This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: zB87o3SJk0FVpGtmUcmzJlzJ9mK16Y9sFyLxpmI5MII= Subject key identifier: 3E:00:1F:0A:DF:30:DF:B6:84:24:D2:DD:33:3F:AA:8D:ED:DB:6E:03 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 015A Signing time: Tue 23 Dec 2025 03:07:37 +0000 Manifest this update: Tue 23 Dec 2025 03:07:36 +0000 Manifest next update: Tue 30 Dec 2025 03:07:36 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: RxNrTUdr9NIlp6EVFtq0vCDOut55I4u6cKMIrmoiMZE=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Dec 23 03:07:36 2025 GMT Not After : Dec 30 03:07:36 2025 GMT Subject: CN=694a0779-502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:e1:fb:94:bf:75:99:02:43:b8:42:9a:f0: 6c:18:00:ee:1c:99:78:d2:5e:eb:d3:22:02:da:ac: 37:83:96:dd:01:3c:6c:c1:e8:2f:85:3c:dd:fc:93: f0:fd:4f:13:f0:db:35:71:23:a3:42:6a:38:33:d9: fc:19:45:4f:f2:4f:aa:26:6f:b0:ed:15:5c:da:0f: ac:54:ae:67:09:90:98:2e:d6:af:01:d2:d4:b3:58: 6e:95:40:4a:5c:2b:6a:2c:26:5f:1f:58:d6:f0:86: 72:b4:5e:3b:28:c2:30:60:b4:2a:cc:55:50:37:31: cb:80:e5:4d:20:d0:84:dd:28:5e:a5:6f:2f:1c:d1: f0:83:6a:1d:f4:1b:7c:24:47:74:bb:dc:b5:2b:a8: cb:88:a3:84:9e:ed:e0:ab:32:ea:1e:00:0e:79:3e: b2:cf:b8:66:2f:ca:22:74:ab:98:eb:6f:86:31:2e: 02:84:7a:ab:ed:02:42:b7:d1:a1:0b:13:39:fc:c9: 88:30:63:e9:1b:c3:84:0c:98:01:f9:e5:0e:01:52: 01:a2:ed:b5:ee:82:05:13:7d:8c:11:be:f4:99:05: b1:b7:40:7c:d0:c8:81:07:ff:7b:20:e6:32:91:0d: fa:e2:00:89:b0:59:1c:0e:6f:49:f6:e1:6d:3b:1a: 9d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:00:1F:0A:DF:30:DF:B6:84:24:D2:DD:33:3F:AA:8D:ED:DB:6E:03 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b5:bf:06:56:b5:fc:1c:0f:fe:d2:00:51:f8:02:38:51:be: 9c:30:f0:d7:8b:0c:ad:d6:69:78:81:21:5f:75:af:54:76:9a: 21:45:ba:62:f0:e1:af:6d:a5:45:c9:3f:39:78:f6:5f:7a:31: da:bd:1c:4f:a2:ae:83:21:f7:3c:b4:ea:38:45:8f:9e:50:b9: 3d:8d:6c:39:0b:9f:6a:73:ba:27:e7:84:3f:1a:80:cf:ef:7a: 04:fc:03:bd:d0:58:3a:f0:23:4d:23:0b:ab:09:ac:dc:22:cf: c5:8c:41:10:86:89:13:7a:34:f0:a6:2b:c9:af:b0:e1:25:14: bc:2a:36:84:9c:0d:62:9d:f6:b4:5e:f8:6b:1e:4b:4d:b7:c5: 89:b4:ea:f9:c4:cb:13:b0:81:c6:99:d1:eb:86:b8:6b:11:eb: 79:77:97:c5:90:e7:b2:55:41:1c:2f:3f:5d:1d:0c:01:83:57: ab:19:20:48:53:2c:3e:b0:cf:86:00:9a:c6:3d:41:a8:07:22: ad:00:93:7c:ac:54:da:78:e6:13:45:d6:3e:a6:93:f1:da:c3: 18:22:72:0d:8b:8f:e2:33:0b:34:d0:73:6d:2e:37:c1:cb:3c: 6e:29:8e:c6:da:a1:c6:b2:7a:e4:e3:87:93:16:69:fe:42:f2: eb:da:9c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUxMjIzMDMwNzM2WhcNMjUxMjMwMDMwNzM2WjAYMRYwFAYD VQQDDA02OTRhMDc3OS01MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwznh+5S/dZkCQ7hCmvBsGADuHJl40l7r0yIC2qw3g5bdATxswegvhTzd/JPw /U8T8Ns1cSOjQmo4M9n8GUVP8k+qJm+w7RVc2g+sVK5nCZCYLtavAdLUs1hulUBK XCtqLCZfH1jW8IZytF47KMIwYLQqzFVQNzHLgOVNINCE3ShepW8vHNHwg2od9Bt8 JEd0u9y1K6jLiKOEnu3gqzLqHgAOeT6yz7hmL8oidKuY62+GMS4ChHqr7QJCt9Gh CxM5/MmIMGPpG8OEDJgB+eUOAVIBou217oIFE32MEb70mQWxt0B80MiBB/97IOYy kQ364gCJsFkcDm9J9uFtOxqdEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4AHwrf MN+2hCTS3TM/qo3t224DMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6tb8GVrX8HA/+0gBR+AI4Ub6cMPDXiwyt1ml4gSFfda9UdpohRbpi 8OGvbaVFyT85ePZfejHavRxPoq6DIfc8tOo4RY+eULk9jWw5C59qc7on54Q/GoDP 73oE/AO90Fg68CNNIwurCazcIs/FjEEQhokTejTwpivJr7DhJRS8KjaEnA1infa0 XvhrHktNt8WJtOr5xMsTsIHGmdHrhrhrEet5d5fFkOeyVUEcLz9dHQwBg1erGSBI Uyw+sM+GAJrGPUGoByKtAJN8rFTaeOYTRdY+ppPx2sMYInINi4/iMws00HNtLjfB yzxuKY7G2qHGsnrk44eTFmn+QvLr2pwW -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:54 2025 by rpki-client