This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: IgIf9gCDfsmUyEzxyq/2iwj1uQLeijED3Y8LctZLs0k= Subject key identifier: 6D:B2:0E:64:93:A2:EF:0E:E4:C7:21:98:A5:A1:E8:16:BC:52:10:9E Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2699 Signing time: Mon 22 Dec 2025 16:05:16 +0000 Manifest this update: Mon 22 Dec 2025 16:05:16 +0000 Manifest next update: Mon 29 Dec 2025 16:05:16 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: um5wfIXjEgxrlHypnkSozoF/AC8Ab48rpjMor9J65Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Dec 22 16:05:16 2025 GMT Not After : Dec 29 16:05:16 2025 GMT Subject: CN=69496c3c-be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:24:cd:3c:01:a2:88:2e:cf:fa:48:6f:b5: dc:83:27:8a:70:2f:90:aa:37:6f:75:c0:eb:5e:12: 3c:cf:b8:7a:6f:b9:8e:22:25:47:1b:d7:bd:59:b9: 2d:24:7c:26:78:0c:09:4a:fa:95:da:5a:b7:7c:4f: a1:d0:53:e8:0f:19:b4:9e:44:ce:69:b3:7e:c8:0c: 25:5c:53:04:bf:95:8e:46:cf:5d:f8:c3:52:af:2a: a0:26:f9:2b:89:73:b2:4e:97:b9:fe:ef:7f:7f:26: 1f:df:98:19:43:77:8b:69:4b:1e:29:76:66:93:43: e5:f9:93:61:04:04:28:2f:5c:06:57:68:3c:e5:4e: ed:35:1a:61:80:5c:f0:0d:92:19:2b:26:71:66:09: a3:30:1e:50:f0:35:00:0b:5a:ae:3a:80:d8:2d:05: 6f:ca:36:ac:19:a2:38:6b:d9:c7:ae:cd:1a:d7:43: 00:85:83:1a:e8:ce:78:8d:bf:26:56:17:07:a6:fb: 26:b2:04:19:87:dd:6a:37:eb:45:21:0d:35:13:bd: d5:39:05:ff:88:5f:94:f9:9a:88:02:23:25:68:92: 2e:29:13:af:a5:88:84:30:21:98:53:b3:ce:39:10: d8:39:9b:ff:7e:d7:01:12:94:8c:ae:ac:f6:a8:43: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B2:0E:64:93:A2:EF:0E:E4:C7:21:98:A5:A1:E8:16:BC:52:10:9E X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:16:21:f5:87:51:86:15:ef:34:5d:a8:c7:73:4e:1e:2c:81: 8b:52:71:df:49:cc:b3:ca:16:98:cc:f8:21:c0:c0:a6:30:d9: 4c:17:10:08:42:95:4d:70:5e:70:0a:a0:86:40:a8:82:50:6a: a3:71:d6:7f:ff:3a:9b:e2:2c:ca:99:e4:34:90:5d:5c:f2:e0: fa:ad:c8:2f:78:84:d8:29:57:12:f2:c2:e3:94:73:0f:4e:81: 9e:6d:71:8b:14:e9:cc:20:21:f6:c1:6d:8c:12:f3:28:dd:e7: 51:aa:06:48:d1:46:f0:e0:d6:7a:2f:29:66:e9:b3:8d:9c:45: aa:c0:5e:30:a4:9f:ee:94:2b:17:38:21:b1:83:02:a9:2d:36: a5:4a:8a:d0:14:76:b0:c3:f1:0f:81:1e:63:fc:6a:6e:86:92: d4:e7:75:a2:01:21:88:2e:49:81:ee:5e:12:20:8f:6b:00:29: 2e:05:a4:09:52:f1:1b:82:f7:e9:a0:55:27:f1:ea:6d:d7:9d: 6d:91:cb:b6:17:d0:94:60:23:5d:86:7f:cb:f3:a2:16:41:a4: ab:df:a5:14:31:50:a1:4e:05:c3:3a:2d:7b:ec:c9:0b:94:39: d8:54:f8:0e:0d:ae:fd:d3:7a:d3:80:92:86:03:c5:16:d6:7b: 48:76:b7:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUxMjIyMTYwNTE2WhcNMjUxMjI5MTYwNTE2WjAYMRYwFAYD VQQDDA02OTQ5NmMzYy1iZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCIkzTwBooguz/pIb7XcgyeKcC+QqjdvdcDrXhI8z7h6b7mOIiVHG9e9Wbkt JHwmeAwJSvqV2lq3fE+h0FPoDxm0nkTOabN+yAwlXFMEv5WORs9d+MNSryqgJvkr iXOyTpe5/u9/fyYf35gZQ3eLaUseKXZmk0Pl+ZNhBAQoL1wGV2g85U7tNRphgFzw DZIZKyZxZgmjMB5Q8DUAC1quOoDYLQVvyjasGaI4a9nHrs0a10MAhYMa6M54jb8m VhcHpvsmsgQZh91qN+tFIQ01E73VOQX/iF+U+ZqIAiMlaJIuKROvpYiEMCGYU7PO ORDYOZv/ftcBEpSMrqz2qEN5rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2yDmST ou8O5MchmKWh6Ba8UhCeMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApFiH1h1GGFe80XajHc04eLIGLUnHfScyzyhaYzPghwMCmMNlMFxAI QpVNcF5wCqCGQKiCUGqjcdZ//zqb4izKmeQ0kF1c8uD6rcgveITYKVcS8sLjlHMP ToGebXGLFOnMICH2wW2MEvMo3edRqgZI0Ubw4NZ6Lylm6bONnEWqwF4wpJ/ulCsX OCGxgwKpLTalSorQFHaww/EPgR5j/GpuhpLU53WiASGILkmB7l4SII9rACkuBaQJ UvEbgvfpoFUn8ept151tkcu2F9CUYCNdhn/L86IWQaSr36UUMVChTgXDOi177MkL lDnYVPgODa7903rTgJKGA8UW1ntIdrf8 -----END CERTIFICATE-----Generated at Tue Dec 23 19:42:24 2025 by rpki-client