This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: EnCYczX8PT1ejV59eojDS+99lHcYoYXsqUx2Arq0scY= Subject key identifier: 6D:71:04:11:9D:D5:A1:CF:54:C5:CE:43:0E:01:C1:DC:7B:E5:1C:2E Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 07F8 Signing time: Mon 22 Dec 2025 20:23:48 +0000 Manifest this update: Mon 22 Dec 2025 20:23:47 +0000 Manifest next update: Mon 29 Dec 2025 20:23:47 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: 1+Uw+IljkVGtQTuZLDluT/Q1dbN2yAM7s8e3oOGmGcw=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: 4H/7tRgY+9ShgVfnL2F79sUIJ0/ruS7tEGMDyU0Q41E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Dec 22 20:23:47 2025 GMT Not After : Dec 29 20:23:47 2025 GMT Subject: CN=6949a8d4-a8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c4:e7:10:20:6c:1e:0a:36:a4:e5:fd:1b:ff: ce:4b:9d:bd:1e:bf:18:89:7a:6f:4f:33:9e:97:d1: e3:42:a0:7d:d6:27:4a:75:fe:cf:ea:72:93:4d:24: b9:19:32:1d:ae:d8:f3:f1:ad:97:b7:ad:84:0b:39: 46:6d:13:5d:57:4e:5d:e5:14:f8:5b:b2:3b:4c:cb: 7d:e2:7f:ac:f3:12:d9:7c:14:07:e0:57:63:0e:28: 66:87:12:23:ee:be:94:44:01:7b:d4:69:ed:c6:dd: 66:fe:74:a0:f5:ca:0b:ac:88:db:c3:bd:8e:cd:75: 3b:b0:71:69:52:15:05:74:38:2a:8c:bc:97:6f:0a: b9:be:42:ca:6e:8e:0b:67:a8:09:5d:c5:c3:ad:c6: 8f:a5:63:1b:0a:6c:c9:bf:73:79:1e:20:f5:6c:88: ae:f5:01:28:f6:4b:2a:f5:b1:2d:65:5d:97:22:80: dc:05:ef:01:d0:70:ee:31:e6:55:da:9b:d4:c8:7f: b6:b1:dd:65:47:c6:82:ff:0e:5b:63:c3:6e:fa:f4: 27:8a:60:13:56:94:a0:20:2f:c0:d3:ee:3b:5f:35: 32:9d:51:6c:ee:88:b9:b4:15:6b:0e:f9:f1:b9:2d: 9b:fd:f1:c5:ce:bc:f6:6b:fb:c1:33:bf:6b:e0:15: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:71:04:11:9D:D5:A1:CF:54:C5:CE:43:0E:01:C1:DC:7B:E5:1C:2E X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f1:3e:67:12:32:82:1a:9f:d9:69:0b:b0:d0:37:dc:ec:04: 4e:c2:80:f9:b5:4f:d8:60:a8:9b:b9:c8:83:69:87:02:d2:69: 5a:25:ea:2e:f3:81:56:df:cf:52:54:91:2c:97:aa:ac:e8:27: 4f:95:43:5d:2f:d5:a9:b5:d0:9f:88:09:7d:36:c0:d1:9c:82: 36:57:5c:c5:27:04:6a:73:58:c5:10:e7:49:59:d2:2a:21:52: 54:b8:65:59:6e:82:46:87:fe:6e:e6:94:77:44:f9:8c:d7:dd: d4:9f:ea:70:a3:84:80:c0:91:28:d7:a1:a7:1f:e3:aa:ff:70: c8:76:92:c3:35:60:98:9a:e6:5c:53:29:fb:f3:a3:55:5d:fb: 7d:2e:d1:40:41:de:9f:77:ab:8d:70:11:6a:2f:58:e9:92:2d: 3b:f0:de:cc:38:ec:47:3e:fe:54:c9:f4:8c:4d:60:a2:a3:79: c1:65:59:1e:2b:61:39:70:b1:b3:b3:8d:b5:59:bc:85:5a:f6: 2d:3e:f8:ee:d4:0f:e4:b7:87:09:cb:54:42:b3:b8:5d:ef:56: 34:bb:a3:b4:01:6a:3c:ec:2e:c4:c8:79:9f:14:14:cc:57:b6: b1:6f:83:e0:d8:ca:05:78:2f:b1:6a:b3:6b:3a:4e:18:5f:08: eb:c7:75:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUxMjIyMjAyMzQ3WhcNMjUxMjI5MjAyMzQ3WjAYMRYwFAYD VQQDDA02OTQ5YThkNC1hOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cTnECBsHgo2pOX9G//OS529Hr8YiXpvTzOel9HjQqB91idKdf7P6nKTTSS5 GTIdrtjz8a2Xt62ECzlGbRNdV05d5RT4W7I7TMt94n+s8xLZfBQH4FdjDihmhxIj 7r6URAF71Gntxt1m/nSg9coLrIjbw72OzXU7sHFpUhUFdDgqjLyXbwq5vkLKbo4L Z6gJXcXDrcaPpWMbCmzJv3N5HiD1bIiu9QEo9ksq9bEtZV2XIoDcBe8B0HDuMeZV 2pvUyH+2sd1lR8aC/w5bY8Nu+vQnimATVpSgIC/A0+47XzUynVFs7oi5tBVrDvnx uS2b/fHFzrz2a/vBM79r4BXAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1xBBGd 1aHPVMXOQw4Bwdx75RwuMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU8T5nEjKCGp/ZaQuw0Dfc7AROwoD5tU/YYKibuciDaYcC0mlaJeou 84FW389SVJEsl6qs6CdPlUNdL9WptdCfiAl9NsDRnII2V1zFJwRqc1jFEOdJWdIq IVJUuGVZboJGh/5u5pR3RPmM193Un+pwo4SAwJEo16GnH+Oq/3DIdpLDNWCYmuZc Uyn786NVXft9LtFAQd6fd6uNcBFqL1jpki078N7MOOxHPv5UyfSMTWCio3nBZVke K2E5cLGzs421WbyFWvYtPvju1A/kt4cJy1RCs7hd71Y0u6O0AWo87C7EyHmfFBTM V7axb4Pg2MoFeC+xarNrOk4YXwjrx3Wg -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:00 2025 by rpki-client