This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: /+PVbzl6nyVA+y4rlxZrEfl3dLvd663BJZq18H4B/UM= Subject key identifier: 68:B2:94:EB:40:41:47:2D:C8:14:ED:84:BC:A9:4D:6D:47:00:79:DD Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 09AC Signing time: Mon 22 Dec 2025 19:23:57 +0000 Manifest this update: Mon 22 Dec 2025 19:23:57 +0000 Manifest next update: Mon 29 Dec 2025 19:23:57 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: 1+4oGQBR3bMa9nR/hDvJW2LbZ2sl4Ggs1OjRABr4myg=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Dec 22 19:23:57 2025 GMT Not After : Dec 29 19:23:57 2025 GMT Subject: CN=69499acd-a261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:81:37:6b:53:7d:82:83:83:8b:ac:6e:9d: 37:5f:66:ef:64:e3:77:ff:b8:54:0f:a8:b5:1e:82: 4c:89:1e:49:c0:4f:5a:94:c1:e7:1a:8b:db:50:5d: 7d:af:c5:81:cf:a5:b9:50:40:83:4b:b3:5d:e3:ec: 37:18:0d:69:4a:38:cb:94:09:1c:c0:4e:f8:8a:d0: b9:07:ab:ee:38:66:34:0b:74:fb:db:cc:1e:71:43: 75:f7:5d:18:8e:11:c4:81:b1:79:7f:97:7e:3f:c2: 80:2e:5d:bb:07:c4:0e:70:63:79:93:ee:66:60:fb: 8a:bf:00:fd:5c:7e:34:81:19:d6:c5:c3:64:43:09: ff:2d:9d:39:51:b3:72:4f:6c:a8:26:10:ec:cf:99: 02:26:e6:4a:23:b8:fb:1d:e5:5e:09:8a:39:1c:bd: 05:2b:3a:ac:12:6b:98:a4:fd:01:2a:ea:5f:21:e2: c3:7d:3c:7f:39:e9:d3:ab:64:ae:a9:97:6f:c5:bb: ce:9b:00:50:2c:71:2a:f5:fb:51:4d:fa:1a:f2:14: 9e:49:8d:b5:0d:a1:55:7e:58:1d:84:19:8a:b2:cc: 20:62:e6:50:fa:c4:15:1c:f0:de:81:c8:24:69:10: 08:43:a3:dc:02:b7:f8:82:97:19:64:2f:25:1c:94: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B2:94:EB:40:41:47:2D:C8:14:ED:84:BC:A9:4D:6D:47:00:79:DD X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1c:7e:6b:47:0b:4a:94:ed:aa:f2:27:7e:0f:80:88:a9:52: a3:a8:0f:71:ce:42:72:ef:a1:88:0f:9a:ad:d0:ef:bf:1e:52: d4:37:d0:da:78:25:22:66:73:f4:c3:92:6f:be:0e:84:be:d6: c5:0d:6c:c2:ac:82:38:55:bb:f1:ca:d0:db:2c:7f:2c:51:8f: b9:e0:5f:f7:da:8a:2b:5c:83:ab:4d:cb:91:c9:7a:3b:67:10: f3:1b:65:1a:5a:13:6f:a9:1d:0b:46:e6:3a:b3:77:93:ee:62: ec:77:de:6b:8a:0c:1f:d1:d6:7a:a2:9d:89:1e:2c:75:05:64: eb:48:b4:12:9a:40:a0:43:2e:d8:bb:c5:06:0d:ff:3e:b1:dc: b1:2f:96:65:7f:f5:5a:ad:3d:7f:69:d4:e4:97:2a:c1:be:ea: 5a:75:32:9f:27:92:01:ad:b2:19:3a:b7:1a:04:ff:b4:9c:12: 69:16:1f:24:e3:dd:a7:bf:c0:3c:55:3c:05:6f:82:24:4c:1f: fb:24:76:ec:1c:e9:d9:0a:94:ed:61:dd:84:6b:aa:64:e9:21: 71:ea:c2:b1:8b:59:de:61:ce:21:b5:b9:92:70:3c:05:d5:75: f9:27:86:94:bd:a5:5a:57:3f:62:d6:10:a3:d0:ca:b7:7a:66: ea:19:78:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjUxMjIyMTkyMzU3WhcNMjUxMjI5MTkyMzU3WjAYMRYwFAYD VQQDDA02OTQ5OWFjZC1hMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9WBN2tTfYKDg4usbp03X2bvZON3/7hUD6i1HoJMiR5JwE9alMHnGovbUF19 r8WBz6W5UECDS7Nd4+w3GA1pSjjLlAkcwE74itC5B6vuOGY0C3T728wecUN1910Y jhHEgbF5f5d+P8KALl27B8QOcGN5k+5mYPuKvwD9XH40gRnWxcNkQwn/LZ05UbNy T2yoJhDsz5kCJuZKI7j7HeVeCYo5HL0FKzqsEmuYpP0BKupfIeLDfTx/OenTq2Su qZdvxbvOmwBQLHEq9ftRTfoa8hSeSY21DaFVflgdhBmKsswgYuZQ+sQVHPDegcgk aRAIQ6PcArf4gpcZZC8lHJTckQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiylOtA QUctyBTthLypTW1HAHndMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMHH5rRwtKlO2q8id+D4CIqVKjqA9xzkJy76GID5qt0O+/HlLUN9Da eCUiZnP0w5Jvvg6EvtbFDWzCrII4VbvxytDbLH8sUY+54F/32oorXIOrTcuRyXo7 ZxDzG2UaWhNvqR0LRuY6s3eT7mLsd95rigwf0dZ6op2JHix1BWTrSLQSmkCgQy7Y u8UGDf8+sdyxL5Zlf/VarT1/adTklyrBvupadTKfJ5IBrbIZOrcaBP+0nBJpFh8k 492nv8A8VTwFb4IkTB/7JHbsHOnZCpTtYd2Ea6pk6SFx6sKxi1neYc4htbmScDwF 1XX5J4aUvaVaVz9i1hCj0Mq3embqGXit -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:54 2025 by rpki-client