This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: li9/nP1A9Fmha7d1j/x1M24kmS+l3s+MiDVvU8Y7G2I= Subject key identifier: 7F:23:3B:43:81:0D:8D:AA:CF:B9:C3:05:1E:01:37:88:53:6E:29:FE Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 68 Signing time: Mon 15 Dec 2025 06:23:39 +0000 Manifest this update: Mon 15 Dec 2025 06:23:38 +0000 Manifest next update: Mon 22 Dec 2025 06:23:38 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: JNMxuErqLTmLxr0qmbax0vLdBZhqnBezZciebkAkvEc=) 2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=) 3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Dec 15 06:23:38 2025 GMT Not After : Dec 22 06:23:38 2025 GMT Subject: CN=693fa96a-16e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:64:ca:44:a9:84:4d:23:f2:99:dc:4e:94: 09:26:e8:f9:3f:ef:fe:d7:ea:46:a9:21:e8:94:1d: 70:cb:f6:8a:a9:f4:7f:8f:55:af:a3:50:3e:a1:45: 28:8f:d2:32:19:58:6d:b9:52:d4:2c:d2:6f:97:c9: b7:9b:95:22:7c:a6:74:86:3a:a3:f9:07:61:05:d0: a0:d7:68:01:9f:63:83:6d:0d:e9:19:8a:21:8f:89: 2f:51:ca:d0:39:b1:3b:10:0c:b6:99:b0:e9:9c:09: c7:60:7c:a1:06:30:a0:cf:09:e7:a0:07:62:5c:47: d8:df:dd:41:52:33:c6:04:98:35:11:c7:a6:f9:52: 65:fc:85:09:12:63:7a:a2:9c:aa:8f:c5:38:f0:d4: 0f:ab:49:ff:6d:79:ea:0a:f3:bc:81:6b:ff:2c:be: 8f:ff:11:71:a2:dc:46:a8:ee:ea:c1:83:28:4e:46: cf:e6:36:ff:9e:10:38:b3:17:69:86:e5:a1:2d:de: 0f:20:9c:78:1c:57:f5:91:6a:17:f9:59:76:33:72: 7c:54:7a:12:8f:fa:54:a5:38:65:da:32:2e:2a:5c: 7d:c8:05:68:c3:2d:6c:d1:19:b6:30:cf:08:b3:0f: a9:0b:8f:e4:57:c1:f4:7c:fe:6e:31:48:9e:16:e5: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:23:3B:43:81:0D:8D:AA:CF:B9:C3:05:1E:01:37:88:53:6E:29:FE X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cc:a6:45:b8:0d:6b:98:60:76:bd:9a:e7:c8:9e:91:2e:9d: 36:53:c1:eb:59:e4:00:d2:71:3e:8c:a0:0f:a6:6f:5e:97:12: 8c:63:4a:99:b6:75:12:bd:2d:99:98:41:53:7e:14:b8:ef:af: 4b:64:e8:2a:6a:33:68:4a:37:65:ab:48:8a:f7:f0:c7:8c:68: d0:2a:92:84:f3:64:b5:8e:45:ce:eb:2d:62:7d:f8:47:58:c1: 12:38:ca:4c:c1:00:6a:f8:49:8e:b9:e1:4f:c8:dd:ae:8b:c9: a9:64:b0:51:98:f8:a8:fe:4c:f5:29:94:5d:21:86:b7:38:20: ac:06:4e:5a:98:25:fd:e4:9a:1f:71:01:cb:7c:4a:96:33:ae: 40:68:ae:15:32:e4:d9:1d:d3:aa:f7:3b:88:de:74:fb:f5:39: ce:47:e3:05:05:e1:b7:ef:36:36:f7:54:c3:54:0f:e8:d1:aa: 28:0e:54:7e:b1:de:c2:ad:23:df:c8:8e:5f:06:c3:f0:a0:a1: 83:83:cb:d4:65:a0:21:f4:c4:0a:10:27:b4:97:9f:9c:e2:95: df:52:40:06:40:11:24:da:8b:65:64:c4:a3:ed:b0:22:04:23: fa:79:fc:9a:93:19:33:53:d0:b2:8f:be:d8:55:c6:35:98:bc: 41:7f:aa:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNTEyMTUwNjIzMzhaFw0yNTEyMjIwNjIzMzhaMBgxFjAUBgNV BAMMDTY5M2ZhOTZhLTE2ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkiWTKRKmETSPymdxOlAkm6Pk/7/7X6kapIeiUHXDL9oqp9H+PVa+jUD6hRSiP 0jIZWG25UtQs0m+XybeblSJ8pnSGOqP5B2EF0KDXaAGfY4NtDekZiiGPiS9RytA5 sTsQDLaZsOmcCcdgfKEGMKDPCeegB2JcR9jf3UFSM8YEmDURx6b5UmX8hQkSY3qi nKqPxTjw1A+rSf9teeoK87yBa/8svo//EXGi3Eao7urBgyhORs/mNv+eEDizF2mG 5aEt3g8gnHgcV/WRahf5WXYzcnxUehKP+lSlOGXaMi4qXH3IBWjDLWzRGbYwzwiz D6kLj+RXwfR8/m4xSJ4W5T6nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfyM7Q4EN jarPucMFHgE3iFNuKf4wHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3MpkW4DWuYYHa9mufInpEunTZTwetZ5ADScT6MoA+mb16XEoxjSpm2 dRK9LZmYQVN+FLjvr0tk6CpqM2hKN2WrSIr38MeMaNAqkoTzZLWORc7rLWJ9+EdY wRI4ykzBAGr4SY654U/I3a6LyalksFGY+Kj+TPUplF0hhrc4IKwGTlqYJf3kmh9x Act8SpYzrkBorhUy5Nkd06r3O4jedPv1Oc5H4wUF4bfvNjb3VMNUD+jRqigOVH6x 3sKtI9/Ijl8Gw/CgoYODy9RloCH0xAoQJ7SXn5zild9SQAZAESTai2VkxKPtsCIE I/p5/JqTGTNT0LKPvthVxjWYvEF/qqI= -----END CERTIFICATE-----Generated at Wed Dec 17 00:06:10 2025 by rpki-client