This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: 8PfgV0gIefwHTTE0clQ9xgMTRa8sA79JvpyDeD8p2sY= Subject key identifier: 0E:D9:6E:F7:55:73:54:19:CA:F6:B8:DD:E4:3E:15:A4:2A:F8:7C:13 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 38 Signing time: Tue 23 Dec 2025 06:24:07 +0000 Manifest this update: Tue 23 Dec 2025 06:24:07 +0000 Manifest next update: Tue 30 Dec 2025 06:24:07 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: il/A+Yv/VkNQOzsRlhXKS/PQbkho8CwrJ2uvjIy9/gc=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: MYr0RnnESBBRDJ22pf9EsF5pYGHY7f5iA1+28nEzneQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Dec 23 06:24:07 2025 GMT Not After : Dec 30 06:24:07 2025 GMT Subject: CN=694a3587-946f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:d9:b0:6b:d5:b1:75:98:67:e3:e4:87:d4: 45:af:af:b5:cb:84:be:d2:92:4d:45:ae:30:26:25: f2:28:4b:c3:23:fc:38:f2:87:73:43:f6:4c:d9:93: 85:6b:b2:62:43:02:e0:c0:2c:33:42:3f:7c:34:f8: f1:87:85:1e:c4:07:18:80:47:6a:3d:ac:4b:85:ac: 40:b6:cf:ed:b9:1e:4d:12:54:7d:b4:ac:65:b1:99: 66:6f:d4:5d:a1:9b:f8:c0:91:54:4b:93:30:9a:25: c0:c5:e0:fe:42:da:e0:83:92:e6:e9:78:2a:c4:12: e9:fe:9d:dd:7d:70:54:77:55:5b:20:95:6d:62:76: bb:67:7e:10:1a:5f:03:d2:33:b9:8e:2b:67:1a:c2: 97:6f:09:0e:23:e1:72:f8:fa:c8:34:14:88:c3:a1: a4:56:bb:1c:4d:f4:89:d8:00:62:8b:d7:f4:47:32: 4e:4c:3c:66:0e:6a:d5:55:fb:75:bd:a1:b2:78:c3: 60:e1:50:e0:50:c3:7b:2c:22:cc:65:67:72:5c:01: 37:ba:30:6a:0a:da:bc:ff:fc:81:2f:eb:c6:2f:9a: 65:1b:6f:bc:08:fd:dc:f7:1a:13:23:66:3f:a1:d1: 91:b6:bb:c3:61:58:3f:60:a6:41:45:01:ef:d3:26: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D9:6E:F7:55:73:54:19:CA:F6:B8:DD:E4:3E:15:A4:2A:F8:7C:13 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:23:47:c6:6a:28:c8:a8:90:03:55:42:4f:e3:cc:a8:45:fd: 7c:ca:ae:f0:f5:8e:96:77:b6:fe:2a:b1:17:95:19:92:02:d8: e3:d7:d3:82:72:76:74:a9:3d:7d:26:e2:67:e9:88:e2:9e:75: 67:f0:43:95:98:3a:2b:ff:a7:87:20:c5:6d:70:04:1a:a3:65: 5d:a0:bd:d0:16:d3:1e:7f:a1:e1:dc:ae:69:cb:78:70:e4:ca: 15:1c:4f:1e:9c:8a:4e:c6:d8:e9:f6:28:5a:e3:a3:78:df:55: e5:0c:91:79:34:f5:24:5b:5d:f8:a2:c5:aa:e3:08:18:39:d1: ca:91:60:03:0d:b7:54:c6:59:5f:ec:15:31:e8:d5:7e:4b:9b: 35:69:df:84:6b:e7:ac:19:8e:92:7c:df:c6:38:31:f3:19:98: ec:58:db:0b:27:1b:ce:c8:42:03:a9:52:9a:e8:40:70:00:e8: e0:e0:f8:05:1c:d2:0d:15:6c:3f:2a:a0:7e:b3:d8:95:94:d3: 16:92:58:ff:63:6d:95:16:f7:c5:7e:ca:6e:b7:28:c4:64:fb: 37:8b:53:11:61:03:7b:37:4d:3b:a6:0b:72:6a:d7:3c:92:0f: 95:10:ec:7c:97:d0:e4:b0:0a:5b:33:ad:60:ac:5e:f2:74:3d: 53:1e:ac:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNTEyMjMwNjI0MDdaFw0yNTEyMzAwNjI0MDdaMBgxFjAUBgNV BAMMDTY5NGEzNTg3LTk0NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYpdmwa9WxdZhn4+SH1EWvr7XLhL7Skk1FrjAmJfIoS8Mj/Djyh3ND9kzZk4Vr smJDAuDALDNCP3w0+PGHhR7EBxiAR2o9rEuFrEC2z+25Hk0SVH20rGWxmWZv1F2h m/jAkVRLkzCaJcDF4P5C2uCDkubpeCrEEun+nd19cFR3VVsglW1idrtnfhAaXwPS M7mOK2cawpdvCQ4j4XL4+sg0FIjDoaRWuxxN9InYAGKL1/RHMk5MPGYOatVV+3W9 obJ4w2DhUOBQw3ssIsxlZ3JcATe6MGoK2rz//IEv68YvmmUbb7wI/dz3GhMjZj+h 0ZG2u8NhWD9gpkFFAe/TJv5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDtlu91Vz VBnK9rjd5D4VpCr4fBMwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093 OWI2VEF0NFRrTC00QU9tMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8jR8ZqKMiokANVQk/jzKhF/XzKrvD1jpZ3tv4qsReVGZIC2OPX04Jy dnSpPX0m4mfpiOKedWfwQ5WYOiv/p4cgxW1wBBqjZV2gvdAW0x5/oeHcrmnLeHDk yhUcTx6cik7G2On2KFrjo3jfVeUMkXk09SRbXfiixarjCBg50cqRYAMNt1TGWV/s FTHo1X5LmzVp34Rr56wZjpJ838Y4MfMZmOxY2wsnG87IQgOpUproQHAA6ODg+AUc 0g0VbD8qoH6z2JWU0xaSWP9jbZUW98V+ym63KMRk+zeLUxFhA3s3TTumC3Jq1zyS D5UQ7HyX0OSwClszrWCsXvJ0PVMerBc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:37 2025 by rpki-client