This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: OjziXOXUiOYX9cFAk3IzF2varcHz0PnRQSC8dzWSbVo= Subject key identifier: 31:3A:CA:1F:26:FA:FC:92:15:61:52:09:67:66:56:1F:E1:97:FC:38 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 0159 Signing time: Wed 03 Dec 2025 02:37:16 +0000 Manifest this update: Wed 03 Dec 2025 02:37:16 +0000 Manifest next update: Wed 10 Dec 2025 02:37:16 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: zVdcpcVNn6EdFVi0MIFk/l7iLdcm+WApmoBBZ6LzeAg=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Dec 3 02:37:16 2025 GMT Not After : Dec 10 02:37:16 2025 GMT Subject: CN=692fa25c-f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:40:48:96:13:20:7d:33:8c:8b:59:3b:f2: c1:54:dd:e9:6c:4d:7d:85:5c:68:62:ab:e3:19:d5: 75:87:3b:54:03:eb:2c:97:c4:fd:3d:5b:d7:cc:5a: 0b:76:b9:d7:e8:97:f4:4d:2e:e8:75:0e:0e:d5:63: 63:02:3f:13:b5:57:88:eb:45:4a:61:25:d6:db:ba: 19:28:97:ff:a4:d0:7c:54:30:2b:88:50:99:f4:b1: 37:7b:2b:30:1e:a2:d1:64:e4:27:1e:46:ad:4c:2b: 6f:c3:dc:e1:0d:62:23:50:61:f4:79:60:af:14:9e: d3:7b:8f:bf:fa:25:37:6a:be:2c:db:84:67:6c:5a: ab:bb:ff:3e:df:91:96:2f:98:8b:da:95:bb:e4:5e: f0:c5:b3:b8:4b:68:b2:1a:2d:eb:12:59:b4:de:50: e0:d9:37:0f:3c:ee:03:df:28:b1:b3:28:ff:9c:86: f5:ef:68:59:43:c7:80:1b:4f:8e:30:47:61:b8:47: 03:fb:01:eb:86:e7:40:94:6d:68:5d:41:48:24:5d: 40:19:40:e6:75:e3:57:c8:45:e6:74:b9:cf:ae:12: 04:cb:12:53:26:48:1d:06:3a:df:c3:e4:9e:ba:fe: 95:80:86:21:7f:b0:1a:22:b7:1d:66:a8:3e:09:3e: 8e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:CA:1F:26:FA:FC:92:15:61:52:09:67:66:56:1F:E1:97:FC:38 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6a:9e:44:7e:64:75:a8:02:7e:cd:66:88:f5:ef:03:35:91: c3:18:94:b3:9a:5b:2b:44:28:ac:88:7c:1d:d3:6a:30:83:d8: 70:d4:e3:15:65:fb:e3:af:77:4f:67:35:68:29:99:1e:05:23: 96:05:69:75:fa:5a:48:b1:0b:c3:b6:dd:aa:7e:ad:d3:c0:95: 37:dd:be:34:07:a8:36:c4:a7:f1:f9:16:d0:76:7c:63:b2:f0: f9:58:b3:0e:9a:5a:1a:bd:c6:3e:dd:96:6b:be:b1:31:86:9e: 99:d9:90:3a:f9:6d:b9:d1:90:d3:97:13:91:e3:02:d4:a7:33: aa:9b:84:6a:10:8f:7d:e2:a0:57:7f:5a:ee:25:14:6c:e1:c8: 74:28:04:50:68:25:5b:65:0b:62:bf:73:30:d4:9c:fc:6c:52: 66:9e:99:4c:a6:8d:55:33:06:46:37:74:9c:57:25:4d:84:1d: 97:3b:93:a1:5d:56:da:7b:db:9d:58:d3:77:80:45:02:e4:48: 2e:35:1a:af:31:eb:9d:26:15:35:44:aa:39:5b:c4:05:30:a2: ac:e8:db:dd:28:3c:25:62:d6:19:bc:7b:d2:51:80:6f:fb:c3: 92:fc:3e:9a:8a:cc:d6:76:21:e0:4a:53:ef:d3:f6:15:15:6b: 46:35:01:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUxMjAzMDIzNzE2WhcNMjUxMjEwMDIzNzE2WjAYMRYwFAYD VQQDEw02OTJmYTI1Yy1mMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUlASJYTIH0zjItZO/LBVN3pbE19hVxoYqvjGdV1hztUA+ssl8T9PVvXzFoL drnX6Jf0TS7odQ4O1WNjAj8TtVeI60VKYSXW27oZKJf/pNB8VDAriFCZ9LE3eysw HqLRZOQnHkatTCtvw9zhDWIjUGH0eWCvFJ7Te4+/+iU3ar4s24RnbFqru/8+35GW L5iL2pW75F7wxbO4S2iyGi3rElm03lDg2TcPPO4D3yixsyj/nIb172hZQ8eAG0+O MEdhuEcD+wHrhudAlG1oXUFIJF1AGUDmdeNXyEXmdLnPrhIEyxJTJkgdBjrfw+Se uv6VgIYhf7AaIrcdZqg+CT6OxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE6yh8m +vySFWFSCWdmVh/hl/w4MB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXap5EfmR1qAJ+zWaI9e8DNZHDGJSzmlsrRCisiHwd02owg9hw1OMV Zfvjr3dPZzVoKZkeBSOWBWl1+lpIsQvDtt2qfq3TwJU33b40B6g2xKfx+RbQdnxj svD5WLMOmloavcY+3ZZrvrExhp6Z2ZA6+W250ZDTlxOR4wLUpzOqm4RqEI994qBX f1ruJRRs4ch0KARQaCVbZQtiv3Mw1Jz8bFJmnplMpo1VMwZGN3ScVyVNhB2XO5Oh XVbae9udWNN3gEUC5EguNRqvMeudJhU1RKo5W8QFMKKs6NvdKDwlYtYZvHvSUYBv +8OS/D6aiszWdiHgSlPv0/YVFWtGNQGx -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:25 2025 by rpki-client