This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json) Hash identifier: HYSAAvqSHoWSS6uLx11QzKjZIqFsuO1siGT86kOkeQI= Subject key identifier: 6E:CC:45:99:01:E5:15:D0:FA:AE:89:71:84:BE:BB:D3:AF:62:0C:E5 Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft Manifest number: 055C Signing time: Sat 20 Dec 2025 22:40:14 +0000 Manifest this update: Sat 20 Dec 2025 22:40:14 +0000 Manifest next update: Sat 27 Dec 2025 22:40:14 +0000 Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: ySZ7xKkXvYvfH5HipcOcQ8jh0QtrIy49L+liUL7YXdU=) 2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: Xe+ld1uOyTTINEu5qOXliS5+W9Wqwt4es/Y7VM8UtHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Validity Not Before: Dec 20 22:40:14 2025 GMT Not After : Dec 27 22:40:14 2025 GMT Subject: CN=694725ce-d736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:99:72:8f:82:49:72:34:b3:29:8f:15:e5: ed:b1:c6:b9:fa:93:4d:3c:e0:5a:fe:d9:03:fc:ac: 95:fc:6c:b9:56:69:95:5d:d8:df:9d:41:70:21:65: de:45:9c:10:ff:cc:04:e8:56:b3:d3:48:0f:d0:93: f7:54:f8:d8:b9:ab:3f:41:19:94:9e:54:9d:0f:d4: 21:40:a1:f4:a8:2a:99:15:57:f2:99:6e:c4:f3:e7: fa:00:0c:cb:e9:9a:2b:5b:a5:50:64:9e:0c:87:af: 87:60:78:a3:79:02:50:65:b2:3b:b8:f1:e0:22:50: a0:27:28:ef:02:92:3f:9e:0d:73:9b:1f:5d:10:02: 58:1a:70:ca:b8:af:fa:6c:84:3c:60:62:5f:79:f3: e3:ea:64:ae:49:0c:20:5d:a6:34:e0:33:71:74:f6: aa:71:9f:9d:ff:1a:46:cb:a8:54:1a:08:5f:39:7e: 95:eb:34:1e:93:99:89:54:92:e6:8d:68:b5:23:7f: 19:79:be:b9:be:c6:0e:8e:fd:3f:56:cb:90:8a:d6: 35:a0:98:1c:e6:74:05:24:ae:49:a2:31:ca:77:a8: 0d:c1:43:66:61:cc:96:58:74:08:15:55:80:21:9f: 43:ce:6f:9b:5f:bb:39:7c:ee:6d:75:68:5d:a9:c8: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CC:45:99:01:E5:15:D0:FA:AE:89:71:84:BE:BB:D3:AF:62:0C:E5 X509v3 Authority Key Identifier: keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6a:b1:9f:95:ba:3a:db:b5:4e:4c:b3:39:ed:ef:4f:40:5b: d0:15:9b:31:ba:da:d7:de:63:8d:dc:0b:28:1f:0e:b8:f0:c0: 8b:1c:94:d0:fd:8e:58:9f:36:7f:5f:54:7b:d5:4e:be:51:f6: 37:f3:52:53:b2:f8:1c:9f:ad:2c:53:1f:7d:9d:ac:be:60:c9: 78:51:b3:fe:c4:9d:77:37:f7:11:a4:68:67:ca:eb:17:a9:36: fe:a3:d0:46:54:96:ac:70:1e:2c:33:39:b8:6d:51:94:a4:08: 45:59:89:a3:1d:bf:d4:0e:ab:e9:d8:ba:f7:58:67:40:00:b4: 27:5a:df:8e:cd:ff:65:6a:73:4e:b5:15:43:b3:ed:c0:b2:bd: 6f:b1:58:2c:0f:0a:2f:9b:4e:32:24:e1:39:68:9a:fc:0a:82: 3a:f0:b9:89:a4:c1:99:8d:fc:19:7e:95:42:40:ed:23:f8:5c: aa:06:89:ac:96:15:54:f2:5e:26:5f:e2:bd:d5:74:9a:d8:37: 0d:d5:30:4e:84:9f:16:bf:e7:d7:99:1d:81:59:ef:8a:5f:1f: 48:f6:30:75:2c:3b:40:be:36:c3:2d:f6:87:73:2d:ba:39:df: cf:e2:65:55:a3:0f:1d:5e:c5:2d:ff:6f:7e:39:fc:42:e2:6a: 08:00:d6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2 M0QxNkVENUYwHhcNMjUxMjIwMjI0MDE0WhcNMjUxMjI3MjI0MDE0WjAYMRYwFAYD VQQDDA02OTQ3MjVjZS1kNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbyZco+CSXI0symPFeXtsca5+pNNPOBa/tkD/KyV/Gy5VmmVXdjfnUFwIWXe RZwQ/8wE6Faz00gP0JP3VPjYuas/QRmUnlSdD9QhQKH0qCqZFVfymW7E8+f6AAzL 6ZorW6VQZJ4Mh6+HYHijeQJQZbI7uPHgIlCgJyjvApI/ng1zmx9dEAJYGnDKuK/6 bIQ8YGJfefPj6mSuSQwgXaY04DNxdPaqcZ+d/xpGy6hUGghfOX6V6zQek5mJVJLm jWi1I38Zeb65vsYOjv0/VsuQitY1oJgc5nQFJK5JojHKd6gNwUNmYcyWWHQIFVWA IZ9Dzm+bX7s5fO5tdWhdqciE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7MRZkB 5RXQ+q6JcYS+u9OvYgzlMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM ZGpyVllaa3JBOUZqMFc3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAarGflbo627VOTLM57e9PQFvQFZsxutrX3mON3AsoHw648MCLHJTQ /Y5YnzZ/X1R71U6+UfY381JTsvgcn60sUx99nay+YMl4UbP+xJ13N/cRpGhnyusX qTb+o9BGVJascB4sMzm4bVGUpAhFWYmjHb/UDqvp2Lr3WGdAALQnWt+Ozf9lanNO tRVDs+3Asr1vsVgsDwovm04yJOE5aJr8CoI68LmJpMGZjfwZfpVCQO0j+FyqBoms lhVU8l4mX+K91XSa2DcN1TBOhJ8Wv+fXmR2BWe+KXx9I9jB1LDtAvjbDLfaHcy26 Od/P4mVVow8dXsUt/29+OfxC4moIANYa -----END CERTIFICATE-----Generated at Sun Dec 21 07:44:04 2025 by rpki-client