This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: CQfEsXdrL98u1IuxTvUIO56IUpsas+cz+heuWH339FQ= Subject key identifier: 60:E4:74:CB:56:84:CB:A8:DC:88:91:9B:73:43:8B:9B:62:6B:4C:A6 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: BE Signing time: Tue 23 Dec 2025 05:04:51 +0000 Manifest this update: Tue 23 Dec 2025 05:04:50 +0000 Manifest next update: Tue 30 Dec 2025 05:04:50 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: qg5S8+EHooowdTnIesAUopmvMeD8yRzMANCt8gdhuUw=) 2: 5CEF82D2D33E11F0AD0B405AC4F9AE02.roa (hash: lpBz8HpFIqfsqCV19EQkmpFSbAEYeJCPchDGn0DYL7E=) 3: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: iwbEqaCxKmbwG8HWY/Xyjd6spo1BsNrw7Oh89SRylss=) 4: 5E2D7894562911F0A243A66DC4F9AE02.roa (hash: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Dec 23 05:04:50 2025 GMT Not After : Dec 30 05:04:50 2025 GMT Subject: CN=694a22f3-a903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:36:ac:e9:83:28:46:2f:2b:bf:0a:c5:b6: 95:79:e6:8e:f4:d8:99:11:1c:9d:c9:78:85:04:bb: 2a:04:f0:14:68:cd:69:dc:79:eb:38:30:c2:d8:ae: 5b:6c:c0:b1:b6:c9:7f:c0:58:8c:1a:1f:25:f7:83: c9:c4:09:b6:3d:66:ae:ab:e5:2b:b3:86:2c:d4:3f: 71:aa:a6:64:0f:cf:e9:a8:49:1a:e5:23:8c:6b:5e: 14:a9:31:9d:5d:d6:63:44:87:6a:97:9b:ec:a5:57: 86:5f:ff:22:bb:7c:c2:99:c5:3f:09:ad:c9:fa:74: 94:1a:99:86:40:c9:a0:35:e0:fc:ca:ce:64:b8:a9: 99:0c:d6:f1:a7:b5:77:bc:36:3f:0f:b1:58:55:35: 92:cc:94:8e:a2:42:30:42:15:46:0f:f5:0e:61:b8: 2c:7a:68:39:c2:ac:2a:2b:f4:d1:01:51:d3:98:3c: db:8b:d9:da:23:a7:b5:fd:c9:86:8b:78:a9:7f:f6: dc:8e:6d:3c:d7:0b:1f:00:3b:ab:d7:37:1b:c9:17: 6b:44:49:90:f4:28:0e:99:95:68:ac:75:61:e4:3b: f4:cd:ad:5b:65:7e:88:39:17:3e:70:ed:8b:f8:d7: 53:45:ca:7a:29:82:14:2c:d9:71:27:95:11:81:d3: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E4:74:CB:56:84:CB:A8:DC:88:91:9B:73:43:8B:9B:62:6B:4C:A6 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e1:9b:0f:ce:58:04:31:ad:f9:91:aa:85:05:e9:87:38:95: 2f:cb:ff:85:9a:cf:b8:7c:86:0e:66:a8:f8:7f:1b:ee:ad:d3: 87:b7:53:08:b2:86:f3:86:86:af:3d:49:dc:64:38:c2:47:9a: 31:8c:ce:b0:26:77:01:21:36:06:8c:d4:83:f6:3b:71:c2:d8: 52:f3:2f:8f:f4:f1:03:89:74:2a:56:af:3f:ee:ca:14:87:e1: 19:f1:f7:af:78:17:0f:d1:e7:ae:a1:ad:f3:14:47:74:a0:b4: 30:61:82:c4:cb:d8:96:58:ae:a9:95:89:95:f0:ee:d1:be:a2: 15:cf:70:dc:56:53:b1:63:bc:bc:f0:2f:c8:d7:ed:c7:70:71: 2c:23:92:86:b7:29:60:d8:d0:2d:91:e9:9f:a4:03:23:7b:4b: d9:6c:f7:de:e9:65:13:cb:f9:19:97:3f:14:fb:9b:66:a0:d6: 6b:82:ef:b2:5a:85:50:34:7d:ae:ca:ff:d7:72:dc:96:b1:8a: 73:87:87:bf:7e:bf:ee:b9:10:54:ef:11:d0:e3:80:37:94:85: 23:81:19:4f:5d:52:07:76:94:58:c3:a3:93:c2:8c:53:b4:27: b9:8e:f5:55:18:9e:b7:bd:db:77:67:c8:35:0c:46:e5:fa:ba: 66:15:85:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4 QTZFRENGQjkwHhcNMjUxMjIzMDUwNDUwWhcNMjUxMjMwMDUwNDUwWjAYMRYwFAYD VQQDDA02OTRhMjJmMy1hOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqA2rOmDKEYvK78KxbaVeeaO9NiZERydyXiFBLsqBPAUaM1p3HnrODDC2K5b bMCxtsl/wFiMGh8l94PJxAm2PWauq+Urs4Ys1D9xqqZkD8/pqEka5SOMa14UqTGd XdZjRIdql5vspVeGX/8iu3zCmcU/Ca3J+nSUGpmGQMmgNeD8ys5kuKmZDNbxp7V3 vDY/D7FYVTWSzJSOokIwQhVGD/UOYbgsemg5wqwqK/TRAVHTmDzbi9naI6e1/cmG i3ipf/bcjm081wsfADur1zcbyRdrREmQ9CgOmZVorHVh5Dv0za1bZX6IORc+cO2L +NdTRcp6KYIULNlxJ5URgdPBNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDkdMtW hMuo3IiRm3NDi5tia0ymMB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5 dXFKN18tUC1XbnVLYnR6N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq4ZsPzlgEMa35kaqFBemHOJUvy/+Fms+4fIYOZqj4fxvurdOHt1MI sobzhoavPUncZDjCR5oxjM6wJncBITYGjNSD9jtxwthS8y+P9PEDiXQqVq8/7soU h+EZ8feveBcP0eeuoa3zFEd0oLQwYYLEy9iWWK6plYmV8O7RvqIVz3DcVlOxY7y8 8C/I1+3HcHEsI5KGtylg2NAtkemfpAMje0vZbPfe6WUTy/kZlz8U+5tmoNZrgu+y WoVQNH2uyv/XctyWsYpzh4e/fr/uuRBU7xHQ44A3lIUjgRlPXVIHdpRYw6OTwoxT tCe5jvVVGJ63vdt3Z8g1DEbl+rpmFYX8 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:40 2025 by rpki-client