This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: tPzHIkLlew6LYq14L016qj/KbjU05hRJ1vaGAtqcM5w= Subject key identifier: C3:C9:99:4A:4C:83:32:E4:3B:93:D5:4D:27:94:38:F9:9A:F9:0E:14 Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: F7 Signing time: Fri 19 Dec 2025 04:22:35 +0000 Manifest this update: Fri 19 Dec 2025 04:22:35 +0000 Manifest next update: Fri 26 Dec 2025 04:22:35 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: HwJ43gMmlwxzQblC8HpECIQwqjWfSkav74ncT/aLko8=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Dec 19 04:22:35 2025 GMT Not After : Dec 26 04:22:35 2025 GMT Subject: CN=6944d30b-9e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:d8:33:28:bb:d1:b7:91:e1:6e:fb:54:09: 1c:f1:88:d4:47:80:34:70:5d:90:68:7f:41:b3:f1: 93:c1:d0:85:0e:6d:97:9a:2a:6a:10:64:43:81:a7: 2c:b4:d3:92:62:59:0a:d9:f9:63:e5:96:36:12:b3: 66:58:7e:e1:3d:a7:5a:f4:c6:49:43:9c:02:61:1d: f8:78:8c:cc:05:1a:42:ba:57:c2:1a:ab:12:4e:d9: 32:4a:cf:f9:6c:46:fc:d4:92:3f:d7:15:ae:c8:8b: b4:d1:16:6e:0a:87:d9:38:15:9d:a1:56:e3:0b:f3: a3:df:14:e1:bd:6a:eb:d9:a4:b3:fa:63:77:3b:fd: e4:d3:a6:d9:14:12:7f:98:f3:5e:13:fc:9e:79:80: f5:c5:b9:ed:77:25:3f:c0:30:0d:c2:d0:13:cd:ba: 76:25:4e:16:42:dc:c3:c2:5e:71:66:68:1b:4f:d2: 70:5b:b3:47:4f:30:cb:7e:aa:04:cf:08:71:ab:98: 06:11:ba:d4:bc:92:fe:2c:73:60:cb:7a:0c:46:a1: 77:10:15:36:7b:dc:2c:82:6b:45:ca:55:14:1c:a9: 6a:c1:7a:c0:c3:4b:a7:5f:f4:70:0f:9a:e1:87:f7: b0:15:2d:b3:6d:51:9d:6d:98:58:6a:f6:ce:d6:ed: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:99:4A:4C:83:32:E4:3B:93:D5:4D:27:94:38:F9:9A:F9:0E:14 X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:60:4f:ef:05:20:0e:da:a6:b8:e2:7a:d9:b7:dc:7d:80:a1: 35:cc:d6:71:13:b0:6a:44:3d:68:27:f0:32:ff:61:24:ec:64: ff:b6:c4:c7:87:07:2b:2c:a5:7f:e3:ca:e7:ea:31:f4:10:c5: d0:2c:40:82:55:14:8d:fd:4a:bc:e4:ea:e7:7f:fd:87:a6:d0: 45:e5:f6:38:d4:46:cc:41:32:21:61:ef:a3:e9:33:7c:60:9d: c0:d1:c3:8c:a5:20:3c:42:c6:1d:85:a1:4c:7a:eb:35:67:0b: db:10:e1:f1:44:99:69:81:7f:88:d3:ef:82:33:3a:65:24:7e: f5:1a:10:57:b4:55:7f:a5:da:ae:a9:89:2e:4d:1c:d8:40:0d: d8:d5:98:5b:d1:31:6d:34:63:74:c4:45:a2:90:b7:01:23:8f: 02:10:dc:af:ad:35:8e:65:9b:74:f7:42:db:19:20:90:34:ec: 27:09:f3:35:93:e8:d8:24:73:cd:84:80:dd:ff:0d:d6:54:da: 96:d8:51:e6:02:10:f7:a1:91:33:d8:eb:a3:68:fe:de:ca:19: b8:a7:f6:38:c2:a0:34:18:68:3f:15:44:f7:16:6b:f6:15:33: 38:9f:52:d9:6b:4e:37:3d:0e:ed:87:fc:3c:b5:9b:f4:63:d8: 97:88:f6:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjUxMjE5MDQyMjM1WhcNMjUxMjI2MDQyMjM1WjAYMRYwFAYD VQQDDA02OTQ0ZDMwYi05ZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7TYMyi70beR4W77VAkc8YjUR4A0cF2QaH9Bs/GTwdCFDm2XmipqEGRDgacs tNOSYlkK2flj5ZY2ErNmWH7hPada9MZJQ5wCYR34eIzMBRpCulfCGqsSTtkySs/5 bEb81JI/1xWuyIu00RZuCofZOBWdoVbjC/Oj3xThvWrr2aSz+mN3O/3k06bZFBJ/ mPNeE/yeeYD1xbntdyU/wDANwtATzbp2JU4WQtzDwl5xZmgbT9JwW7NHTzDLfqoE zwhxq5gGEbrUvJL+LHNgy3oMRqF3EBU2e9wsgmtFylUUHKlqwXrAw0unX/RwD5rh h/ewFS2zbVGdbZhYavbO1u03CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPJmUpM gzLkO5PVTSeUOPma+Q4UMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjYE/vBSAO2qa44nrZt9x9gKE1zNZxE7BqRD1oJ/Ay/2Ek7GT/tsTH hwcrLKV/48rn6jH0EMXQLECCVRSN/Uq85Ornf/2HptBF5fY41EbMQTIhYe+j6TN8 YJ3A0cOMpSA8QsYdhaFMeus1ZwvbEOHxRJlpgX+I0++CMzplJH71GhBXtFV/pdqu qYkuTRzYQA3Y1Zhb0TFtNGN0xEWikLcBI48CENyvrTWOZZt090LbGSCQNOwnCfM1 k+jYJHPNhIDd/w3WVNqW2FHmAhD3oZEz2OujaP7eyhm4p/Y4wqA0GGg/FUT3Fmv2 FTM4n1LZa043PQ7th/w8tZv0Y9iXiPYt -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:13 2025 by rpki-client