This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: ySVwiz/1cYUTcEyu9XHWtouleTu1N3JGSmCVuBZTNvc= Subject key identifier: 68:68:A0:8A:4B:C4:AD:D6:40:45:54:F3:F4:19:B6:B5:68:CC:C1:45 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 1696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1680 Signing time: Mon 22 Dec 2025 16:28:07 +0000 Manifest this update: Mon 22 Dec 2025 16:28:07 +0000 Manifest next update: Mon 29 Dec 2025 16:28:07 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: UOavaYy0142dofvG9fWMHj4dqwsm2ZhFADGR+sIq0gI=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5782 (0x1696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Dec 22 16:28:07 2025 GMT Not After : Dec 29 16:28:07 2025 GMT Subject: CN=69497197-2bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c2:10:82:84:3d:0e:bd:2e:2b:db:51:c8:ab: 32:18:b6:17:79:5f:94:a6:ac:43:5a:d6:4a:32:1d: 4c:e2:24:c3:9d:4b:31:1c:65:2a:75:45:ab:e9:83: f6:3c:e6:ce:0e:df:3c:00:f8:52:51:f0:e2:59:e0: 1d:a8:25:33:e0:73:b6:da:0b:3d:61:87:a8:56:f2: 86:ec:44:d8:a4:f2:64:c9:84:7e:b2:5b:f5:66:4a: 5c:55:45:12:9f:8c:b2:44:52:60:ca:6b:07:21:02: 56:0b:17:9c:32:05:32:b5:b2:c1:6d:ee:b0:9a:f0: d6:fd:09:91:49:08:91:2d:4c:d7:cb:7c:c9:34:b0: 94:fb:07:2a:ab:89:13:da:38:25:86:b9:0a:f8:7c: 72:05:ee:e4:a5:26:32:c2:28:a7:4b:c9:74:70:18: 1e:c5:8f:4c:e2:61:cd:0f:45:dc:0e:ff:40:cd:5f: bb:d8:2a:44:d5:73:19:5b:f3:f1:56:18:fc:65:2c: ce:66:47:10:4b:47:c4:9d:34:a3:36:f6:2b:6b:9f: ba:d5:d1:bf:5f:70:d2:38:e4:b1:9d:66:b1:1e:dd: 60:8a:60:be:44:53:d1:00:98:5e:1b:2f:e8:33:58: d6:9d:7f:24:18:83:aa:2d:d3:28:c9:5d:5f:84:1c: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:68:A0:8A:4B:C4:AD:D6:40:45:54:F3:F4:19:B6:B5:68:CC:C1:45 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:9e:9e:99:c0:b0:40:9f:77:f9:09:02:a3:b3:e4:b9:1b:15: 9c:34:99:ac:04:c3:be:44:36:45:d5:38:1b:da:26:f5:bc:72: 11:72:82:84:ff:57:56:03:68:4e:c8:6d:2c:fd:0e:de:4e:ef: b7:7b:45:d9:b6:00:ee:4f:7e:1e:fe:90:68:02:3f:e7:81:44: ad:f9:81:ba:c5:f6:24:b9:79:c3:36:2c:7a:70:42:ae:94:d8: 0f:0f:05:61:da:13:1b:37:e9:83:ab:23:43:e7:b3:8a:b0:a1: 6c:ef:6a:20:ea:8e:97:08:c6:2c:38:9b:f3:fc:0a:2d:fd:2d: 66:77:86:d8:88:c5:f2:ef:18:3f:bf:5c:45:7a:6d:48:90:c4: 0c:8f:9a:8f:7f:11:46:ba:eb:df:81:79:b7:78:d8:36:ab:55: 6d:b9:1f:84:66:29:a5:1f:b0:1a:65:7d:01:fc:32:92:27:b3: 4a:a8:c9:04:83:29:80:f0:d2:a8:29:5a:bc:04:82:52:27:3f: ff:33:57:ad:b1:45:b8:38:5d:e6:c3:32:6f:6e:a3:f2:16:e0: 60:95:4f:7d:67:88:e0:3b:a5:4d:c6:f9:98:ba:44:37:9c:ea: fd:68:1d:ad:54:24:19:af:95:9b:81:b4:25:b3:1f:c3:11:db: 4e:86:7f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUxMjIyMTYyODA3WhcNMjUxMjI5MTYyODA3WjAYMRYwFAYD VQQDDA02OTQ5NzE5Ny0yYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8IQgoQ9Dr0uK9tRyKsyGLYXeV+UpqxDWtZKMh1M4iTDnUsxHGUqdUWr6YP2 PObODt88APhSUfDiWeAdqCUz4HO22gs9YYeoVvKG7ETYpPJkyYR+slv1ZkpcVUUS n4yyRFJgymsHIQJWCxecMgUytbLBbe6wmvDW/QmRSQiRLUzXy3zJNLCU+wcqq4kT 2jglhrkK+HxyBe7kpSYywiinS8l0cBgexY9M4mHND0XcDv9AzV+72CpE1XMZW/Px Vhj8ZSzOZkcQS0fEnTSjNvYra5+61dG/X3DSOOSxnWaxHt1gimC+RFPRAJheGy/o M1jWnX8kGIOqLdMoyV1fhBx2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhooIpL xK3WQEVU8/QZtrVozMFFMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTnp6ZwLBAn3f5CQKjs+S5GxWcNJmsBMO+RDZF1Tgb2ib1vHIRcoKE /1dWA2hOyG0s/Q7eTu+3e0XZtgDuT34e/pBoAj/ngUSt+YG6xfYkuXnDNix6cEKu lNgPDwVh2hMbN+mDqyND57OKsKFs72og6o6XCMYsOJvz/Aot/S1md4bYiMXy7xg/ v1xFem1IkMQMj5qPfxFGuuvfgXm3eNg2q1VtuR+EZimlH7AaZX0B/DKSJ7NKqMkE gymA8NKoKVq8BIJSJz//M1etsUW4OF3mwzJvbqPyFuBglU99Z4jgO6VNxvmYukQ3 nOr9aB2tVCQZr5WbgbQlsx/DEdtOhn93 -----END CERTIFICATE-----Generated at Tue Dec 23 09:52:45 2025 by rpki-client