This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: nY6uZj30yaFQIA2v6ZARVMN4abb+Niif3dViNWX2UYA= Subject key identifier: 91:C9:62:06:3B:85:B0:42:45:15:D6:13:B7:FD:51:20:0C:AF:5E:C9 Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 01D4 Signing time: Thu 25 Dec 2025 01:59:48 +0000 Manifest this update: Thu 25 Dec 2025 01:59:47 +0000 Manifest next update: Thu 01 Jan 2026 01:59:47 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: qktp+IDZkk7XZgl2KE+UcwsdeqU6CKj2QGi6Ptq9Piw=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: HYndX1hAZ5qMkJtz/BumiLhkqJaaPEm/ej37V7+JGfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: Dec 25 01:59:47 2025 GMT Not After : Jan 1 01:59:47 2026 GMT Subject: CN=694c9a94-c736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:4e:85:23:09:71:4f:11:46:9f:18:7e:9e: fb:8e:cb:d1:9f:f4:ab:38:b8:b7:40:dc:d5:4c:ef: 6f:4d:cb:34:09:14:7f:06:21:90:2f:a7:33:75:35: c1:e1:ca:35:a0:39:ae:d0:49:b6:a8:68:59:0c:9f: e6:fa:b1:70:91:e6:b6:bc:30:d9:a6:50:a3:8b:d8: 1a:64:8a:27:86:82:d6:fd:26:08:84:7e:d5:c4:ed: d6:f5:6d:fd:e3:1d:34:3d:b7:87:fc:aa:a7:59:26: ee:97:97:af:00:55:ef:9b:4d:ef:3e:3c:51:22:82: 76:98:94:5f:7c:45:6c:92:8d:37:5a:85:89:7c:39: 77:76:01:dc:a0:cf:0a:6b:00:68:d5:cc:ef:8c:7f: 85:68:ac:be:6d:20:0b:92:c7:9b:eb:b8:74:d9:ec: 8b:e7:c3:c0:39:5b:f0:dc:ef:92:05:92:0f:1a:42: 71:ce:4d:01:c0:ff:91:6d:5e:a7:75:bd:e7:7a:bf: 03:2a:40:22:7b:1f:a7:3a:9e:aa:4b:ba:26:97:55: 32:3e:54:3e:55:bd:7a:14:57:85:d5:65:1f:e2:37: c7:47:5d:23:57:65:7e:3b:c6:87:40:ff:87:05:ae: 13:6f:b2:3a:dc:ee:f1:69:83:d3:04:17:69:50:ef: 55:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C9:62:06:3B:85:B0:42:45:15:D6:13:B7:FD:51:20:0C:AF:5E:C9 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:6e:9c:82:85:0c:f6:2f:d0:af:19:df:c8:97:1a:93:96:8e: ed:71:97:13:bc:da:b0:77:33:95:4a:ec:c1:4d:24:83:1f:2c: f2:a8:0b:24:54:61:5b:4e:3d:3c:19:d5:3e:dc:b1:35:ec:4f: d5:c1:2d:aa:74:57:e7:93:14:d7:73:db:b5:6c:fb:39:fe:af: 6f:cc:45:ae:d3:18:b4:0a:b6:93:b2:98:bf:69:26:db:71:f0: 8b:2c:a7:d5:4f:0a:fa:ad:40:1b:bd:8f:32:7c:c8:9b:0c:62: c9:9d:a9:69:14:17:05:86:72:6d:b8:b7:74:10:b8:fc:4e:6a: 6b:59:76:0d:5e:59:f5:00:97:9c:69:d6:1a:d7:69:fb:04:d2: 98:b1:fc:a4:b4:d9:c0:a3:65:eb:e9:bf:74:1c:1f:ad:fe:2d: 6f:17:e8:0f:4e:34:b6:0b:fc:1d:ab:8a:86:22:a1:f9:f9:12: b7:24:fe:45:89:c8:84:cf:18:ee:56:f9:13:14:91:e7:2b:90: 7c:31:ce:26:62:66:e5:a6:8a:ac:2f:b8:37:4c:74:0a:71:2c: 90:da:eb:27:1c:aa:1d:2e:97:f7:ff:a2:cd:e9:a4:bf:4b:c7: 45:d2:f2:27:5a:d5:73:40:62:6a:4f:3c:0a:36:ed:07:b4:c4: 1f:ea:16:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUxMjI1MDE1OTQ3WhcNMjYwMTAxMDE1OTQ3WjAYMRYwFAYD VQQDDA02OTRjOWE5NC1jNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1xOhSMJcU8RRp8Yfp77jsvRn/SrOLi3QNzVTO9vTcs0CRR/BiGQL6czdTXB 4co1oDmu0Em2qGhZDJ/m+rFwkea2vDDZplCji9gaZIonhoLW/SYIhH7VxO3W9W39 4x00PbeH/KqnWSbul5evAFXvm03vPjxRIoJ2mJRffEVsko03WoWJfDl3dgHcoM8K awBo1czvjH+FaKy+bSALkseb67h02eyL58PAOVvw3O+SBZIPGkJxzk0BwP+RbV6n db3ner8DKkAiex+nOp6qS7oml1UyPlQ+Vb16FFeF1WUf4jfHR10jV2V+O8aHQP+H Ba4Tb7I63O7xaYPTBBdpUO9VAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHJYgY7 hbBCRRXWE7f9USAMr17JMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkbpyChQz2L9CvGd/IlxqTlo7tcZcTvNqwdzOVSuzBTSSDHyzyqAsk VGFbTj08GdU+3LE17E/VwS2qdFfnkxTXc9u1bPs5/q9vzEWu0xi0CraTspi/aSbb cfCLLKfVTwr6rUAbvY8yfMibDGLJnalpFBcFhnJtuLd0ELj8TmprWXYNXln1AJec adYa12n7BNKYsfyktNnAo2Xr6b90HB+t/i1vF+gPTjS2C/wdq4qGIqH5+RK3JP5F iciEzxjuVvkTFJHnK5B8Mc4mYmblpoqsL7g3THQKcSyQ2usnHKodLpf3/6LN6aS/ S8dF0vInWtVzQGJqTzwKNu0HtMQf6hYT -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:43 2025 by rpki-client