This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: ppGP39iu63mF0xsmtXYsNoO2MLtam1Xkc31fpE6fLEM= Subject key identifier: B2:8F:E3:E7:54:8B:34:43:20:3B:A2:5E:2A:4B:59:2A:DA:BB:79:3C Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 0133 Signing time: Fri 19 Dec 2025 03:42:33 +0000 Manifest this update: Fri 19 Dec 2025 03:42:32 +0000 Manifest next update: Fri 26 Dec 2025 03:42:32 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: Yk4GRWVCWr4gZD5oiuchsPWMUbDHWWPsPmJyi0PucKw=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Dec 19 03:42:32 2025 GMT Not After : Dec 26 03:42:32 2025 GMT Subject: CN=6944c9a9-cf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:5d:72:7a:8b:a2:0e:27:5d:4e:b7:b0:58: 09:ca:d4:10:f7:5d:1b:17:1e:b0:45:72:f7:93:b2: 81:ab:7a:65:4b:05:41:85:35:32:0b:97:af:00:46: da:00:b8:3a:31:35:1a:a5:67:51:fd:92:78:5b:f9: 76:a5:b8:9d:cd:6e:90:9e:db:00:67:40:df:a5:db: 3d:d6:14:0e:8a:72:8e:a6:ec:27:cc:55:9c:a6:43: 5d:b8:52:f3:40:2a:37:0e:74:c0:0c:e8:f2:33:5a: 5c:1c:41:5f:b4:19:91:26:23:f1:e8:f4:53:e6:6b: 84:1b:6f:c2:fe:6b:12:71:6b:1c:ec:d6:51:f5:74: 29:fc:1e:d1:c1:2b:0b:8b:3e:0a:58:d4:64:6d:ce: e7:a0:57:e0:0e:0a:3d:14:8c:c7:0c:41:c1:e4:ee: 51:02:df:32:e7:3a:65:f9:38:b8:5c:f5:c4:0a:22: c9:0e:32:42:7f:04:1b:0b:c3:2f:69:ee:eb:dc:22: cc:e8:ac:e6:7f:b5:12:bb:db:41:d3:98:7e:0b:89: d7:99:91:a7:2c:12:64:78:66:f2:0b:ef:8d:bd:c5: d9:59:dd:08:4f:f2:58:b1:ed:b7:20:a9:6c:5d:46: 95:3a:fe:f1:fe:67:7e:43:bf:86:b5:fd:83:4f:84: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8F:E3:E7:54:8B:34:43:20:3B:A2:5E:2A:4B:59:2A:DA:BB:79:3C X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6f:97:59:48:c8:ab:8d:8c:48:0e:d6:b6:0d:02:cc:b4:dd: f3:fc:3a:dc:9b:69:6b:a8:ab:73:92:d9:41:9f:91:9a:1f:db: d7:e5:f9:06:af:d3:f8:2b:95:1c:a4:a9:89:3e:70:1f:95:80: 59:44:d0:32:52:bf:54:c4:74:48:50:8d:ec:24:d1:9a:6a:59: bc:af:30:f5:a6:bd:43:0e:98:c6:20:fe:64:0b:69:b3:cc:84: 07:cb:38:6e:76:74:fd:d2:f3:ff:d5:a8:2c:38:df:a6:ac:ad: 93:f6:eb:40:30:b2:b7:05:99:fc:3b:f5:7a:f1:08:33:a4:3c: da:c6:1e:9d:e2:0b:af:70:01:a6:23:91:fc:b1:bb:b9:05:d0: 90:7e:97:e4:a0:68:3f:c9:cd:49:cc:34:d7:1b:fd:52:09:74: ae:92:94:e1:cb:9f:21:c3:3b:b8:f1:9d:fb:21:88:89:77:ef: 91:f4:77:d5:1c:23:ba:bd:b3:84:22:32:28:9a:c1:67:d4:d3: 10:22:83:9d:d5:37:08:68:59:60:c1:13:1c:02:30:3e:9b:c4: 10:b7:55:6d:12:2b:d3:8c:af:0b:22:5f:a1:6c:ae:2f:75:a2: 86:7e:a2:b6:41:18:e5:cf:6b:a7:a2:aa:fe:bb:89:c7:10:27: 6a:7d:d9:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUxMjE5MDM0MjMyWhcNMjUxMjI2MDM0MjMyWjAYMRYwFAYD VQQDDA02OTQ0YzlhOS1jZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj6tdcnqLog4nXU63sFgJytQQ910bFx6wRXL3k7KBq3plSwVBhTUyC5evAEba ALg6MTUapWdR/ZJ4W/l2pbidzW6QntsAZ0Dfpds91hQOinKOpuwnzFWcpkNduFLz QCo3DnTADOjyM1pcHEFftBmRJiPx6PRT5muEG2/C/msScWsc7NZR9XQp/B7RwSsL iz4KWNRkbc7noFfgDgo9FIzHDEHB5O5RAt8y5zpl+Ti4XPXECiLJDjJCfwQbC8Mv ae7r3CLM6Kzmf7USu9tB05h+C4nXmZGnLBJkeGbyC++NvcXZWd0IT/JYse23IKls XUaVOv7x/md+Q7+Gtf2DT4StpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKP4+dU izRDIDuiXipLWSrau3k8MB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsb5dZSMirjYxIDta2DQLMtN3z/Drcm2lrqKtzktlBn5GaH9vX5fkG r9P4K5UcpKmJPnAflYBZRNAyUr9UxHRIUI3sJNGaalm8rzD1pr1DDpjGIP5kC2mz zIQHyzhudnT90vP/1agsON+mrK2T9utAMLK3BZn8O/V68QgzpDzaxh6d4guvcAGm I5H8sbu5BdCQfpfkoGg/yc1JzDTXG/1SCXSukpThy58hwzu48Z37IYiJd++R9HfV HCO6vbOEIjIomsFn1NMQIoOd1TcIaFlgwRMcAjA+m8QQt1VtEivTjK8LIl+hbK4v daKGfqK2QRjlz2unoqr+u4nHECdqfdk4 -----END CERTIFICATE-----Generated at Fri Dec 19 14:53:02 2025 by rpki-client