This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json) Hash identifier: H/PZoHDdnDxMlZ/t8D38zmIOoywCvHirZKnBwJdaYKM= Subject key identifier: 73:99:DF:7C:29:8B:FA:8A:A6:A4:5B:07:66:A4:03:55:F1:F7:3A:7C Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft Manifest number: 36 Signing time: Tue 23 Dec 2025 06:21:42 +0000 Manifest this update: Tue 23 Dec 2025 06:21:41 +0000 Manifest next update: Tue 30 Dec 2025 06:21:41 +0000 Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: lIwHGQ+Fq5DR/sNxNyS3V3DpemHlCHLm+6fXCu57b18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Validity Not Before: Dec 23 06:21:41 2025 GMT Not After : Dec 30 06:21:41 2025 GMT Subject: CN=694a34f5-dda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:2b:cd:71:b2:88:d9:8a:c8:9d:c3:a4:11: 52:a5:d4:7c:2f:50:df:f0:df:9d:da:8d:3e:71:bf: 63:73:d3:a3:bf:e3:fb:f8:3f:30:cd:41:42:2f:34: 11:a6:39:3c:22:9c:6d:86:ba:e5:d0:f7:f0:8f:6b: c2:d4:e8:34:ff:fd:3a:b8:79:3a:cb:dc:eb:bc:20: 79:b8:18:da:61:4d:01:10:db:b2:a6:97:01:32:66: bb:b6:38:0e:6f:44:b9:b9:1a:7d:95:47:a3:85:1e: f4:db:95:dc:b1:20:d2:e4:a5:32:0d:44:f3:1d:8a: e0:36:c9:d9:4f:66:18:83:fe:1f:12:a7:95:dd:38: 0c:72:54:58:60:8a:f1:9d:e5:36:61:57:f0:ad:46: 95:69:a8:c7:d1:a0:07:30:65:91:e4:71:c7:2b:ea: cd:a5:de:89:67:cd:65:a1:b0:7c:a6:11:40:92:df: 7d:00:df:5a:c7:b2:0c:20:b0:a0:2b:c7:6b:2e:eb: e8:54:ae:3e:b3:3e:0b:bd:00:9c:3e:8f:37:42:66: a1:f6:98:7c:1a:11:c3:df:9d:3a:7b:1f:ec:2b:a8: d0:33:7a:da:eb:f2:ab:45:35:0b:95:4d:83:a5:24: 7a:d1:38:ad:ff:78:0c:51:00:98:97:c0:5b:d6:e3: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:DF:7C:29:8B:FA:8A:A6:A4:5B:07:66:A4:03:55:F1:F7:3A:7C X509v3 Authority Key Identifier: keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:37:ea:97:26:3e:bc:42:7a:20:1b:b5:b2:ba:49:5c:27:bb: 62:ad:6a:e9:10:f6:23:33:b4:2a:3b:53:dc:88:cd:af:b0:e0: 3a:8f:b1:92:42:96:ca:2c:ac:65:77:70:7b:8f:94:78:fa:da: e3:dd:ab:70:92:ed:a3:1f:62:a5:00:79:0a:98:96:3a:a1:c9: cb:0a:82:25:8b:b2:d4:11:ef:cd:d9:d1:11:c3:27:e5:00:f0: 87:4a:2e:d6:80:64:cd:83:4a:45:73:e3:0e:bf:c2:3a:9d:b6: d6:e3:52:0c:e3:fa:b5:f7:75:a3:61:65:84:3e:66:cf:8a:62: 15:1d:ca:cc:f6:33:a1:cf:78:f4:e4:0a:1a:0a:b3:93:b7:52: 15:b2:c2:92:1f:34:08:65:87:ca:8a:f4:a9:75:b3:3d:02:bd: 3b:b7:ef:b9:bb:13:89:1d:d1:a6:c5:94:6c:36:ab:51:57:1c: e2:18:24:1c:d6:20:62:eb:ec:6a:db:f4:e9:58:ab:19:27:31: f1:67:a7:b5:ba:bb:84:78:92:78:37:4b:1a:d9:9a:14:8d:b5: 44:92:6e:1e:11:db:4f:3e:af:d6:b4:ef:6d:e8:6c:1a:91:b4: af:19:af:b5:3e:dd:47:03:09:c0:9a:f7:ac:b6:df:c6:7e:8a: f8:09:7d:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF MDBEMkZBMTAeFw0yNTEyMjMwNjIxNDFaFw0yNTEyMzAwNjIxNDFaMBgxFjAUBgNV BAMMDTY5NGEzNGY1LWRkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDggivNcbKI2YrIncOkEVKl1HwvUN/w353ajT5xv2Nz06O/4/v4PzDNQUIvNBGm OTwinG2GuuXQ9/CPa8LU6DT//Tq4eTrL3Ou8IHm4GNphTQEQ27KmlwEyZru2OA5v RLm5Gn2VR6OFHvTbldyxINLkpTINRPMdiuA2ydlPZhiD/h8Sp5XdOAxyVFhgivGd 5TZhV/CtRpVpqMfRoAcwZZHkcccr6s2l3olnzWWhsHymEUCS330A31rHsgwgsKAr x2su6+hUrj6zPgu9AJw+jzdCZqH2mHwaEcPfnTp7H+wrqNAzetrr8qtFNQuVTYOl JHrROK3/eAxRAJiXwFvW4w+lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc5nffCmL +oqmpFsHZqQDVfH3OnwwHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj MUFrTjFLeUlKSWVBTkw2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD836pcmPrxCeiAbtbK6SVwnu2KtaukQ9iMztCo7U9yIza+w4DqPsZJC lsosrGV3cHuPlHj62uPdq3CS7aMfYqUAeQqYljqhycsKgiWLstQR783Z0RHDJ+UA 8IdKLtaAZM2DSkVz4w6/wjqdttbjUgzj+rX3daNhZYQ+Zs+KYhUdysz2M6HPePTk ChoKs5O3UhWywpIfNAhlh8qK9Kl1sz0CvTu377m7E4kd0abFlGw2q1FXHOIYJBzW IGLr7Grb9OlYqxknMfFnp7W6u4R4kng3SxrZmhSNtUSSbh4R208+r9a0723obBqR tK8Zr7U+3UcDCcCa96y238Z+ivgJfXo= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:52 2025 by rpki-client