This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: dT8dMpvyZ9UQacrhHonysErSYVjq8tKcgHPy6epfnGw= Subject key identifier: 56:A2:94:EE:32:34:6A:09:16:EC:A7:CF:6D:FE:EC:15:81:AF:2B:8A Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 34EB Signing time: Mon 22 Dec 2025 15:04:17 +0000 Manifest this update: Mon 22 Dec 2025 15:04:17 +0000 Manifest next update: Mon 29 Dec 2025 15:04:17 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: jQE1dEfHGik4OzcQy27dPaKIPYDAWYMGrwUvh7GNPDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Dec 22 15:04:17 2025 GMT Not After : Dec 29 15:04:17 2025 GMT Subject: CN=69495df1-a1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:b3:40:c2:ac:91:48:8b:bf:b3:f4:42:7d: 4c:01:ff:85:cd:73:1a:cd:56:b4:f9:88:ae:e3:ba: 14:c5:d7:10:b8:5b:eb:a7:71:ec:2b:0c:f2:93:91: bb:4a:44:71:b1:6c:dc:f3:2e:85:a5:f0:2c:f5:bb: 13:fd:ba:22:41:03:4a:fd:e9:c0:91:59:4e:13:80: 9b:e5:17:f8:c6:bd:76:8d:aa:5c:96:95:99:eb:c6: 6a:32:fd:2c:0a:01:d8:38:ff:3f:7a:48:cb:21:48: f0:6d:fb:a9:72:c1:a9:de:6e:58:6a:32:02:62:0a: f8:75:20:96:d7:9b:88:cf:5b:b2:26:2b:21:d8:1b: 6c:b7:91:55:5a:2f:a2:4d:03:97:56:7c:7d:e1:cb: 66:99:7b:dc:de:ef:db:03:0c:e8:05:83:82:98:fe: 7b:78:18:4c:b2:57:db:52:4e:28:21:99:bd:1a:39: 8f:3e:89:26:6b:a7:2a:64:28:c6:6c:dd:83:c2:30: bb:92:8b:5c:20:b8:ba:a0:2b:45:eb:31:ae:fd:86: c5:59:b1:ef:c5:44:b2:ff:3d:42:e4:98:b3:55:6b: ee:d4:31:d5:0f:fd:a0:0d:35:a6:93:33:90:04:a0: 8e:29:d1:3e:8c:df:5e:f4:9c:50:7c:3a:b4:bb:43: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A2:94:EE:32:34:6A:09:16:EC:A7:CF:6D:FE:EC:15:81:AF:2B:8A X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:67:7a:f0:7b:89:b1:ee:fb:fc:45:aa:6c:42:d7:55:a6:2a: ab:ac:48:9f:66:1d:10:be:29:59:3f:6b:21:3d:38:ee:3b:c1: 97:f3:5e:ed:aa:3b:19:ca:f5:b0:cf:37:54:1e:03:89:f2:14: e0:e6:63:6a:a4:f2:5c:7c:00:50:87:e6:50:d8:02:2a:ac:2a: 5d:cf:e5:30:10:ca:52:26:54:3c:07:99:f3:7b:7b:e3:4f:2c: 98:73:3d:d5:60:56:7a:cc:e3:e3:96:1a:d3:48:3c:e3:19:07: 96:8f:d1:83:68:3b:97:79:b5:aa:91:d8:12:80:59:18:03:67: 0e:73:96:95:42:de:6e:11:fa:bc:fc:83:bc:16:e5:3c:a0:45: d4:91:4d:68:56:12:09:f5:f3:4a:c1:af:e2:04:3e:07:35:fa: 12:aa:f8:7a:de:60:46:90:99:e8:c8:ba:4b:f1:32:07:40:c5: 83:83:0a:f4:1e:02:2a:f2:be:31:11:cf:e5:28:8c:cf:1a:62: c6:5f:40:59:38:9f:4d:13:d1:ca:77:3c:16:23:bc:ec:e0:10: dd:e6:75:b8:b2:0b:b5:a4:8b:ab:64:0f:e3:cd:0d:c7:4e:7c: f7:97:20:27:38:d9:51:26:78:60:06:6a:e2:5e:ae:d6:c4:c8: 79:f6:2d:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUxMjIyMTUwNDE3WhcNMjUxMjI5MTUwNDE3WjAYMRYwFAYD VQQDDA02OTQ5NWRmMS1hMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldazQMKskUiLv7P0Qn1MAf+FzXMazVa0+Yiu47oUxdcQuFvrp3HsKwzyk5G7 SkRxsWzc8y6FpfAs9bsT/boiQQNK/enAkVlOE4Cb5Rf4xr12japclpWZ68ZqMv0s CgHYOP8/ekjLIUjwbfupcsGp3m5YajICYgr4dSCW15uIz1uyJish2Btst5FVWi+i TQOXVnx94ctmmXvc3u/bAwzoBYOCmP57eBhMslfbUk4oIZm9GjmPPokma6cqZCjG bN2DwjC7kotcILi6oCtF6zGu/YbFWbHvxUSy/z1C5JizVWvu1DHVD/2gDTWmkzOQ BKCOKdE+jN9e9JxQfDq0u0O7awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFailO4y NGoJFuynz23+7BWBryuKMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Z3rwe4mx7vv8RapsQtdVpiqrrEifZh0QvilZP2shPTjuO8GX817t qjsZyvWwzzdUHgOJ8hTg5mNqpPJcfABQh+ZQ2AIqrCpdz+UwEMpSJlQ8B5nze3vj TyyYcz3VYFZ6zOPjlhrTSDzjGQeWj9GDaDuXebWqkdgSgFkYA2cOc5aVQt5uEfq8 /IO8FuU8oEXUkU1oVhIJ9fNKwa/iBD4HNfoSqvh63mBGkJnoyLpL8TIHQMWDgwr0 HgIq8r4xEc/lKIzPGmLGX0BZOJ9NE9HKdzwWI7zs4BDd5nW4sgu1pIurZA/jzQ3H Tnz3lyAnONlRJnhgBmriXq7WxMh59i3k -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:48 2025 by rpki-client