This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: W0D5yq82X/Pq0uk/IRxsfFEkSIqe1g3RXCzhU3D3e9A= Subject key identifier: 14:FE:7C:93:00:83:1A:C3:CA:9A:90:D3:26:38:F6:D0:A2:3A:1E:31 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 0176 Signing time: Tue 23 Dec 2025 02:49:38 +0000 Manifest this update: Tue 23 Dec 2025 02:49:37 +0000 Manifest next update: Tue 30 Dec 2025 02:49:37 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: FDHLOkjGq/pxqqoyf3sJ+tkX8oFDYCt4WbDBSuEer34=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: f4bAe1+5wb0cwDVNLjPL2QNz/OBAZDY7LyZRiQiFweU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Dec 23 02:49:37 2025 GMT Not After : Dec 30 02:49:37 2025 GMT Subject: CN=694a0342-2987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:3a:9c:74:0f:2c:f2:a1:bb:1a:b4:e8:09: e0:b5:54:e0:42:d2:fd:7f:47:a4:3b:cc:d2:e7:89: 6b:5e:7d:1c:77:5b:5f:3c:db:66:a7:09:86:c0:fc: e2:08:94:72:65:18:89:93:0e:01:53:d1:ab:06:aa: 7b:34:c1:8b:4c:71:f6:b4:69:77:ac:4a:a6:30:70: 5f:9b:f8:73:dc:09:00:3e:4d:63:b7:74:04:d9:9d: 27:14:c7:82:24:79:a7:fd:0f:78:08:b2:f3:d8:cc: 60:3e:bc:de:61:ed:74:d6:d9:d1:6b:a9:de:34:57: 00:d3:06:b3:60:21:fb:6c:ed:33:0d:18:c8:07:c7: 99:41:4f:18:44:da:11:19:c7:51:ea:ea:f4:7e:48: 0a:ef:c6:67:7e:2e:66:bf:5e:fb:19:d2:40:1b:30: b8:2c:ba:33:7e:20:50:a4:40:f2:82:1e:ee:23:e8: 44:98:3e:f2:fd:74:cd:c6:14:fe:4a:24:9e:35:7d: 15:70:f4:7f:9c:7f:13:04:39:ce:b4:d6:fa:6d:ef: 0f:c0:ff:07:c7:f0:a0:82:d4:85:88:a1:0e:92:22: bb:e6:21:2d:73:5f:ea:de:9f:9f:9e:32:f5:55:34: 59:a9:89:3b:e5:63:36:2a:51:f9:f8:f6:ca:7a:94: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FE:7C:93:00:83:1A:C3:CA:9A:90:D3:26:38:F6:D0:A2:3A:1E:31 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:5d:6d:95:63:1b:33:55:d5:0c:e3:3f:9b:13:3f:fc:df:d7: 0f:ba:87:34:27:51:a0:78:50:b9:0b:86:e5:e2:b4:9f:6d:21: d7:4d:74:ae:eb:d0:c9:e3:2e:28:9a:59:e3:fa:fa:72:a3:73: 27:01:dd:96:a2:9b:12:35:f2:06:52:47:8a:1a:eb:c4:ed:16: 8c:6a:37:5f:5b:bc:bc:a0:9a:a5:d6:86:e1:11:8f:8c:bb:fb: c9:61:46:88:af:8f:47:12:04:1f:69:ff:17:c2:2d:f9:44:06: 51:6b:dc:a0:c2:73:ad:ef:6e:7d:5e:a1:86:b4:b5:cd:28:8d: 79:9d:f4:5a:7b:a8:f1:13:34:69:5c:84:b7:64:74:17:8f:94: d0:88:ec:a3:9d:d4:25:4d:9c:b4:75:94:1f:46:80:35:dd:1e: 38:d0:18:8a:a2:06:c8:0d:1e:14:b5:ba:d9:39:a0:75:e6:a2: e6:4b:14:b8:e0:b5:62:fb:d8:9b:96:0e:d1:50:9c:f5:e9:af: 96:0c:0e:74:3a:10:c0:7f:da:91:a3:7e:f6:c4:ec:e4:08:df: 35:b8:85:c3:b5:31:c0:4f:e6:01:e8:c6:db:3b:df:37:0e:63: f4:db:21:7c:00:d8:3a:e8:29:bd:cd:ce:aa:eb:48:aa:36:b2: 06:29:2c:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUxMjIzMDI0OTM3WhcNMjUxMjMwMDI0OTM3WjAYMRYwFAYD VQQDDA02OTRhMDM0Mi0yOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv446nHQPLPKhuxq06AngtVTgQtL9f0ekO8zS54lrXn0cd1tfPNtmpwmGwPzi CJRyZRiJkw4BU9GrBqp7NMGLTHH2tGl3rEqmMHBfm/hz3AkAPk1jt3QE2Z0nFMeC JHmn/Q94CLLz2MxgPrzeYe101tnRa6neNFcA0wazYCH7bO0zDRjIB8eZQU8YRNoR GcdR6ur0fkgK78Znfi5mv177GdJAGzC4LLozfiBQpEDygh7uI+hEmD7y/XTNxhT+ SiSeNX0VcPR/nH8TBDnOtNb6be8PwP8Hx/CggtSFiKEOkiK75iEtc1/q3p+fnjL1 VTRZqYk75WM2KlH5+PbKepT6kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT+fJMA gxrDypqQ0yY49tCiOh4xMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3XW2VYxszVdUM4z+bEz/839cPuoc0J1GgeFC5C4bl4rSfbSHXTXSu 69DJ4y4omlnj+vpyo3MnAd2WopsSNfIGUkeKGuvE7RaMajdfW7y8oJql1obhEY+M u/vJYUaIr49HEgQfaf8Xwi35RAZRa9ygwnOt7259XqGGtLXNKI15nfRae6jxEzRp XIS3ZHQXj5TQiOyjndQlTZy0dZQfRoA13R440BiKogbIDR4UtbrZOaB15qLmSxS4 4LVi+9iblg7RUJz16a+WDA50OhDAf9qRo372xOzkCN81uIXDtTHAT+YB6MbbO983 DmP02yF8ANg66Cm9zc6q60iqNrIGKSy2 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:22 2025 by rpki-client