This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: TGejfjBJk974NtOsWMXExMSQ9RFV5SZ7BIQ40T8S0Ow= Subject key identifier: 55:59:19:AC:C5:5D:CA:77:40:4A:D3:75:7F:EF:62:53:D7:E8:00:0F Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: A9 Signing time: Sun 07 Dec 2025 04:26:00 +0000 Manifest this update: Sun 07 Dec 2025 04:26:00 +0000 Manifest next update: Sun 14 Dec 2025 04:25:59 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: BU+NSWZFNPEt/ZhlNA5KC4EzW0o9vMLlRu2CShiJcBM=) 2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: 7+ZOvaTWijF19fvrYhrbkrijLyfPn8jaNNPKHW6m280=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: Dec 7 04:26:00 2025 GMT Not After : Dec 14 04:25:59 2025 GMT Subject: CN=693501d8-e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:99:35:a2:f8:13:54:d0:ea:7e:6d:32:d2: ca:98:c0:6f:91:eb:f1:6a:1d:fa:7a:f2:14:db:90: 48:8e:6c:3c:16:3c:7e:25:53:6c:3d:d8:08:54:3d: f5:fc:8f:3f:8f:33:04:b6:fd:f5:3b:6f:e2:d9:8a: 27:a9:e8:39:d1:37:ab:20:b6:32:33:a8:8e:29:12: 39:d9:ca:46:95:31:ab:3b:20:01:76:a0:5e:69:88: f6:3a:9e:a8:12:d9:c0:2d:08:28:f5:d7:a0:0e:11: d5:43:1f:03:17:f7:f5:da:77:e8:d6:19:88:3b:a0: c2:d9:69:7c:e0:d2:d9:0f:90:0a:a2:40:91:9c:ff: d1:c6:e2:88:f7:7d:97:6f:38:f6:76:11:bc:e0:40: b7:dc:b8:fd:42:0a:48:d7:63:2a:e8:46:e3:7b:0b: 70:57:fc:15:c7:84:ff:26:13:7b:9e:bb:60:8d:d2: c2:81:ef:31:a0:5e:9c:08:2b:8c:9c:4c:5e:04:86: f7:ed:ae:65:46:71:c8:3d:04:ab:d9:ee:a3:62:03: 6b:41:4d:7d:8c:95:ac:ff:5d:ed:09:9f:d1:ab:34: d2:74:7b:8f:ac:1c:ce:77:41:73:20:68:63:93:f4: a3:db:78:60:ce:b2:37:16:b4:75:82:95:74:f1:fd: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:59:19:AC:C5:5D:CA:77:40:4A:D3:75:7F:EF:62:53:D7:E8:00:0F X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d2:8c:b7:80:0c:fa:43:43:70:9a:15:d9:1b:92:e4:0d:d9: ce:e8:fb:ac:db:45:79:17:23:c1:14:ed:11:51:81:e9:19:cd: 08:5e:1f:85:f2:73:87:54:5f:bf:28:4b:85:25:fb:a3:9e:4e: 91:3f:c0:24:52:84:f5:4d:4e:13:67:16:ad:dc:0b:e5:8c:4d: 92:ed:73:5a:46:2f:d0:26:a1:af:b5:75:40:2a:3c:7b:27:97: 94:d7:ef:cf:54:4e:ec:a8:a2:f0:57:54:0a:c7:65:29:3a:ef: 2f:29:44:51:80:04:53:b4:78:63:d9:4f:69:46:90:da:00:d9: 19:04:c7:ed:c1:58:8b:07:c5:6f:89:67:52:00:7e:3d:12:98: 59:40:75:28:4a:ab:08:47:46:1d:7c:24:3d:c7:0b:6f:ea:57: ae:d2:f8:c2:91:a6:a9:6d:8d:70:f2:c4:c0:69:d1:0c:b4:81: 01:0d:38:18:b0:17:8c:df:93:69:61:91:1b:c5:17:a5:f8:c9: 72:36:07:8e:f0:65:6c:99:16:79:f7:be:44:18:95:6b:21:be: d8:74:81:5d:1c:93:e3:8e:f6:ba:b3:a3:4b:d2:9a:91:80:9f: 91:e5:f7:e4:db:5d:a2:11:fe:a6:3c:cd:39:13:6d:e4:21:2d: b4:c7:98:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2NjE4RTJFQzFB MThBNUM0RTIwHhcNMjUxMjA3MDQyNjAwWhcNMjUxMjE0MDQyNTU5WjAYMRYwFAYD VQQDEw02OTM1MDFkOC1lN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MGZNaL4E1TQ6n5tMtLKmMBvkevxah36evIU25BIjmw8Fjx+JVNsPdgIVD31 /I8/jzMEtv31O2/i2Yonqeg50TerILYyM6iOKRI52cpGlTGrOyABdqBeaYj2Op6o EtnALQgo9degDhHVQx8DF/f12nfo1hmIO6DC2Wl84NLZD5AKokCRnP/RxuKI932X bzj2dhG84EC33Lj9QgpI12Mq6EbjewtwV/wVx4T/JhN7nrtgjdLCge8xoF6cCCuM nExeBIb37a5lRnHIPQSr2e6jYgNrQU19jJWs/13tCZ/RqzTSdHuPrBzOd0FzIGhj k/Sj23hgzrI3FrR1gpV08f1gIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVZGazF Xcp3QErTdX/vYlPX6AAPMB8GA1UdIwQYMBaAFAN4juK65NgF683KZhji7BoYpcTi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CRTdDQUMxMkQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJBWHJ6Y3BtR09Mc0doaWx4 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJB WHJ6Y3BtR09Mc0doaWx4T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU0oy3gAz6Q0NwmhXZG5LkDdnO6Pus20V5FyPBFO0RUYHpGc0IXh+F 8nOHVF+/KEuFJfujnk6RP8AkUoT1TU4TZxat3AvljE2S7XNaRi/QJqGvtXVAKjx7 J5eU1+/PVE7sqKLwV1QKx2UpOu8vKURRgARTtHhj2U9pRpDaANkZBMftwViLB8Vv iWdSAH49EphZQHUoSqsIR0YdfCQ9xwtv6leu0vjCkaapbY1w8sTAadEMtIEBDTgY sBeM35NpYZEbxRel+MlyNgeO8GVsmRZ5975EGJVrIb7YdIFdHJPjjva6s6NL0pqR gJ+R5ffk212iEf6mPM05E23kIS20x5ir -----END CERTIFICATE-----Generated at Mon Dec 8 06:19:05 2025 by rpki-client