This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: iHhxxGpHzkPB5DDLc4rokSJ4Eke0TT5Q1/Phw6qHoW4= Subject key identifier: 33:93:F6:BD:EE:1C:3E:2D:B8:79:5E:CB:5A:44:27:7E:EC:09:88:D5 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1F13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1EFA Signing time: Mon 22 Dec 2025 15:50:30 +0000 Manifest this update: Mon 22 Dec 2025 15:50:29 +0000 Manifest next update: Mon 29 Dec 2025 15:50:29 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: w9TeNNkztiyztItr6/Uw2bu9znUDi5UqIv/nndrQzvA=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: faKI457+O03Thbe4kDtQEDQEb5T9q9NP3NicyECMqd4=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: yMcE3tmH7UIpO9OkxwhmXmOUyw6usE3KWg2f35Z4/C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7955 (0x1f13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Dec 22 15:50:29 2025 GMT Not After : Dec 29 15:50:29 2025 GMT Subject: CN=694968c6-0400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:29:1d:d1:9d:79:f4:bb:d2:10:2a:af:bd:35: a0:53:a7:b6:b3:1f:b6:f6:66:d2:00:e3:79:9e:0e: 4d:36:e1:f2:1c:7f:d3:4e:b4:25:37:09:e7:78:4f: 65:00:c4:47:c2:c9:b9:91:de:7e:1b:91:57:1a:2f: d8:7e:28:38:e3:50:94:ce:63:66:ba:16:b4:c5:1f: b8:45:00:95:04:d0:49:f4:ef:df:ba:c9:11:9b:e7: ea:e5:c5:03:4d:b2:50:0a:ba:67:02:4a:1c:de:c1: be:96:76:ea:89:42:95:88:5e:7f:24:19:10:2a:69: 08:42:84:a3:b9:e2:9a:af:12:7b:89:21:95:61:57: c1:b1:7e:26:41:ed:49:c7:b4:ad:e9:13:72:4e:a1: af:59:66:8e:4d:5b:62:3a:1c:cb:0d:bd:1e:0e:e1: 79:62:91:3a:bf:c9:a2:53:c4:13:2f:81:13:9a:dd: 1d:61:11:1c:85:e6:37:22:be:10:e7:e1:42:d6:53: 87:c6:4b:9e:9c:2b:5d:37:8a:04:d5:eb:49:98:e7: c7:37:40:15:92:c8:bb:6c:8f:6e:b0:ea:29:ba:2e: d2:29:38:f1:8e:b3:41:73:6b:6f:f2:f9:cc:9e:11: 74:89:36:35:03:bb:0d:41:ce:c1:f8:9d:0a:c4:ee: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:93:F6:BD:EE:1C:3E:2D:B8:79:5E:CB:5A:44:27:7E:EC:09:88:D5 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:da:7f:6f:39:1d:f5:d5:91:3e:52:47:4a:66:47:10:99:47: 1a:8c:7c:49:65:15:f2:2a:62:c1:84:59:72:62:69:43:2b:b1: 67:4c:43:97:13:09:19:f8:60:2c:18:5a:44:a0:c9:31:b5:c4: f2:85:9c:e4:31:61:8f:bf:fd:86:8f:ee:d4:ad:3f:47:31:ef: cc:65:5e:1d:e0:1b:86:4c:0a:6c:e2:0a:cc:57:92:8a:f3:9a: 58:c0:5f:d0:71:86:9a:70:fe:a8:58:dd:8a:24:fc:fa:39:ef: 03:0a:6a:2b:46:c0:00:79:21:cb:16:e6:a8:14:ba:4c:c6:b5: ba:b0:39:a9:11:6c:cd:a2:d3:a7:7a:fe:f7:af:08:22:0c:46: ee:83:7a:f7:61:9b:b7:50:79:9d:dc:9e:e6:29:b3:5b:4b:70: bc:3a:f8:37:24:7b:ba:ae:15:6b:29:52:18:82:eb:e9:51:5b: c1:01:3f:4c:1a:32:7c:a0:7b:a3:f0:72:57:1a:88:70:a0:f5: cd:a8:f2:19:48:84:cc:49:85:cd:24:41:3d:72:66:aa:77:11: b5:b2:e2:9c:3d:96:65:37:72:c0:d5:91:91:b5:3f:3f:48:d4: 6e:e2:a5:42:0f:09:60:ea:fa:28:6c:8a:0c:bf:35:b1:e5:4d: 5d:dd:09:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUxMjIyMTU1MDI5WhcNMjUxMjI5MTU1MDI5WjAYMRYwFAYD VQQDDA02OTQ5NjhjNi0wNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ikd0Z159LvSECqvvTWgU6e2sx+29mbSAON5ng5NNuHyHH/TTrQlNwnneE9l AMRHwsm5kd5+G5FXGi/Yfig441CUzmNmuha0xR+4RQCVBNBJ9O/fuskRm+fq5cUD TbJQCrpnAkoc3sG+lnbqiUKViF5/JBkQKmkIQoSjueKarxJ7iSGVYVfBsX4mQe1J x7St6RNyTqGvWWaOTVtiOhzLDb0eDuF5YpE6v8miU8QTL4ETmt0dYREcheY3Ir4Q 5+FC1lOHxkuenCtdN4oE1etJmOfHN0AVksi7bI9usOopui7SKTjxjrNBc2tv8vnM nhF0iTY1A7sNQc7B+J0KxO4LUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOT9r3u HD4tuHley1pEJ37sCYjVMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb2n9vOR311ZE+UkdKZkcQmUcajHxJZRXyKmLBhFlyYmlDK7FnTEOX EwkZ+GAsGFpEoMkxtcTyhZzkMWGPv/2Gj+7UrT9HMe/MZV4d4BuGTAps4grMV5KK 85pYwF/QcYaacP6oWN2KJPz6Oe8DCmorRsAAeSHLFuaoFLpMxrW6sDmpEWzNotOn ev73rwgiDEbug3r3YZu3UHmd3J7mKbNbS3C8Ovg3JHu6rhVrKVIYguvpUVvBAT9M GjJ8oHuj8HJXGohwoPXNqPIZSITMSYXNJEE9cmaqdxG1suKcPZZlN3LA1ZGRtT8/ SNRu4qVCDwlg6voobIoMvzWx5U1d3QmM -----END CERTIFICATE-----Generated at Tue Dec 23 03:49:55 2025 by rpki-client