This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json) Hash identifier: PpeHx0TXmygWBMurWlD3yIxE7rxRFPEDJeY69zfFPhg= Subject key identifier: B8:FB:EA:07:A2:0E:C0:98:00:69:CB:13:C9:2A:ED:33:DF:34:97:81 Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft Manifest number: 7A Signing time: Tue 23 Dec 2025 05:39:44 +0000 Manifest this update: Tue 23 Dec 2025 05:39:44 +0000 Manifest next update: Tue 30 Dec 2025 05:39:44 +0000 Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: eJsAUwgqzLM2HDsnQlpbsGoJH2NJTWrZsjKnKVfeO5M=) 2: F1940290212911F087425013C4F9AE02.roa (hash: MnHNxat0n45sPIepd+2k7Aeq3t/02+1KvIJP8MEpuv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Validity Not Before: Dec 23 05:39:44 2025 GMT Not After : Dec 30 05:39:44 2025 GMT Subject: CN=694a2b20-5d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:85:98:1a:df:52:81:2d:bf:aa:4f:bb:f8: a6:bf:9f:e3:64:f5:8a:a0:fd:57:36:f2:2e:4a:87: 4e:f6:0f:8e:6a:81:4a:6d:1e:df:40:08:2a:6a:68: 12:dd:f2:4c:86:39:5e:73:07:7b:d7:87:bd:95:9f: 0d:ff:f6:9a:02:7b:95:bb:eb:10:40:d1:6a:53:94: 81:fd:e4:73:c7:e8:f4:4c:48:a3:38:55:bb:c3:fc: 2f:2f:65:2d:2e:8d:23:cb:66:7a:9d:f6:85:79:a9: d3:11:b8:c3:67:5d:c2:93:25:ec:a4:b6:0a:ed:99: d1:bf:11:21:b4:e4:db:b3:2d:78:e2:84:3b:70:bb: d6:9b:9c:d1:18:20:35:22:74:5e:30:14:29:c3:47: 3d:63:e3:f7:2b:18:b3:5b:b6:9b:54:27:7c:b0:51: fd:e5:1f:31:12:5a:ae:b8:e8:5f:c4:b6:d0:79:52: fd:c8:15:aa:42:34:e8:b4:e5:61:30:07:0a:54:4f: 65:c2:d1:3d:b0:f6:eb:38:72:7f:fb:b4:9b:2e:14: 78:c5:cb:78:37:22:c0:2c:67:0e:af:8a:43:39:95: 83:27:da:01:f2:8a:cb:95:7e:11:cf:56:d3:b2:3d: 44:da:c3:1a:a3:c9:60:fb:b7:91:55:43:12:12:9b: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FB:EA:07:A2:0E:C0:98:00:69:CB:13:C9:2A:ED:33:DF:34:97:81 X509v3 Authority Key Identifier: keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7f:82:0a:81:f5:da:29:7e:a7:70:48:f3:57:5f:42:fb:3a: a0:9d:9e:8d:8f:55:2b:ed:77:70:56:7e:ce:48:b8:0d:06:ff: d9:98:67:dc:17:df:78:2f:8c:30:6f:72:dc:57:25:be:3e:6a: ca:d6:b5:83:b1:9d:e5:e8:5c:b5:8f:e8:3b:88:1e:ba:21:88: e2:e8:f0:f9:e1:26:47:25:02:a1:2c:27:22:be:71:2f:39:55: b1:b4:b7:4c:1e:e0:47:29:a6:24:6d:bc:68:a6:3d:8a:74:c4: a5:1a:3f:f3:94:36:9e:a8:4a:72:9f:ba:0e:09:49:36:32:10: ca:65:bf:b0:fe:1d:06:35:f6:b1:94:b4:a6:50:02:5a:f2:8a: 03:61:b2:c8:72:15:51:04:a2:bb:b5:db:64:38:c1:64:c6:ab: da:64:cb:13:88:48:50:40:41:02:19:c8:84:e6:61:85:45:4d: 6d:b3:a4:d6:42:53:7c:d6:ab:1d:62:a6:72:72:65:91:79:0f: 73:08:7e:1a:a9:9c:13:72:d2:dc:5d:c1:8e:c4:fb:08:1b:f5: e4:08:5e:ea:32:27:d1:a9:5e:d6:9a:87:49:aa:eb:54:30:a9: 3f:e3:aa:d8:89:51:45:ad:c3:52:c7:02:f4:8b:c0:26:ab:66: 35:a4:0c:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUEwNTExMC8GA1UEBRMoREYxODczMTFGQTA5Qzc3OUI4QjE1RDk0N0E0NkQ0RjRF RENDNTA1MzAeFw0yNTEyMjMwNTM5NDRaFw0yNTEyMzAwNTM5NDRaMBgxFjAUBgNV BAMMDTY5NGEyYjIwLTVkNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpV4WYGt9SgS2/qk+7+Ka/n+Nk9Yqg/Vc28i5Kh072D45qgUptHt9ACCpqaBLd 8kyGOV5zB3vXh72Vnw3/9poCe5W76xBA0WpTlIH95HPH6PRMSKM4VbvD/C8vZS0u jSPLZnqd9oV5qdMRuMNnXcKTJeyktgrtmdG/ESG05NuzLXjihDtwu9abnNEYIDUi dF4wFCnDRz1j4/crGLNbtptUJ3ywUf3lHzESWq646F/EttB5Uv3IFapCNOi05WEw BwpUT2XC0T2w9us4cn/7tJsuFHjFy3g3IsAsZw6vikM5lYMn2gHyisuVfhHPVtOy PUTawxqjyWD7t5FVQxISm+lfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuPvqB6IO wJgAacsTySrtM980l4EwHwYDVR0jBBgwFoAU3xhzEfoJx3m4sV2UekbU9O3MUFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQTA1LzREQzFEOTI2MjEy OTExRjBBNjZBNDk3MkM0RjlBRTAyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3hoekVmb0p4M200c1YyVWVrYlU5TzNNVUZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB QTA1LzREQzFEOTI2MjEyOTExRjBBNjZBNDk3MkM0RjlBRTAyLzN4aHpFZm9KeDNt NHNWMlVla2JVOU8zTVVGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABV/ggqB9dopfqdwSPNXX0L7OqCdno2PVSvtd3BWfs5IuA0G/9mYZ9wX 33gvjDBvctxXJb4+asrWtYOxneXoXLWP6DuIHrohiOLo8PnhJkclAqEsJyK+cS85 VbG0t0we4EcppiRtvGimPYp0xKUaP/OUNp6oSnKfug4JSTYyEMplv7D+HQY19rGU tKZQAlryigNhsshyFVEEoru122Q4wWTGq9pkyxOISFBAQQIZyITmYYVFTW2zpNZC U3zWqx1ipnJyZZF5D3MIfhqpnBNy0txdwY7E+wgb9eQIXuoyJ9GpXtaah0mq61Qw qT/jqtiJUUWtw1LHAvSLwCarZjWkDNw= -----END CERTIFICATE-----Generated at Wed Dec 24 12:28:48 2025 by rpki-client