This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: TQC/ElP7ZXwV2G1EMfM/Bf9JDUM5Bm4C8SQUVFwHKVM= Subject key identifier: 03:2D:19:B0:9A:70:33:DC:53:09:D3:28:9C:E7:75:64:8D:7A:32:7D Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0E68 Signing time: Mon 22 Dec 2025 17:24:20 +0000 Manifest this update: Mon 22 Dec 2025 17:24:19 +0000 Manifest next update: Mon 29 Dec 2025 17:24:19 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: eyd6oU01g0rtbJqAqBWzKYZ24bOf4r4BdP0ksN1Wycw=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: IvtzH6gyubUymkg5oBnMrp7NOgM18ej68eMn0LMb6vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3699 (0xe73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Dec 22 17:24:19 2025 GMT Not After : Dec 29 17:24:19 2025 GMT Subject: CN=69497ec4-e627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:b1:34:d7:22:2a:7e:bf:a2:30:bd:e0:3e: 6b:b4:cb:3c:51:31:49:78:b3:38:0e:cd:5f:26:4d: 95:a9:fe:99:ca:56:7d:ce:21:e4:ad:c6:61:4d:ac: 77:30:45:c6:8a:4e:c5:18:5b:00:e1:77:98:26:a5: e2:7f:61:a5:72:73:50:cb:9e:e8:de:01:1e:c5:48: 92:0a:36:bb:52:e8:49:2a:f4:af:ae:5c:6a:06:9f: f1:97:5c:ed:3c:2e:69:2c:3a:07:0c:5a:b7:fe:60: b2:73:b5:2b:aa:48:5c:60:f8:5a:2e:05:28:a4:83: 52:bf:01:a8:54:b2:de:dc:77:1c:65:3e:05:d6:d1: b6:8c:ad:96:39:cc:3d:f9:69:07:df:09:ec:92:ca: e9:fa:60:76:f2:dc:13:97:c1:fd:58:8e:cd:b0:26: 20:17:59:63:d7:25:7d:0a:13:e1:93:94:b1:d0:6b: b6:f8:f9:42:4e:7b:35:54:08:5c:c6:5a:b8:1e:ed: 6c:a2:60:af:03:91:1d:56:58:98:e7:10:b2:1b:50: a3:85:93:70:ac:02:d3:88:8e:c0:16:a6:56:63:07: 8f:99:59:26:bf:54:5c:8f:55:b8:04:7b:56:63:37: c4:f6:ea:39:45:45:18:b7:ad:20:03:bf:22:45:a1: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:19:B0:9A:70:33:DC:53:09:D3:28:9C:E7:75:64:8D:7A:32:7D X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:4b:be:9c:68:6c:23:4c:01:08:05:e2:06:04:4c:93:9a:5f: 9a:02:91:fb:02:8a:1e:91:78:f8:d9:fa:de:fb:03:38:00:23: 58:40:fd:7d:2f:83:59:c6:70:26:07:99:99:d7:c4:bc:03:c5: fa:66:2f:94:f1:55:bb:82:15:d3:2c:3d:aa:a0:a3:6b:87:33: 66:3c:96:36:5e:c8:4d:f7:43:ff:b4:33:04:7a:5d:46:4f:77: 4b:59:fc:ab:b7:20:66:2a:d4:16:6e:ae:68:62:0f:72:68:d6: 0b:fd:77:cd:48:f2:1a:24:f0:11:a6:6f:6f:71:92:02:4f:89: 24:23:c9:38:ef:2a:d2:db:6d:59:e0:17:c5:ef:e3:b8:13:e7: aa:f8:d2:a5:70:52:72:58:2e:c0:cb:84:13:79:f7:c0:50:90: 75:bf:de:27:0e:91:61:0e:02:8e:a9:87:a4:fb:30:cd:f1:81: eb:92:06:20:9c:64:66:e6:db:f4:ab:77:a4:e5:c7:3b:b5:17: e8:01:a2:ea:ed:56:e9:f4:e4:3a:39:0b:2e:47:c5:97:62:84: 53:81:99:68:12:6c:48:6a:8a:1e:48:43:8c:05:e4:65:bb:b1: f6:7f:9c:84:a3:05:04:01:4d:db:de:21:f2:ee:64:a5:6c:40: 73:64:b5:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUxMjIyMTcyNDE5WhcNMjUxMjI5MTcyNDE5WjAYMRYwFAYD VQQDDA02OTQ5N2VjNC1lNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5mxNNciKn6/ojC94D5rtMs8UTFJeLM4Ds1fJk2Vqf6ZylZ9ziHkrcZhTax3 MEXGik7FGFsA4XeYJqXif2GlcnNQy57o3gEexUiSCja7UuhJKvSvrlxqBp/xl1zt PC5pLDoHDFq3/mCyc7UrqkhcYPhaLgUopINSvwGoVLLe3HccZT4F1tG2jK2WOcw9 +WkH3wnsksrp+mB28twTl8H9WI7NsCYgF1lj1yV9ChPhk5Sx0Gu2+PlCTns1VAhc xlq4Hu1somCvA5EdVliY5xCyG1CjhZNwrALTiI7AFqZWYwePmVkmv1Rcj1W4BHtW YzfE9uo5RUUYt60gA78iRaH6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMtGbCa cDPcUwnTKJzndWSNejJ9MB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChS76caGwjTAEIBeIGBEyTml+aApH7AooekXj42fre+wM4ACNYQP19 L4NZxnAmB5mZ18S8A8X6Zi+U8VW7ghXTLD2qoKNrhzNmPJY2XshN90P/tDMEel1G T3dLWfyrtyBmKtQWbq5oYg9yaNYL/XfNSPIaJPARpm9vcZICT4kkI8k47yrS221Z 4BfF7+O4E+eq+NKlcFJyWC7Ay4QTeffAUJB1v94nDpFhDgKOqYek+zDN8YHrkgYg nGRm5tv0q3ek5cc7tRfoAaLq7Vbp9OQ6OQsuR8WXYoRTgZloEmxIaooeSEOMBeRl u7H2f5yEowUEAU3b3iHy7mSlbEBzZLVd -----END CERTIFICATE-----Generated at Mon Dec 22 22:22:02 2025 by rpki-client