This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json) Hash identifier: CmLgukx6obYR2r6a9xIRaLiCGptutY/ox9Ymb+l5z34= Subject key identifier: 02:FC:41:65:5A:B2:23:AC:4F:09:04:22:2C:98:0E:C2:32:59:20:27 Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft Manifest number: 23 Signing time: Tue 23 Dec 2025 06:35:39 +0000 Manifest this update: Tue 23 Dec 2025 06:35:39 +0000 Manifest next update: Tue 30 Dec 2025 06:35:39 +0000 Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: b+EEGuksVnY66FcZ0RHvdVlTNGvyx076do+dUKlvORA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E Validity Not Before: Dec 23 06:35:39 2025 GMT Not After : Dec 30 06:35:39 2025 GMT Subject: CN=694a383b-b001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:f6:1b:40:70:c4:ea:14:4f:66:d4:35:e2: 7c:24:d0:16:4b:3e:15:62:3a:1c:bd:47:77:ae:52: f2:c6:35:62:24:ad:2b:92:38:d9:e8:f2:18:ff:63: c1:74:6a:50:00:41:86:9b:06:5a:5f:1a:c5:08:e3: 95:a8:9d:4c:b4:4e:20:a9:af:00:ad:f1:68:42:31: 73:a5:d3:ae:9a:bb:40:da:d7:ce:2f:32:8a:49:11: 99:ab:d7:d2:bc:6f:fc:8f:33:34:ea:45:fe:d5:f9: db:ed:69:ce:b2:2b:6c:9e:b9:67:47:66:ed:56:0a: e2:43:f6:48:7f:68:b7:af:46:fe:42:19:2e:9e:5a: df:ad:f6:8b:42:9b:2b:64:4d:d6:e4:39:68:cf:ac: d7:9f:90:d9:79:56:8b:33:ab:2f:37:8e:a2:9f:32: be:e5:0a:61:cf:75:89:0b:0a:97:a5:35:14:ee:56: 68:53:1e:96:7e:0e:03:07:0c:13:5d:fc:9a:61:37: df:6c:3f:1d:a1:a2:ee:8e:29:b8:e9:54:d5:fc:5d: 09:20:0c:7c:95:b9:c5:92:02:21:af:ed:11:55:da: 99:26:ac:1f:0c:02:17:57:c3:4b:88:0f:66:9c:ac: ae:b9:38:03:7c:7b:dc:57:ed:2d:91:26:a6:70:e4: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:41:65:5A:B2:23:AC:4F:09:04:22:2C:98:0E:C2:32:59:20:27 X509v3 Authority Key Identifier: keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:24:6c:51:0e:95:a3:5b:44:66:d0:b5:f8:c2:1c:a4:bc:17: c3:da:96:e2:63:ef:b4:2c:a6:49:86:e5:97:e8:5b:07:d7:94: a0:fc:57:2d:13:96:ac:8b:35:d2:78:18:bd:cf:a6:d8:51:23: eb:b3:4b:81:5e:29:9c:e0:2d:9e:4b:29:00:dc:7b:45:9e:75: 5a:1b:88:fa:fb:66:07:34:d1:50:46:0f:58:df:c7:ba:a8:b4: bf:d7:5b:ad:2c:0d:b8:d6:08:59:12:dc:1d:20:3e:e3:93:58: fc:75:72:e3:df:ff:83:df:59:a1:a5:5f:b3:42:c6:ff:02:8e: b3:60:20:ad:dc:d4:f3:59:45:ed:cb:7f:b7:e4:3a:c3:a5:ab: ab:29:e7:1d:e1:98:10:04:c4:67:69:40:0a:7d:93:07:ff:81: 69:44:37:ef:16:bf:1d:f1:bf:a7:5c:0e:d4:9a:78:64:e2:fa: c0:5a:64:3c:fb:be:af:40:8c:f3:b3:9e:2b:36:04:60:ac:f5: 90:e1:1c:ce:14:44:22:36:2e:1e:34:24:df:2a:53:2a:a4:f2: 56:72:ab:f1:18:5f:1a:2a:79:ce:4e:4d:15:1c:eb:be:b1:1d: d1:ed:e6:51:04:b2:f1:77:7e:83:6e:50:e1:3f:eb:b3:49:6d: 9f:66:a0:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoREM5OTNGQUU4ODEwRTkzMTRGNUE3REYwOEQ2RjBDRDU3 RUE1OTE2RTAeFw0yNTEyMjMwNjM1MzlaFw0yNTEyMzAwNjM1MzlaMBgxFjAUBgNV BAMMDTY5NGEzODNiLWIwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQk/YbQHDE6hRPZtQ14nwk0BZLPhViOhy9R3euUvLGNWIkrSuSONno8hj/Y8F0 alAAQYabBlpfGsUI45WonUy0TiCprwCt8WhCMXOl066au0Da184vMopJEZmr19K8 b/yPMzTqRf7V+dvtac6yK2yeuWdHZu1WCuJD9kh/aLevRv5CGS6eWt+t9otCmytk TdbkOWjPrNefkNl5Voszqy83jqKfMr7lCmHPdYkLCpelNRTuVmhTHpZ+DgMHDBNd /JphN99sPx2hou6OKbjpVNX8XQkgDHyVucWSAiGv7RFV2pkmrB8MAhdXw0uID2ac rK65OAN8e9xX7S2RJqZw5M5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAvxBZVqy I6xPCQQiLJgOwjJZICcwHwYDVR0jBBgwFoAU3Jk/rogQ6TFPWn3wjW8M1X6lkW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzU0MUNDNkZBQjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyLzNKa19yb2dRNlRGUFduM3dqVzhNMVg2bGtX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0prX3JvZ1E2VEZQV24zd2pXOE0xWDZsa1c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzU0MUNDNkZBQjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyLzNKa19yb2dRNlRG UFduM3dqVzhNMVg2bGtXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANMkbFEOlaNbRGbQtfjCHKS8F8PaluJj77QspkmG5ZfoWwfXlKD8Vy0T lqyLNdJ4GL3PpthRI+uzS4FeKZzgLZ5LKQDce0WedVobiPr7Zgc00VBGD1jfx7qo tL/XW60sDbjWCFkS3B0gPuOTWPx1cuPf/4PfWaGlX7NCxv8CjrNgIK3c1PNZRe3L f7fkOsOlq6sp5x3hmBAExGdpQAp9kwf/gWlEN+8Wvx3xv6dcDtSaeGTi+sBaZDz7 vq9AjPOznis2BGCs9ZDhHM4URCI2Lh40JN8qUyqk8lZyq/EYXxoqec5OTRUc676x HdHt5lEEsvF3foNuUOE/67NJbZ9moOc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:15 2025 by rpki-client