This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json) Hash identifier: Q7i0BLqJznJCpNiFVDcfNEn/zVSUtiQbuSu/SLehOhY= Subject key identifier: 0B:01:F7:13:82:B6:C4:E2:4F:D4:E0:7A:6D:3D:76:D1:13:3A:F7:6A Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft Manifest number: 0A58 Signing time: Mon 22 Dec 2025 19:05:53 +0000 Manifest this update: Mon 22 Dec 2025 19:05:52 +0000 Manifest next update: Mon 29 Dec 2025 19:05:52 +0000 Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: jYTFd/HbTHre3YfFKOHnzsZHIY57s0iw5yItDvs1HAc=) 2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: zi/2a7j2lYedIWZB1ZQVEfFe/URKlsQ3C6l5x+UUMmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918143E, serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Validity Not Before: Dec 22 19:05:52 2025 GMT Not After : Dec 29 19:05:52 2025 GMT Subject: CN=69499690-d0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:77:67:a5:45:ec:00:60:af:9d:42:66:27: 9c:46:6b:76:3a:19:ac:da:e9:8c:ea:34:68:cc:da: 85:e1:e0:08:23:1c:ff:b2:4d:48:36:c7:03:4c:ec: da:50:64:f7:c8:ed:cb:aa:0c:c7:b3:7a:b3:07:d6: 21:db:b2:23:a2:12:86:2a:1e:fd:a4:15:29:17:65: 17:e7:a8:4c:66:7e:c5:e1:64:bb:c0:cf:43:34:2a: a6:ad:90:11:9b:e5:6c:10:dd:7b:88:63:1f:e2:b8: 13:0e:75:78:40:1d:f8:94:1c:00:81:12:a1:76:c5: d1:02:ea:80:06:8a:c5:2b:5b:e9:46:0d:cb:9e:1d: 90:ea:52:0c:10:38:7c:8e:81:74:22:26:9c:76:57: ef:b8:f6:2d:36:2b:91:96:ab:1e:c0:ab:a1:40:98: 12:7e:73:d1:c0:3f:e1:75:59:9c:f6:44:2d:f0:09: 05:80:bc:9d:5d:45:41:9c:92:55:40:d9:bc:d0:e3: b4:24:39:c6:f1:b8:71:9e:e3:4f:57:d1:05:cc:dd: 51:18:2d:1d:cf:42:5c:96:68:11:d9:4d:b5:ce:55: 91:30:01:1c:a4:84:5f:b4:4d:a9:e3:1a:37:41:dc: 9c:6b:96:e5:0e:e4:08:f1:42:da:94:c8:80:f0:40: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:F7:13:82:B6:C4:E2:4F:D4:E0:7A:6D:3D:76:D1:13:3A:F7:6A X509v3 Authority Key Identifier: keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b0:62:cf:63:d6:38:ad:0d:90:07:74:a2:c9:f4:8a:2b:f3: 27:21:4b:c5:fa:10:4f:1b:4e:ec:57:25:3a:58:da:09:51:a7: ff:c0:f6:5f:4b:e2:59:f7:41:fb:8f:df:13:15:c1:0a:d4:a9: 26:1e:20:e9:cb:44:54:a8:04:f1:c7:5e:28:77:e6:e1:d6:b0: 7c:64:11:b1:e0:bb:19:66:3c:5d:4a:52:22:72:30:0c:f3:99: 14:e9:5b:37:d1:6d:c5:d1:16:1a:d9:fd:09:f2:03:19:cf:6f: a4:6c:e4:be:13:c9:93:4a:5b:96:f3:ad:48:ae:5e:41:68:e8: 3d:80:33:c4:33:7f:ad:de:d1:9f:7e:f0:84:8d:1b:25:e6:0b: 95:6d:11:d4:1d:4b:16:fd:d4:1f:00:0b:d9:97:a2:3b:90:21: 6c:09:fc:2f:bd:69:04:59:d7:c5:82:32:1f:f7:5a:9b:ff:e3: 59:b7:4c:19:19:8d:c7:56:2a:5b:eb:02:4b:a3:1b:32:43:c9: 65:43:a4:db:50:c6:32:1a:1f:80:38:08:10:7b:5e:03:59:2a: 1f:17:64:4a:7c:76:9c:a8:83:e7:2c:a6:f6:22:12:a3:e3:b7: 17:90:c5:fb:48:1c:79:9a:8b:47:66:28:59:8a:ab:3e:69:62: 0f:1f:20:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIwMDc2QjdCNTVG REZBMDQ3NDAwHhcNMjUxMjIyMTkwNTUyWhcNMjUxMjI5MTkwNTUyWjAYMRYwFAYD VQQDDA02OTQ5OTY5MC1kMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hN3Z6VF7ABgr51CZiecRmt2Ohms2umM6jRozNqF4eAIIxz/sk1INscDTOza UGT3yO3LqgzHs3qzB9Yh27IjohKGKh79pBUpF2UX56hMZn7F4WS7wM9DNCqmrZAR m+VsEN17iGMf4rgTDnV4QB34lBwAgRKhdsXRAuqABorFK1vpRg3Lnh2Q6lIMEDh8 joF0IiacdlfvuPYtNiuRlqsewKuhQJgSfnPRwD/hdVmc9kQt8AkFgLydXUVBnJJV QNm80OO0JDnG8bhxnuNPV9EFzN1RGC0dz0JclmgR2U21zlWRMAEcpIRftE2p4xo3 Qdyca5blDuQI8ULalMiA8ECXFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsB9xOC tsTiT9Tgem09dtETOvdqMB8GA1UdIwQYMBaAFPq94H0sVY29zzwyAHa3tV/foEdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzRS9BM0MwN0I4Njc5 ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4VmpiM1BQRElBZHJlMVg5LWdS MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yM2dmU3hWamIzUFBESUFkcmUxWDktZ1IwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4Vmpi M1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKsGLPY9Y4rQ2QB3SiyfSKK/MnIUvF+hBPG07sVyU6WNoJUaf/wPZf S+JZ90H7j98TFcEK1KkmHiDpy0RUqATxx14od+bh1rB8ZBGx4LsZZjxdSlIicjAM 85kU6Vs30W3F0RYa2f0J8gMZz2+kbOS+E8mTSluW861Irl5BaOg9gDPEM3+t3tGf fvCEjRsl5guVbRHUHUsW/dQfAAvZl6I7kCFsCfwvvWkEWdfFgjIf91qb/+NZt0wZ GY3HVipb6wJLoxsyQ8llQ6TbUMYyGh+AOAgQe14DWSofF2RKfHacqIPnLKb2IhKj 47cXkMX7SBx5motHZihZiqs+aWIPHyB/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:06 2025 by rpki-client