This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: 3CB8sNHl11vR0479/X+JtsbyPCKiKrUFDj+ZK9eIIHk= Subject key identifier: DD:61:57:32:25:C6:D5:B5:87:31:A5:5C:75:6A:73:0C:36:C2:78:9C Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 05C9 Signing time: Sat 20 Dec 2025 22:24:35 +0000 Manifest this update: Sat 20 Dec 2025 22:24:34 +0000 Manifest next update: Sat 27 Dec 2025 22:24:34 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: kpXHMlGaCaLOrlJ3sEEKB3aq1kCb0RGToBqnbFA79ag=) 2: A240A20A9EB711F0914DBF7FC4F9AE02.roa (hash: psrGPY0f9n8CoPgbqVuyb4fxwFwRtYR1pcMoDSLQHS8=) 3: 02EA5FFC9EBC11F09AF0472DC4F9AE02.roa (hash: pWB5XmkyQkIJX6VT83Icq4ouDP45IlQtI/F1JSbGUwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Dec 20 22:24:34 2025 GMT Not After : Dec 27 22:24:34 2025 GMT Subject: CN=69472223-43bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:26:14:72:61:44:2c:29:a7:65:ea:91:a2:50: 70:13:e7:c1:e7:2d:cd:ff:75:d7:de:fe:26:42:cb: 4d:37:8f:84:a2:b8:02:a7:cd:b5:69:f0:f5:68:58: 0a:6c:6c:9b:df:0d:05:8d:1e:1f:02:b8:a9:6a:29: 69:41:e4:7f:1d:5f:55:3d:9b:a1:d2:c6:b5:55:28: a7:60:9f:da:89:57:b8:be:0e:b5:f0:8f:aa:20:46: ff:70:4a:3f:90:60:e4:89:82:2f:4b:63:63:d1:1b: 8f:a2:ff:f0:99:52:41:5d:d3:ee:f4:d1:fd:c2:36: 06:3d:32:70:a1:5b:d4:aa:35:e9:5f:7f:2b:5d:b3: 67:9a:dd:a2:cb:74:49:2c:fe:1d:fc:07:24:59:19: 23:80:ef:52:a7:95:09:24:88:49:10:e4:7f:5b:f5: 57:35:26:f9:b6:7b:b9:e1:84:c7:3f:9b:0f:c3:8a: 20:a0:da:f5:5f:3c:a0:e2:e3:c8:67:86:b5:2e:b3: db:1f:65:1a:b9:d9:b4:6a:7a:ee:75:27:c4:f8:4f: 19:e1:dc:b6:01:c4:8c:6e:6c:92:49:f9:01:e7:65: 40:3c:20:07:dc:75:2b:b5:54:55:f4:8c:16:03:83: 5f:fd:63:41:4b:0b:1f:e5:b0:b9:35:d1:fe:6b:d8: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:57:32:25:C6:D5:B5:87:31:A5:5C:75:6A:73:0C:36:C2:78:9C X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:07:ab:fb:2b:07:1c:d3:72:fc:b8:55:34:88:f3:52:2d:a7: b7:d5:f9:b6:f0:8b:b8:40:d6:1f:74:77:ae:13:34:0c:e2:40: 41:8c:3d:2e:57:1d:93:6c:51:58:a0:a2:ac:dc:4e:ab:7a:29: 32:03:c6:6e:bb:98:e6:3a:ca:4c:e0:fd:de:1b:80:2d:53:ca: b6:e6:37:20:dc:ea:b0:be:7b:75:fe:eb:b0:f0:d7:2c:78:16: 9c:9b:0a:5b:20:52:a3:9e:a7:32:2c:d7:e6:ff:e4:6a:68:82: ac:0e:39:e3:db:38:95:10:07:b1:eb:cc:22:4a:0c:58:1c:2b: 83:bb:7a:e0:6b:94:a6:e2:84:ba:cf:11:e9:ab:b0:37:b7:88: 68:4c:eb:88:25:d1:a3:80:18:72:8b:20:e4:89:3a:8b:72:1b: 64:a4:76:a5:8c:88:63:89:7a:b7:40:b4:c3:27:7c:06:c1:0f: a4:a9:0c:d8:df:05:dd:92:52:18:dd:93:94:91:f8:47:78:18: 5d:a3:1e:9d:d4:96:16:93:14:bc:3c:c3:8e:11:f3:87:94:b0: 8d:df:ec:42:c9:bb:e9:e0:da:00:be:ce:34:dc:92:f7:5e:5f: 6c:47:8a:62:df:b3:b2:3d:71:47:90:64:c8:ec:d5:4e:f0:a7: f5:d1:9e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUxMjIwMjIyNDM0WhcNMjUxMjI3MjIyNDM0WjAYMRYwFAYD VQQDDA02OTQ3MjIyMy00M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CYUcmFELCmnZeqRolBwE+fB5y3N/3XX3v4mQstNN4+EorgCp821afD1aFgK bGyb3w0FjR4fAripailpQeR/HV9VPZuh0sa1VSinYJ/aiVe4vg618I+qIEb/cEo/ kGDkiYIvS2Nj0RuPov/wmVJBXdPu9NH9wjYGPTJwoVvUqjXpX38rXbNnmt2iy3RJ LP4d/AckWRkjgO9Sp5UJJIhJEOR/W/VXNSb5tnu54YTHP5sPw4ogoNr1Xzyg4uPI Z4a1LrPbH2Uaudm0anrudSfE+E8Z4dy2AcSMbmySSfkB52VAPCAH3HUrtVRV9IwW A4Nf/WNBSwsf5bC5NdH+a9g7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1hVzIl xtW1hzGlXHVqcww2wnicMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuB6v7Kwcc03L8uFU0iPNSLae31fm28Iu4QNYfdHeuEzQM4kBBjD0u Vx2TbFFYoKKs3E6reikyA8Zuu5jmOspM4P3eG4AtU8q25jcg3Oqwvnt1/uuw8Ncs eBacmwpbIFKjnqcyLNfm/+RqaIKsDjnj2ziVEAex68wiSgxYHCuDu3rga5Sm4oS6 zxHpq7A3t4hoTOuIJdGjgBhyiyDkiTqLchtkpHaljIhjiXq3QLTDJ3wGwQ+kqQzY 3wXdklIY3ZOUkfhHeBhdox6d1JYWkxS8PMOOEfOHlLCN3+xCybvp4NoAvs403JL3 Xl9sR4pi37OyPXFHkGTI7NVO8Kf10Z4T -----END CERTIFICATE-----Generated at Sun Dec 21 16:15:34 2025 by rpki-client