw+9gGIt2IWrX2Q0f+ig5pj8BoPt7U25j7Qd gzFEJJTiz+E1hbsnb+bg+FQMiJXfuNAtZZX0Qv6zidvZBuKjnQn1+P8zTdMzw1Ph uSnmU2me8waXEQrPZtUGGZ5Teh9X32KMaU13R2IC/uC/N94/sZ8fycMSoMXG9vX7 5WA85fi+DSUeiwPCA5v4OCwhb2GSlSrbvSURLDAgAWmGBf5vtuYIXDz8h4DqU9gL 6QbsxioZ0OLh47cezMe7sJUnJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9SIBRn JRjgONI4ZOTSnqQVHUcuMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8tvWODgUeCceaSmMF0QTDQPZwisxdvjI5i7bEr2PTXp9pEXyN8OYb UTN0svLtRrqCsAfzDYr7TwTXIWjMEY5kGqohRlu1rpptTZk5evsJeZl5jTS1NV+I xFFsll9ZQBASGIGkEbhJsJ2lOg6FUOR8aZn1iRslZ032pXBP2FpCB4hDoBgdpyTR AlPrSvmJJU64k/4F6Xke+RcZAxJWH9+LOAGeK5q33sHjy2bgaVeEVnTTMxNt610l 7xbXu+gDsIP7Vx4aD2uAqifaxeAxY11sJoaSx54+6nRQEG4XvuizojQ24qEZzQz4 6SscEsuLOi0ywt07bAt9DmqDOFihhcpe -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:22 2025 by rpki-client