This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: PTsQB6tLuTs6EdSdBca3V2s23t9ovgWS8dALKIYc3AU= Subject key identifier: AC:3A:F6:F7:66:EC:43:C4:2A:A8:BB:C2:72:AA:77:83:41:EC:A7:97 Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 3B Signing time: Tue 09 Dec 2025 00:50:45 +0000 Manifest this update: Tue 09 Dec 2025 00:50:44 +0000 Manifest next update: Tue 16 Dec 2025 00:50:44 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: JhSSuHMLuatopVspRpPQNqcZiaKs/XKwAheeSMbnRa0=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: 8k4Q5yQue0fzejcOTfvMtSHEiozPsY58g7SdicIKLKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Dec 9 00:50:44 2025 GMT Not After : Dec 16 00:50:44 2025 GMT Subject: CN=69377264-e3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:0f:8f:5b:91:2c:eb:dd:4f:5c:11:fb:9b: 22:25:75:a2:75:66:ef:6b:49:a2:d2:6a:79:06:8c: 3d:2a:5c:f3:85:93:5b:cf:c0:da:bf:6d:84:8f:9c: 88:00:3a:01:94:a9:41:d2:7c:5e:2d:cc:63:ef:06: ab:df:64:16:c0:63:16:2d:02:e1:11:71:8d:c6:ca: 02:67:84:49:42:ab:bc:73:d3:c8:9a:39:87:e4:02: 96:fc:3e:42:00:aa:de:62:db:37:c6:f2:9d:57:74: c1:0e:fc:20:4b:a8:e1:02:38:8a:0c:48:ee:e0:b7: 4f:dc:da:06:53:ff:05:16:86:c1:9a:50:a7:a9:7a: 77:85:b4:11:aa:ef:ea:0a:72:89:24:1f:82:fb:a7: 4b:f7:af:3d:4f:e2:8a:e9:a3:26:c2:40:f2:f7:1d: 88:4f:f9:87:f8:70:c5:d4:55:5a:38:ca:a4:cb:86: 49:bf:71:6d:f9:08:cc:e9:9a:01:f3:b1:79:a3:84: a5:51:7d:e0:91:50:ef:42:1d:7f:98:47:b5:8d:70: 27:41:3e:f0:f7:87:86:13:68:9b:93:64:67:58:db: 31:fc:08:e0:30:f9:22:17:f3:d1:3f:c7:d1:60:5f: 74:b6:57:87:90:c0:80:5d:86:58:d5:c4:e8:b1:f8: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:F6:F7:66:EC:43:C4:2A:A8:BB:C2:72:AA:77:83:41:EC:A7:97 X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e8:a4:bb:fa:6d:b3:02:e5:4a:67:fa:a5:b2:8f:64:0f:cf: a6:cd:60:af:87:11:be:29:46:e9:b5:92:06:da:cc:b5:33:d4: 60:88:60:ca:c9:11:30:cd:ad:82:6c:71:7e:2d:3b:e5:c6:90: 6c:ed:6f:dd:14:ee:49:a1:82:52:40:59:d2:cd:f5:f9:c3:36: 7b:98:39:5b:77:30:46:bf:77:06:ed:c2:6a:ef:ab:9c:87:dc: b3:47:e4:e5:86:48:6a:54:af:6c:a1:02:a8:c6:9b:7e:17:c3: 29:32:3a:40:59:f7:9b:24:26:de:52:23:87:50:13:7f:43:ae: 39:79:98:19:42:39:9e:40:1b:c3:14:ff:3b:fb:c7:70:54:6d: a2:77:39:f3:94:a0:7c:87:94:c3:96:af:a8:05:24:29:3c:5f: 05:d4:69:8b:70:1f:a3:0b:1e:75:f7:0b:19:ce:df:bd:ba:96: 66:a3:15:66:f9:8e:3f:a8:92:1e:3a:1c:7d:91:90:52:71:d7: fb:2b:c4:e2:df:47:dc:25:47:82:97:5a:f9:eb:ac:14:b2:60: 53:fc:e8:f9:92:29:1a:d5:0d:39:3a:97:f3:ef:6e:e0:f5:64: 7c:4f:5e:09:c6:fd:a8:ae:23:b8:1d:55:8e:30:5c:f4:d3:9e: f2:63:d9:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMDI0RDhGMTVBQTM5NzcyMTc1ODgzQTJFREMxNjUwMTRF MTkyOEExQTAeFw0yNTEyMDkwMDUwNDRaFw0yNTEyMTYwMDUwNDRaMBgxFjAUBgNV BAMTDTY5Mzc3MjY0LWUzYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJxg+PW5Es691PXBH7myIldaJ1Zu9rSaLSankGjD0qXPOFk1vPwNq/bYSPnIgA OgGUqUHSfF4tzGPvBqvfZBbAYxYtAuERcY3GygJnhElCq7xz08iaOYfkApb8PkIA qt5i2zfG8p1XdMEO/CBLqOECOIoMSO7gt0/c2gZT/wUWhsGaUKepeneFtBGq7+oK cokkH4L7p0v3rz1P4orpoybCQPL3HYhP+Yf4cMXUVVo4yqTLhkm/cW35CMzpmgHz sXmjhKVRfeCRUO9CHX+YR7WNcCdBPvD3h4YTaJuTZGdY2zH8COAw+SIX89E/x9Fg X3S2V4eQwIBdhljVxOix+NrTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrDr292bs Q8QqqLvCcqp3g0Hsp5cwHwYDVR0jBBgwFoAUAk2PFao5dyF1iDou3BZQFOGSihow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRBMTJBMzNDODJG NDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2lo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvQWsyUEZhbzVkeUYxaURvdTNCWlFGT0dTaWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NTIwLzRBMTJBMzNDODJGNDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlG MWlEb3UzQlpRRk9HU2loby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEnopLv6bbMC5Upn+qWyj2QPz6bNYK+HEb4pRum1kgbazLUz1GCIYMrJ ETDNrYJscX4tO+XGkGztb90U7kmhglJAWdLN9fnDNnuYOVt3MEa/dwbtwmrvq5yH 3LNH5OWGSGpUr2yhAqjGm34XwykyOkBZ95skJt5SI4dQE39Drjl5mBlCOZ5AG8MU /zv7x3BUbaJ3OfOUoHyHlMOWr6gFJCk8XwXUaYtwH6MLHnX3CxnO3726lmajFWb5 jj+okh46HH2RkFJx1/srxOLfR9wlR4KXWvnrrBSyYFP86PmSKRrVDTk6l/PvbuD1 ZHxPXgnG/aiuI7gdVY4wXPTTnvJj2XM= -----END CERTIFICATE-----Generated at Thu Dec 11 05:09:16 2025 by rpki-client