This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: V+Wv9ftdfsJKnsitZPKXkJ3676WGR7W927sbr4ULPOU= Subject key identifier: E1:8A:03:C0:A9:19:3B:2B:3C:9B:CE:FB:B3:03:03:60:BD:BF:80:CF Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 0831 Signing time: Mon 22 Dec 2025 20:10:12 +0000 Manifest this update: Mon 22 Dec 2025 20:10:12 +0000 Manifest next update: Mon 29 Dec 2025 20:10:12 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: D+yUR0CUXNWflgNZRrLdxEhBK1J26BVZGkX21NZafZ8=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: 6xP14nks32sgSCrxZSRCROaUVIGpujX9KfbjfXlu4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Dec 22 20:10:12 2025 GMT Not After : Dec 29 20:10:12 2025 GMT Subject: CN=6949a5a4-d2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:fd:ee:5d:4c:91:7a:48:fd:25:a0:12:46: 85:ac:48:44:9f:dd:3e:fb:b4:f2:00:8f:45:b4:ba: ca:b9:b2:b8:f5:a8:39:6b:dc:69:51:d4:b7:f8:bd: 0f:64:68:28:ed:42:0f:34:ac:14:1f:ab:56:18:a2: d4:ff:45:b9:4f:d3:e4:19:97:0e:02:a9:8a:14:55: 67:24:9a:13:8f:03:06:8e:f0:64:86:1b:27:66:3c: 10:7a:60:2d:58:79:5e:69:bb:20:d5:09:d9:1a:4b: ba:df:bd:c1:c8:cd:00:2e:d1:2a:03:d1:69:a9:99: 6e:40:e3:2b:eb:5e:98:19:f4:7b:3b:ea:5b:ad:b2: 87:f6:ed:c8:26:38:9b:31:87:ba:e6:3b:2a:2c:f7: a5:f6:0d:97:75:04:96:0a:11:61:99:a7:da:7a:a8: 48:b3:34:50:39:dd:84:27:5e:62:bd:3a:4b:af:7b: 3c:b2:34:92:1f:9e:3f:4d:50:9e:72:ec:e8:0b:78: 60:b1:12:f7:b1:33:30:97:1a:3f:d1:6e:8d:eb:69: 08:47:97:33:09:6b:3e:d5:d3:26:ac:3a:fa:eb:fa: 66:34:b9:04:c2:a3:d6:5b:6e:df:73:62:18:5f:0b: b4:f9:a9:ba:5a:66:5f:b1:e4:ae:c4:76:0c:fd:f5: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8A:03:C0:A9:19:3B:2B:3C:9B:CE:FB:B3:03:03:60:BD:BF:80:CF X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f3:d5:2a:34:77:39:39:63:06:ee:18:f2:5b:3b:09:ce:08: fe:f8:e1:5c:f1:6a:e7:c5:48:78:c6:32:02:4a:cd:62:f7:1a: 1a:66:bf:69:95:f4:eb:a2:52:bd:7c:0a:8c:05:2b:bb:4c:26: 5c:e9:c1:1f:cc:f9:72:5c:9d:e2:34:3e:da:46:39:4c:f6:80: 8a:59:e7:70:f4:2d:b3:d9:ed:13:cc:e0:bf:a2:0f:3d:65:d9: 9f:9f:37:55:77:24:c8:60:d4:38:3f:da:29:92:df:0e:2e:39: b5:61:45:c2:43:a0:6b:12:16:b4:d5:f7:0f:75:b2:31:1e:45: 26:f2:03:f7:50:47:b9:99:7d:e2:37:bf:6f:fa:f6:2a:99:3b: 91:c8:fe:d3:5b:cd:40:cb:08:1e:cc:3d:fb:6e:e8:0b:cb:10: 3e:e9:73:af:74:97:1e:69:1f:a6:fe:b8:ea:34:7c:1c:b3:b4: 58:06:9d:26:fb:c3:0d:66:f2:af:97:5c:94:29:84:f2:08:63: 98:90:b0:fb:aa:a4:17:32:4e:18:f0:70:58:d2:7d:48:a1:fe: 56:63:6e:fb:fa:6d:2c:1f:46:12:28:aa:4b:76:4b:74:75:1f: a4:09:e4:e1:16:a3:4c:55:a4:c1:eb:78:68:f1:d6:41:0d:42: 84:a1:75:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjUxMjIyMjAxMDEyWhcNMjUxMjI5MjAxMDEyWjAYMRYwFAYD VQQDDA02OTQ5YTVhNC1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMj97l1MkXpI/SWgEkaFrEhEn90++7TyAI9FtLrKubK49ag5a9xpUdS3+L0P ZGgo7UIPNKwUH6tWGKLU/0W5T9PkGZcOAqmKFFVnJJoTjwMGjvBkhhsnZjwQemAt WHleabsg1QnZGku6373ByM0ALtEqA9FpqZluQOMr616YGfR7O+pbrbKH9u3IJjib MYe65jsqLPel9g2XdQSWChFhmafaeqhIszRQOd2EJ15ivTpLr3s8sjSSH54/TVCe cuzoC3hgsRL3sTMwlxo/0W6N62kIR5czCWs+1dMmrDr66/pmNLkEwqPWW27fc2IY Xwu0+am6WmZfseSuxHYM/fWpJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGKA8Cp GTsrPJvO+7MDA2C9v4DPMB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ89UqNHc5OWMG7hjyWzsJzgj++OFc8WrnxUh4xjICSs1i9xoaZr9p lfTrolK9fAqMBSu7TCZc6cEfzPlyXJ3iND7aRjlM9oCKWedw9C2z2e0TzOC/og89 ZdmfnzdVdyTIYNQ4P9opkt8OLjm1YUXCQ6BrEha01fcPdbIxHkUm8gP3UEe5mX3i N79v+vYqmTuRyP7TW81AywgezD37bugLyxA+6XOvdJceaR+m/rjqNHwcs7RYBp0m +8MNZvKvl1yUKYTyCGOYkLD7qqQXMk4Y8HBY0n1Iof5WY277+m0sH0YSKKpLdkt0 dR+kCeThFqNMVaTB63ho8dZBDUKEoXUQ -----END CERTIFICATE-----Generated at Tue Dec 23 22:42:33 2025 by rpki-client