This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: w6ngPy4ceAbGPMj7FeNUCHf/roOokO95vjubTT3Bp4Q= Subject key identifier: 8F:FD:5C:07:30:98:92:97:B2:19:C3:EC:9F:69:C9:DF:A4:6C:2F:4B Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 0146 Signing time: Tue 23 Dec 2025 03:17:45 +0000 Manifest this update: Tue 23 Dec 2025 03:17:45 +0000 Manifest next update: Tue 30 Dec 2025 03:17:45 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: XudcoJNGI/ev2midUxYxQcoHdTqT6B+1aByUggGKxvs=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Dec 23 03:17:45 2025 GMT Not After : Dec 30 03:17:45 2025 GMT Subject: CN=694a09d9-9a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:c5:97:34:7e:ad:55:36:18:6d:08:2d:74: fa:75:1f:43:91:b8:99:65:08:a1:3b:6a:ee:28:4d: d8:58:b4:c6:80:55:b0:f0:cc:dd:9e:97:92:fe:6f: b4:be:2d:46:05:7e:8f:43:14:e9:3f:ed:59:17:d7: 0d:0d:70:55:12:d2:86:7f:e9:ed:72:66:fa:3d:79: 56:77:38:7c:3c:f1:b4:8f:c1:1f:0d:2f:8f:a1:54: 31:e0:ca:fe:55:bd:84:e0:5b:1a:22:1c:22:f3:9a: 6d:a5:bb:a5:67:9b:ed:99:75:c2:b2:18:4d:a6:cc: d9:73:e3:bf:87:e0:98:d0:c3:b1:3d:06:e4:60:35: b8:a3:aa:b2:04:7c:eb:98:5a:e5:a8:4c:0f:4a:ba: f6:76:a2:a4:cc:f4:d2:3c:79:95:a6:f7:c8:65:ee: 90:db:b4:e1:1b:3a:17:ce:08:08:d7:9a:ef:8e:2d: d8:4c:e2:fd:ed:13:69:27:a9:67:dc:f2:8b:c8:cf: af:de:b4:64:23:84:22:73:f5:66:1b:08:e2:61:55: d0:38:b2:27:84:d3:4e:fb:44:75:28:c6:d5:bc:ac: d7:25:34:15:59:3d:22:d9:62:1e:7c:20:db:85:e0: 91:50:d0:b0:ae:ad:98:fa:a6:e6:74:2e:f3:a9:d1: f0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FD:5C:07:30:98:92:97:B2:19:C3:EC:9F:69:C9:DF:A4:6C:2F:4B X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:68:09:ba:60:98:bc:4e:e0:d5:10:38:c6:19:33:1f:c0:e0: 35:17:b8:88:a1:aa:ed:cb:87:9c:63:1a:47:27:aa:bb:3f:3d: 8d:db:a7:94:be:dd:44:f8:db:38:9c:ba:fa:24:ed:d4:b7:c4: 67:fc:f8:e0:80:aa:34:7f:8b:54:f8:19:69:fd:29:4f:14:43: 3b:a4:28:14:0f:96:19:e5:c6:ad:19:5b:25:f6:6e:80:f4:99: d0:98:7d:fe:ab:66:9f:ce:8b:ed:51:40:6b:9b:78:d1:79:5c: 57:96:c7:76:6e:b8:a9:3c:e5:71:e4:d0:9b:22:f1:4a:04:71: 3f:3d:ea:d5:41:14:da:cb:c7:44:21:c6:13:7a:d1:28:8e:9b: de:4e:31:9f:45:41:3c:6f:12:32:f4:5d:58:05:55:53:8f:3f: 44:46:27:0f:c1:4c:9f:e1:83:51:15:e8:38:f7:11:59:7e:f4: 6f:3d:eb:ce:d3:64:68:7a:b3:e9:e6:70:85:28:13:d5:f6:fa: 92:47:0b:d4:92:a8:1b:03:6a:9e:02:71:b9:76:34:b5:b8:9c: f3:9b:6a:b7:b0:14:8a:19:06:0e:73:b8:9e:6f:e2:3e:7e:a8: 85:57:52:93:01:ff:ec:11:5d:da:08:d9:13:6f:cf:30:2f:ed: 67:e6:5c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUxMjIzMDMxNzQ1WhcNMjUxMjMwMDMxNzQ1WjAYMRYwFAYD VQQDDA02OTRhMDlkOS05YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw33FlzR+rVU2GG0ILXT6dR9DkbiZZQihO2ruKE3YWLTGgFWw8MzdnpeS/m+0 vi1GBX6PQxTpP+1ZF9cNDXBVEtKGf+ntcmb6PXlWdzh8PPG0j8EfDS+PoVQx4Mr+ Vb2E4FsaIhwi85ptpbulZ5vtmXXCshhNpszZc+O/h+CY0MOxPQbkYDW4o6qyBHzr mFrlqEwPSrr2dqKkzPTSPHmVpvfIZe6Q27ThGzoXzggI15rvji3YTOL97RNpJ6ln 3PKLyM+v3rRkI4Qic/VmGwjiYVXQOLInhNNO+0R1KMbVvKzXJTQVWT0i2WIefCDb heCRUNCwrq2Y+qbmdC7zqdHwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/9XAcw mJKXshnD7J9pyd+kbC9LMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsaAm6YJi8TuDVEDjGGTMfwOA1F7iIoarty4ecYxpHJ6q7Pz2N26eU vt1E+Ns4nLr6JO3Ut8Rn/PjggKo0f4tU+Blp/SlPFEM7pCgUD5YZ5catGVsl9m6A 9JnQmH3+q2afzovtUUBrm3jReVxXlsd2bripPOVx5NCbIvFKBHE/PerVQRTay8dE IcYTetEojpveTjGfRUE8bxIy9F1YBVVTjz9ERicPwUyf4YNRFeg49xFZfvRvPevO 02RoerPp5nCFKBPV9vqSRwvUkqgbA2qeAnG5djS1uJzzm2q3sBSKGQYOc7ieb+I+ fqiFV1KTAf/sEV3aCNkTb88wL+1n5lxp -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:26 2025 by rpki-client