This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: 97aRLGaLHSxChb/FLMF/klRYOeaMTRPA/ukvUT3EIvY= Subject key identifier: E2:8A:6E:96:FB:63:1B:79:87:8B:27:27:1C:D4:AA:90:BE:36:28:BE Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 01C6 Signing time: Wed 17 Dec 2025 02:27:05 +0000 Manifest this update: Wed 17 Dec 2025 02:27:05 +0000 Manifest next update: Wed 24 Dec 2025 02:27:05 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: 92YXuUoEXthV1Pyobergw9j4w3YDybLkIAiAd0fiBpk=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 02:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Dec 17 02:27:05 2025 GMT Not After : Dec 24 02:27:05 2025 GMT Subject: CN=694214f9-85fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:3c:40:2b:e4:b0:47:4e:56:a1:e0:54:4c: 6c:dd:d1:54:20:52:07:fc:7c:4d:5d:47:51:00:cd: c3:4c:48:94:1e:6e:a0:02:08:94:55:40:8a:df:fc: 11:4e:2f:8c:29:59:cc:3c:50:5a:80:24:82:ec:a2: d2:2a:a3:47:62:42:dc:9e:d7:8e:70:ce:66:d4:9c: 60:92:4d:fd:c7:53:79:e5:a7:b4:38:3b:ae:69:80: c8:92:ec:3c:0a:b8:bd:82:cf:e8:91:fb:29:d1:a6: 67:36:72:a5:92:f9:47:0a:2f:5c:c9:ff:46:82:5f: 0f:33:e7:96:0e:3d:1f:d7:3d:4b:e9:ed:b8:45:05: 91:2c:d0:e5:cb:66:9e:92:10:dd:bf:71:7a:ba:6c: 6a:ee:a1:78:d2:69:df:58:67:c9:2a:e4:fd:3a:1f: d9:7e:74:9e:ff:6b:9a:13:5c:ee:dc:b7:f6:16:55: 2b:20:90:f2:14:3b:eb:8c:70:a5:2d:ba:e7:c6:82: d3:04:2c:1e:2a:50:19:b9:da:d0:47:ab:c3:3c:d9: 9b:38:6c:af:16:59:f8:e1:2e:df:34:0d:62:3b:db: 92:6f:6d:d1:92:81:80:0e:fb:ae:53:5c:24:c6:46: 5a:a8:d4:4d:02:2e:c5:48:fe:9f:41:89:7d:d5:b5: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:6E:96:FB:63:1B:79:87:8B:27:27:1C:D4:AA:90:BE:36:28:BE X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e0:a8:11:9a:38:9f:0c:ee:91:ab:10:1f:80:c9:76:95:9e: 9a:5e:e6:b8:8b:84:8a:43:2b:10:19:ed:49:5f:a4:14:98:49: 6c:a6:fd:85:ba:84:8f:91:51:8b:5a:b6:99:4a:43:c7:86:84: 93:c2:20:63:ae:3a:c8:8d:04:4b:d9:00:e1:a6:e3:34:31:75: c1:80:57:bd:35:8d:a1:27:82:2d:63:4d:57:f8:6a:c7:f3:e5: dd:e6:04:6e:93:06:3e:bc:81:66:ff:06:c9:1a:5e:cd:f9:76: 36:14:ad:5a:e8:47:65:19:3d:fe:65:04:70:5a:c8:1a:58:54: 89:29:bd:b2:f2:12:58:3b:c9:51:bc:15:92:ca:0d:8d:6b:b3: 54:6f:a2:17:fe:00:05:36:1a:6e:82:7b:75:b6:05:5d:a3:17: d1:7a:d6:be:13:f6:91:5d:9f:79:c0:d9:c0:11:91:9d:c9:b0: 66:3d:8b:79:ce:b2:66:c8:71:29:ff:60:59:89:0f:53:8f:71: 42:e9:3f:08:ff:08:07:54:1a:b3:da:87:df:5a:dd:70:c3:88: 0a:89:24:12:0d:db:38:1f:2a:0d:ef:3b:0e:42:b0:3e:a9:e9: 80:0c:61:71:7a:54:99:6d:e8:ff:68:33:80:18:48:30:af:7d: 06:90:82:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUxMjE3MDIyNzA1WhcNMjUxMjI0MDIyNzA1WjAYMRYwFAYD VQQDDA02OTQyMTRmOS04NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxA8QCvksEdOVqHgVExs3dFUIFIH/HxNXUdRAM3DTEiUHm6gAgiUVUCK3/wR Ti+MKVnMPFBagCSC7KLSKqNHYkLcnteOcM5m1Jxgkk39x1N55ae0ODuuaYDIkuw8 Cri9gs/okfsp0aZnNnKlkvlHCi9cyf9Ggl8PM+eWDj0f1z1L6e24RQWRLNDly2ae khDdv3F6umxq7qF40mnfWGfJKuT9Oh/ZfnSe/2uaE1zu3Lf2FlUrIJDyFDvrjHCl LbrnxoLTBCweKlAZudrQR6vDPNmbOGyvFln44S7fNA1iO9uSb23RkoGADvuuU1wk xkZaqNRNAi7FSP6fQYl91bVjDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKKbpb7 Yxt5h4snJxzUqpC+Nii+MB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB64KgRmjifDO6RqxAfgMl2lZ6aXua4i4SKQysQGe1JX6QUmElspv2F uoSPkVGLWraZSkPHhoSTwiBjrjrIjQRL2QDhpuM0MXXBgFe9NY2hJ4ItY01X+GrH 8+Xd5gRukwY+vIFm/wbJGl7N+XY2FK1a6EdlGT3+ZQRwWsgaWFSJKb2y8hJYO8lR vBWSyg2Na7NUb6IX/gAFNhpugnt1tgVdoxfReta+E/aRXZ95wNnAEZGdybBmPYt5 zrJmyHEp/2BZiQ9Tj3FC6T8I/wgHVBqz2offWt1ww4gKiSQSDds4HyoN7zsOQrA+ qemADGFxelSZbej/aDOAGEgwr30GkILr -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:26 2025 by rpki-client