This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: lkNt/OfLDRLoyZ2lrdH0mn2cX4KC1A0R4PhWkOMbM8c= Subject key identifier: A0:48:E4:74:10:34:7C:17:9B:4C:CD:24:CF:4E:2B:BF:E7:58:D4:91 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0250 Signing time: Tue 23 Dec 2025 00:45:21 +0000 Manifest this update: Tue 23 Dec 2025 00:45:21 +0000 Manifest next update: Tue 30 Dec 2025 00:45:21 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: 80FopqcMEqGJUQFa67H3nZriY/uTEJHQuH2D8F0h/2A=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Dec 23 00:45:21 2025 GMT Not After : Dec 30 00:45:21 2025 GMT Subject: CN=6949e621-1f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:56:0f:e4:ba:28:bc:61:25:95:20:f5:32: e6:16:d4:7c:6a:dc:8b:7c:6f:8b:e6:0d:ca:d5:22: f6:d3:9c:e7:fc:fa:c5:f9:85:68:d8:7e:8f:96:be: 63:9b:dd:82:75:c6:b4:4f:4a:79:39:5e:45:d7:d0: 73:4d:29:31:31:4d:2d:1f:9c:20:20:ba:db:d4:7f: e9:43:40:9e:55:3a:63:aa:5d:9a:94:09:70:4d:db: 69:4b:fe:7f:65:1c:25:02:64:11:98:f2:53:0f:94: 46:a3:98:ab:78:5a:99:30:79:f8:28:0c:51:e4:fc: b9:31:bf:02:d2:93:20:5e:19:15:02:30:af:cb:5e: 6e:dd:e6:4e:48:ae:f8:6f:51:3d:f8:4d:fe:f2:32: de:92:be:ed:48:54:a2:95:c5:0d:a9:b5:14:7b:28: 13:24:f5:e8:73:d3:75:37:e5:ec:88:90:b0:28:ca: c9:b2:e6:c6:93:11:6b:10:45:7f:d7:d2:ac:4b:70: a4:51:54:66:06:ad:91:57:b8:01:cf:cb:94:98:24: 76:f3:3d:d7:b5:0d:66:6b:bc:ba:58:9c:0b:bc:76: d4:d9:54:e6:8e:34:63:dc:e1:18:fb:af:67:e2:95: da:a4:3d:0d:76:ad:a0:84:b9:5c:9a:fd:d8:5d:7f: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:E4:74:10:34:7C:17:9B:4C:CD:24:CF:4E:2B:BF:E7:58:D4:91 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:9b:57:68:bd:59:a2:96:ff:03:4c:89:d8:0c:e5:82:42:b5: 68:ae:2a:3f:87:e7:df:7e:99:c3:f3:94:b3:6d:6f:bb:8e:0a: ae:3c:b6:6d:e3:c1:1f:db:70:cc:a6:ba:d1:99:95:20:b4:9e: bc:b5:7b:5c:d3:b1:23:af:84:47:9e:00:33:c8:95:d3:1a:4c: b7:af:a8:fa:d2:a5:7a:8a:c5:17:38:cc:07:25:32:0e:b3:21: d8:75:89:d5:cb:1e:ed:c6:d8:a8:42:7a:75:77:ba:c9:3c:c8: f1:e0:a7:f9:83:b8:20:69:ce:76:e6:f7:0a:da:69:d3:35:0a: ce:b4:78:47:0f:9e:64:f5:dc:e1:34:2c:04:48:a4:2c:79:26: d6:47:57:08:db:73:4b:cc:d8:ff:3d:a7:69:51:fe:37:f8:1d: 58:6a:bb:73:8d:b5:d7:07:81:de:86:40:b5:68:6e:47:4d:f7: 4d:7d:eb:5a:d4:4f:79:ae:70:31:62:26:33:a0:ff:9a:78:12: db:0f:19:9f:ac:e0:b7:f1:b0:09:e9:dc:8a:36:04:20:b1:04: c1:20:12:2c:71:18:95:6d:e7:f3:7e:2c:4a:c2:61:87:d3:8a: 27:e1:d4:03:8e:95:28:e4:7c:ab:c9:15:05:83:f9:ab:42:03: 7a:f0:e0:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMjIzMDA0NTIxWhcNMjUxMjMwMDA0NTIxWjAYMRYwFAYD VQQDDA02OTQ5ZTYyMS0xZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnolWD+S6KLxhJZUg9TLmFtR8atyLfG+L5g3K1SL205zn/PrF+YVo2H6Plr5j m92Cdca0T0p5OV5F19BzTSkxMU0tH5wgILrb1H/pQ0CeVTpjql2alAlwTdtpS/5/ ZRwlAmQRmPJTD5RGo5ireFqZMHn4KAxR5Py5Mb8C0pMgXhkVAjCvy15u3eZOSK74 b1E9+E3+8jLekr7tSFSilcUNqbUUeygTJPXoc9N1N+XsiJCwKMrJsubGkxFrEEV/ 19KsS3CkUVRmBq2RV7gBz8uUmCR28z3XtQ1ma7y6WJwLvHbU2VTmjjRj3OEY+69n 4pXapD0Ndq2ghLlcmv3YXX/uWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBI5HQQ NHwXm0zNJM9OK7/nWNSRMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCom1dovVmilv8DTInYDOWCQrVorio/h+fffpnD85SzbW+7jgquPLZt 48Ef23DMprrRmZUgtJ68tXtc07Ejr4RHngAzyJXTGky3r6j60qV6isUXOMwHJTIO syHYdYnVyx7txtioQnp1d7rJPMjx4Kf5g7ggac525vcK2mnTNQrOtHhHD55k9dzh NCwESKQseSbWR1cI23NLzNj/PadpUf43+B1YartzjbXXB4HehkC1aG5HTfdNfeta 1E95rnAxYiYzoP+aeBLbDxmfrOC38bAJ6dyKNgQgsQTBIBIscRiVbefzfixKwmGH 04on4dQDjpUo5HyryRUFg/mrQgN68OBT -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:19 2025 by rpki-client