This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: aVwVWOYDNgwzWSNl0G5P8VhXpTUrkVklHC5ZbalqQl8= Subject key identifier: A6:C4:CE:A9:0B:77:19:2A:08:7A:17:FE:DD:CA:A6:84:18:7D:38:8E Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 5E Signing time: Tue 23 Dec 2025 06:08:16 +0000 Manifest this update: Tue 23 Dec 2025 06:08:15 +0000 Manifest next update: Tue 30 Dec 2025 06:08:15 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: exYVNH+RHk7S8BaMQjGFoHVLZ85BFEllaLcc/deH8tQ=) 2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Dec 23 06:08:15 2025 GMT Not After : Dec 30 06:08:15 2025 GMT Subject: CN=694a31cf-c70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:6a:a0:a3:c3:77:3e:47:ec:64:38:3e:89: cf:61:97:03:d8:c6:77:e1:bf:ff:cd:0c:4a:2f:f8: 58:66:39:72:4f:ed:12:65:05:00:2d:f2:fd:fb:03: 6e:f3:94:5e:12:ad:9e:f7:2b:e9:c1:f9:fc:c3:ee: c7:d5:b2:a8:b2:98:44:21:15:ca:b8:67:19:b5:b5: 94:2a:ee:88:56:c9:b9:81:ee:5a:a6:b1:65:b2:95: e9:99:52:90:0a:6e:aa:1c:2f:ac:bd:b1:cc:b4:8e: a5:68:e3:a4:58:1f:e7:fa:e3:5d:3b:f8:36:39:b3: 44:47:f0:9c:67:d5:c3:66:81:5c:c4:3d:b3:ce:f9: f8:dd:2f:e1:e0:b2:e0:8b:4f:aa:db:42:52:23:b3: d2:af:bf:90:d4:db:76:dc:40:18:bc:fe:e7:b7:bd: a0:f9:fd:eb:6e:50:b1:04:df:03:b9:8b:e5:6d:d3: 4e:17:c3:25:3e:9b:59:ec:93:9e:21:a8:49:34:2c: 58:bb:a5:05:f9:2a:da:e3:b5:90:f6:08:c8:93:9a: 49:46:9d:73:23:36:e5:aa:10:e8:9b:95:2e:98:ac: 5c:4f:89:fd:13:07:9c:82:7a:9f:72:a8:e3:4b:75: 2a:08:cb:9f:45:bb:12:14:d0:d6:4d:98:cb:96:10: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:CE:A9:0B:77:19:2A:08:7A:17:FE:DD:CA:A6:84:18:7D:38:8E X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6e:91:86:2c:f7:f1:af:ca:ce:e8:54:ee:e5:11:9f:f9:5d: 49:90:21:a2:5f:62:3d:37:a8:dc:cb:4d:59:36:0a:79:42:dd: fd:37:ae:2c:a8:16:37:e5:74:fb:bd:87:bc:a4:60:f0:2f:37: ca:72:05:00:da:98:d6:94:fc:41:c6:5c:35:3d:1a:10:f1:85: 8b:f7:5d:c6:16:19:3c:5a:0b:35:84:09:09:e1:c9:7e:9d:e0: 2b:4f:b0:a8:42:07:7e:d0:e0:83:dc:48:eb:ab:76:40:ae:fb: b4:9a:e6:d4:8e:44:00:a3:55:e9:73:83:e5:e2:c4:78:ae:ef: 0a:80:93:ef:52:c5:63:bb:bf:18:08:75:50:8a:16:8c:fa:64: 05:28:0c:81:7a:6d:d7:b4:8d:8b:05:8b:1f:69:a4:16:89:a3: 7b:92:10:9b:db:81:0a:9e:67:71:5f:3a:e0:6f:33:13:27:a6: e0:a6:4d:87:44:47:bf:2b:25:5f:4c:6b:d7:2b:6c:ba:24:14: 86:f7:d8:70:f1:32:3f:ac:b5:a0:36:bf:91:48:28:71:e8:cc: 7b:88:84:bd:bc:df:a4:58:ee:61:cf:e0:89:3e:7b:44:8e:9f: 48:fe:09:fc:f3:3a:eb:be:ab:28:d8:4f:70:e6:f3:88:df:22: 94:32:f6:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTEyMjMwNjA4MTVaFw0yNTEyMzAwNjA4MTVaMBgxFjAUBgNV BAMMDTY5NGEzMWNmLWM3MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxZ2qgo8N3PkfsZDg+ic9hlwPYxnfhv//NDEov+FhmOXJP7RJlBQAt8v37A27z lF4SrZ73K+nB+fzD7sfVsqiymEQhFcq4Zxm1tZQq7ohWybmB7lqmsWWylemZUpAK bqocL6y9scy0jqVo46RYH+f64107+DY5s0RH8Jxn1cNmgVzEPbPO+fjdL+HgsuCL T6rbQlIjs9Kvv5DU23bcQBi8/ue3vaD5/etuULEE3wO5i+Vt004XwyU+m1nsk54h qEk0LFi7pQX5KtrjtZD2CMiTmklGnXMjNuWqEOiblS6YrFxPif0TB5yCep9yqONL dSoIy59FuxIU0NZNmMuWENBLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpsTOqQt3 GSoIehf+3cqmhBh9OI4wHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGxukYYs9/Gvys7oVO7lEZ/5XUmQIaJfYj03qNzLTVk2CnlC3f03riyo FjfldPu9h7ykYPAvN8pyBQDamNaU/EHGXDU9GhDxhYv3XcYWGTxaCzWECQnhyX6d 4CtPsKhCB37Q4IPcSOurdkCu+7Sa5tSORACjVelzg+XixHiu7wqAk+9SxWO7vxgI dVCKFoz6ZAUoDIF6bde0jYsFix9ppBaJo3uSEJvbgQqeZ3FfOuBvMxMnpuCmTYdE R78rJV9Ma9crbLokFIb32HDxMj+staA2v5FIKHHozHuIhL2836RY7mHP4Ik+e0SO n0j+CfzzOuu+qyjYT3Dm84jfIpQy9oY= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:02 2025 by rpki-client