This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: IDZao0J/gGPYPXwpc0LDfWyWekq0bTDaqNx13SGmSJE= Subject key identifier: 1E:64:0F:20:AF:A5:16:CF:00:1E:AC:3D:7F:45:25:46:A0:0D:E3:63 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D06 Signing time: Mon 22 Dec 2025 15:23:00 +0000 Manifest this update: Mon 22 Dec 2025 15:22:59 +0000 Manifest next update: Mon 29 Dec 2025 15:22:59 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: v3BXFOhbdYEdGXpblFaXkW973ebdrVrcdmYjETsXLTc=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: R9f6Z3Uevp4d36wvfS3ESJSWBBwm4wuAIByOXNTGRgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11548 (0x2d1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Dec 22 15:22:59 2025 GMT Not After : Dec 29 15:22:59 2025 GMT Subject: CN=69496254-1ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:86:e0:09:ab:6d:e9:9b:99:bc:40:63:7e: b1:66:86:1f:a5:2b:3e:af:48:80:24:76:79:f7:3f: e5:76:65:0f:64:5a:43:91:16:78:55:06:95:75:68: b1:e8:fb:c7:39:dd:a2:76:44:5a:dc:ab:66:db:62: 9e:66:29:ba:69:b7:73:e6:65:79:c9:ad:43:d6:16: 07:ad:69:9b:3b:da:f1:a7:67:f3:40:6a:dc:6b:10: bb:23:ab:e7:e3:68:43:eb:7f:04:c4:a7:75:59:29: dc:1f:0c:8c:02:57:bc:1c:9d:01:14:5d:93:fa:7e: 97:39:10:da:99:d3:c0:44:27:03:b8:fe:7f:55:b8: 7d:5b:71:d5:da:a4:65:c9:ba:c7:16:0b:f5:97:43: 98:78:11:77:f1:ad:00:19:b5:e7:41:55:20:c3:35: a5:3d:e1:f5:11:42:9d:d8:7c:64:6a:d5:38:c3:e2: 84:b5:6c:13:10:45:dd:24:99:35:4c:24:69:f4:b5: 85:92:e7:8f:5c:b0:47:40:e2:55:23:e5:1e:44:5d: 57:41:53:ba:59:25:0b:2b:3c:91:31:d8:ea:40:fe: 42:9c:a2:ed:e8:82:bf:57:5c:f8:f1:5c:c3:17:ee: cf:56:ee:71:95:f2:d2:08:f7:23:11:a0:8b:e9:d6: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:64:0F:20:AF:A5:16:CF:00:1E:AC:3D:7F:45:25:46:A0:0D:E3:63 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4c:90:6d:4d:94:63:14:95:01:24:b3:4b:1b:19:02:46:e9: c1:ae:3a:69:f7:17:1b:93:c3:d1:7d:9d:60:7e:67:d1:70:e3: 78:25:f9:da:60:9b:0c:66:13:7d:c1:da:31:57:b9:06:3c:b2: a8:13:49:2f:95:5b:ca:60:08:8f:b2:72:2c:80:e9:c3:d6:1e: 3a:6f:a9:69:3d:26:dd:6c:b0:92:1b:d1:6a:b7:7b:93:ff:83: 11:33:ce:a9:fc:da:3f:2c:0f:78:8e:9b:d3:18:8d:bd:e3:19: 26:86:45:03:7b:08:49:82:c2:74:70:25:8c:ce:dd:9d:09:32: e3:07:a6:ce:86:24:31:5c:a7:1a:ea:b3:d8:bb:75:b6:ea:41: 72:94:29:5e:44:a5:df:4b:67:8d:2e:db:85:5f:cf:d1:3d:6b: 63:69:24:99:60:85:65:9a:36:4b:91:f3:20:a3:ce:20:7e:02: ae:42:34:3f:e4:1d:e5:b6:f0:87:93:7e:81:73:98:df:54:41: 19:88:48:13:f6:56:3a:08:15:b2:5c:28:31:35:55:43:b4:19: 80:83:04:ed:31:42:98:94:d4:af:a3:a9:47:3e:6c:99:d1:a6: 3b:de:31:a0:6d:f4:eb:dc:e9:7b:9a:c0:e5:0b:45:d8:de:25: d1:75:c4:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUxMjIyMTUyMjU5WhcNMjUxMjI5MTUyMjU5WjAYMRYwFAYD VQQDDA02OTQ5NjI1NC0xZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEGG4AmrbembmbxAY36xZoYfpSs+r0iAJHZ59z/ldmUPZFpDkRZ4VQaVdWix 6PvHOd2idkRa3Ktm22KeZim6abdz5mV5ya1D1hYHrWmbO9rxp2fzQGrcaxC7I6vn 42hD638ExKd1WSncHwyMAle8HJ0BFF2T+n6XORDamdPARCcDuP5/Vbh9W3HV2qRl ybrHFgv1l0OYeBF38a0AGbXnQVUgwzWlPeH1EUKd2HxkatU4w+KEtWwTEEXdJJk1 TCRp9LWFkuePXLBHQOJVI+UeRF1XQVO6WSULKzyRMdjqQP5CnKLt6IK/V1z48VzD F+7PVu5xlfLSCPcjEaCL6dY7BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5kDyCv pRbPAB6sPX9FJUagDeNjMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtTJBtTZRjFJUBJLNLGxkCRunBrjpp9xcbk8PRfZ1gfmfRcON4Jfna YJsMZhN9wdoxV7kGPLKoE0kvlVvKYAiPsnIsgOnD1h46b6lpPSbdbLCSG9Fqt3uT /4MRM86p/No/LA94jpvTGI294xkmhkUDewhJgsJ0cCWMzt2dCTLjB6bOhiQxXKca 6rPYu3W26kFylCleRKXfS2eNLtuFX8/RPWtjaSSZYIVlmjZLkfMgo84gfgKuQjQ/ 5B3ltvCHk36Bc5jfVEEZiEgT9lY6CBWyXCgxNVVDtBmAgwTtMUKYlNSvo6lHPmyZ 0aY73jGgbfTr3Ol7msDlC0XY3iXRdcSz -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:13 2025 by rpki-client