This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: NKM33H6w9dhswGznK4qpNSxqElxdQ25JToRXN3HpvlU= Subject key identifier: D8:53:E8:A4:B2:6D:33:9B:F1:51:82:4D:2D:3D:B6:7A:83:82:63:B0 Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: C5 Signing time: Mon 29 Dec 2025 04:58:47 +0000 Manifest this update: Mon 29 Dec 2025 04:58:47 +0000 Manifest next update: Mon 05 Jan 2026 04:58:47 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: cPkxK7mJU+SBtaX2FahzMhvOt83orCUpgY8qC1wSYzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: Dec 29 04:58:47 2025 GMT Not After : Jan 5 04:58:47 2026 GMT Subject: CN=69520a87-bccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:05:9c:65:e6:25:2f:81:e0:01:19:bc:3c: 23:0b:8c:27:50:52:bf:ab:5b:35:86:fe:d4:31:5b: 91:49:57:4a:83:9f:85:a4:54:39:50:e7:7e:4c:fe: b3:08:69:e4:f7:c0:7e:10:9d:3d:8a:64:e9:17:32: 5b:bd:8d:26:9b:69:62:e2:33:da:93:e9:ba:2a:3c: 63:19:55:37:67:60:54:18:62:65:62:64:9c:91:76: 21:7e:ed:40:95:e5:0f:09:12:89:b0:01:d3:5a:fb: f9:64:43:3e:57:78:62:27:aa:e6:ff:c6:a4:e3:61: 06:e8:7d:b6:3c:c5:9a:ec:1a:e5:69:e6:0d:2b:2f: 6a:7e:4a:5d:60:d5:81:8d:dd:4a:04:8f:fe:a3:15: 39:36:ed:2d:a8:04:b3:6f:97:89:f2:a9:cd:42:41: d4:bf:7e:92:fe:e2:05:8f:6c:ec:3d:fb:35:34:dc: 62:f0:c0:54:7b:a8:f1:3e:2c:d8:52:14:fe:4b:c0: 02:06:3b:fd:f6:00:3f:df:9f:b8:8a:c3:83:49:fe: ad:20:c1:f4:e0:8d:19:f0:53:21:f9:66:e5:d6:12: 44:54:e0:f6:3b:f5:2d:7c:3b:95:35:90:cb:e3:e3: 14:5d:a6:0c:4a:15:d1:2d:21:61:df:c0:fc:aa:2c: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:53:E8:A4:B2:6D:33:9B:F1:51:82:4D:2D:3D:B6:7A:83:82:63:B0 X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:14:2c:ae:7d:a2:b0:cc:da:16:aa:ea:af:2f:75:e1:08:71: 3e:33:e9:e6:bf:3c:84:48:a4:ba:f3:0b:d3:6d:d0:0c:bb:00: eb:9b:49:e3:64:d6:bb:95:f7:a0:8b:1c:6e:c0:f2:17:26:c4: d6:8d:ac:bb:87:88:d6:06:6f:53:23:08:57:3b:22:51:70:bb: fa:a2:4d:4c:7e:be:f1:69:08:57:26:c0:e7:72:6c:3c:26:37: ce:5b:08:96:1a:95:66:e6:34:a1:4c:59:12:6d:3c:f9:c9:d8: 1b:3f:b1:49:d7:32:1a:ca:a1:01:b2:98:2d:ec:36:d1:68:59: 1b:1a:e3:bb:93:0f:d0:20:10:f0:e9:df:49:e7:fe:c3:ba:39: e2:b1:2e:7c:e0:cd:a2:9a:4b:95:26:79:a1:30:e3:7b:c5:a6: 63:07:4a:97:0d:c8:01:a8:51:59:ae:c0:36:a5:17:b7:55:33: f3:4d:1e:db:d9:5a:bb:c4:34:a7:db:fe:c2:4a:72:6c:9c:94: 57:71:24:e1:38:9d:3f:58:7e:a7:d8:8a:56:ee:2b:ee:2f:de: 85:be:01:51:6f:c4:88:23:7d:db:32:aa:85:e1:51:3d:90:9c: 81:02:36:09:71:cb:f4:ad:f6:0a:9d:41:8c:d3:95:02:9b:96: 56:ce:10:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDBCNzdGN0JEMjNDQjQyODU4RDBCQkZGNkY3RTNBQzcz MTM1NTMxRDUwHhcNMjUxMjI5MDQ1ODQ3WhcNMjYwMTA1MDQ1ODQ3WjAYMRYwFAYD VQQDDA02OTUyMGE4Ny1iY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWYFnGXmJS+B4AEZvDwjC4wnUFK/q1s1hv7UMVuRSVdKg5+FpFQ5UOd+TP6z CGnk98B+EJ09imTpFzJbvY0mm2li4jPak+m6KjxjGVU3Z2BUGGJlYmSckXYhfu1A leUPCRKJsAHTWvv5ZEM+V3hiJ6rm/8ak42EG6H22PMWa7BrlaeYNKy9qfkpdYNWB jd1KBI/+oxU5Nu0tqASzb5eJ8qnNQkHUv36S/uIFj2zsPfs1NNxi8MBUe6jxPizY UhT+S8ACBjv99gA/35+4isODSf6tIMH04I0Z8FMh+Wbl1hJEVOD2O/UtfDuVNZDL 4+MUXaYMShXRLSFh38D8qizmdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhT6KSy bTOb8VGCTS09tnqDgmOwMB8GA1UdIwQYMBaAFAt3970jy0KFjQu/9vfjrHMTVTHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80QzZGNjg1NkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9DM2YzdlNQTFFvV05DN18yOS1Pc2N4TlZN ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80QzZGNjg1NkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9DM2YzdlNQTFFv V05DN18yOS1Pc2N4TlZNZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlFCyufaKwzNoWquqvL3XhCHE+M+nmvzyESKS68wvTbdAMuwDrm0nj ZNa7lfegixxuwPIXJsTWjay7h4jWBm9TIwhXOyJRcLv6ok1Mfr7xaQhXJsDncmw8 JjfOWwiWGpVm5jShTFkSbTz5ydgbP7FJ1zIayqEBspgt7DbRaFkbGuO7kw/QIBDw 6d9J5/7DujnisS584M2imkuVJnmhMON7xaZjB0qXDcgBqFFZrsA2pRe3VTPzTR7b 2Vq7xDSn2/7CSnJsnJRXcSThOJ0/WH6n2IpW7ivuL96FvgFRb8SII33bMqqF4VE9 kJyBAjYJccv0rfYKnUGM05UCm5ZWzhCR -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:36 2025 by rpki-client