This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft File: 3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json) Hash identifier: wTFO1wnlke3Dhh2n7InC4iGkEwP3LN14VsyXeuTSLMM= Subject key identifier: F2:F4:1D:0F:B1:7B:ED:D2:93:F4:62:5D:B0:31:86:7D:EA:F3:A0:99 Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE Certificate issuer: /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft Manifest number: 1F Signing time: Tue 23 Dec 2025 06:36:28 +0000 Manifest this update: Tue 23 Dec 2025 06:36:27 +0000 Manifest next update: Tue 30 Dec 2025 06:36:27 +0000 Files and hashes: 1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: CP2UZEi59+XRVRCSe9Hc37pEGzzpduwSS2szvpfUQPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE Validity Not Before: Dec 23 06:36:27 2025 GMT Not After : Dec 30 06:36:27 2025 GMT Subject: CN=694a386c-0138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:ad:4a:9b:1e:5c:20:63:58:30:84:5c:47: 8e:77:f7:45:d8:e2:13:15:a3:17:42:67:1f:d2:28: ea:c5:19:b7:7c:05:c2:e7:9e:9d:1d:a7:e3:a0:42: c3:5a:c5:4d:0c:ab:e1:9c:96:f4:99:b5:e8:f2:86: 17:93:3a:e5:ce:6a:a6:c5:12:e0:15:4a:50:5d:a9: 21:10:cf:f4:48:f5:bd:5e:fc:9e:a2:83:b3:98:e4: 0a:70:74:78:ca:b8:4b:99:4a:ba:a3:12:4b:89:b0: 6f:49:59:55:55:03:70:f1:4a:af:a9:f4:97:4a:22: f0:d6:09:2c:0f:f2:47:1b:8a:16:00:c4:c4:69:09: cc:8d:3e:cc:e8:01:60:bd:f3:b9:16:eb:96:0c:1c: c0:cb:2b:76:9f:ca:32:aa:f0:dc:6f:67:c8:2d:9c: 0a:cd:11:a8:b5:71:ef:d9:e4:74:ca:81:76:01:17: c7:bd:1a:6c:9c:3c:66:83:b8:cd:2d:cf:c5:3d:46: b9:63:38:ad:74:c6:ba:a3:85:cc:c2:83:b1:6d:12: ab:a4:c0:89:1a:80:1d:b4:dc:ce:af:aa:4c:45:eb: cd:09:f1:d7:15:e6:e9:f2:cf:5c:c2:a5:49:d6:54: 74:44:1f:e4:c1:40:2a:f8:02:c2:b3:9b:b5:27:29: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:1D:0F:B1:7B:ED:D2:93:F4:62:5D:B0:31:86:7D:EA:F3:A0:99 X509v3 Authority Key Identifier: keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:38:16:80:a2:2e:e6:12:05:1c:f3:de:43:6a:a6:23:d6:12: 3d:b8:0d:07:4e:8e:9a:ad:f9:2b:1f:89:91:1e:26:f9:fe:e9: 94:e4:a1:6b:70:b0:0e:55:39:3f:7a:03:75:96:f0:64:23:30: c5:29:b7:d5:56:05:19:29:75:92:24:85:8b:27:b8:06:c2:5c: 4a:cf:61:d8:58:49:16:6c:59:29:60:86:ab:d1:fa:b7:d7:48: 1a:80:f8:26:00:74:dd:d2:e7:90:7b:2f:84:ce:c7:51:37:84: 0c:dd:b6:1c:56:c4:b6:09:90:27:e1:60:97:36:bb:06:85:dc: e6:4a:6f:73:89:d5:43:e2:a5:5a:e9:10:e8:08:f1:35:7e:16: 14:cf:16:ee:9a:dc:c5:82:1c:d0:ea:d0:e5:66:53:c9:09:09: 76:cf:c4:e7:07:ac:84:47:f8:bd:8a:b5:51:80:a3:c4:3a:b6: 0b:d9:a9:a0:18:27:f6:2a:8a:90:52:38:61:15:78:ea:93:96: 62:ec:ee:83:c9:f5:88:a9:5d:10:f4:00:24:2e:83:af:62:dd: 50:e6:e7:b5:8f:29:e1:3f:1f:d7:4b:bd:da:e5:78:1d:77:8f: 06:0f:20:be:0b:29:a6:84:7b:05:61:bd:57:4a:80:a7:5e:73: d7:1b:b4:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MUQyQTExMC8GA1UEBRMoREVCMDMzQjAxMjJDMjVGNkIwMEFGMUMyMTY0MjkzMzJF MEQyMDFFRTAeFw0yNTEyMjMwNjM2MjdaFw0yNTEyMzAwNjM2MjdaMBgxFjAUBgNV BAMMDTY5NGEzODZjLTAxMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU7K1Kmx5cIGNYMIRcR45390XY4hMVoxdCZx/SKOrFGbd8BcLnnp0dp+OgQsNa xU0Mq+GclvSZtejyhheTOuXOaqbFEuAVSlBdqSEQz/RI9b1e/J6ig7OY5ApwdHjK uEuZSrqjEkuJsG9JWVVVA3DxSq+p9JdKIvDWCSwP8kcbihYAxMRpCcyNPszoAWC9 87kW65YMHMDLK3afyjKq8NxvZ8gtnArNEai1ce/Z5HTKgXYBF8e9GmycPGaDuM0t z8U9RrljOK10xrqjhczCg7FtEqukwIkagB203M6vqkxF680J8dcV5unyz1zCpUnW VHREH+TBQCr4AsKzm7UnKdAdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8vQdD7F7 7dKT9GJdsDGGferzoJkwHwYDVR0jBBgwFoAU3rAzsBIsJfawCvHCFkKTMuDSAe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxRDJBLzI1QTRBNkI2QjMx RjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZhd0N2SENGa0tUTXVEU0Fl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3JBenNCSXNKZmF3Q3ZIQ0ZrS1RNdURTQWU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx RDJBLzI1QTRBNkI2QjMxRjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZh d0N2SENGa0tUTXVEU0FlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKc4FoCiLuYSBRzz3kNqpiPWEj24DQdOjpqt+SsfiZEeJvn+6ZTkoWtw sA5VOT96A3WW8GQjMMUpt9VWBRkpdZIkhYsnuAbCXErPYdhYSRZsWSlghqvR+rfX SBqA+CYAdN3S55B7L4TOx1E3hAzdthxWxLYJkCfhYJc2uwaF3OZKb3OJ1UPipVrp EOgI8TV+FhTPFu6a3MWCHNDq0OVmU8kJCXbPxOcHrIRH+L2KtVGAo8Q6tgvZqaAY J/YqipBSOGEVeOqTlmLs7oPJ9YipXRD0ACQug69i3VDm57WPKeE/H9dLvdrleB13 jwYPIL4LKaaEewVhvVdKgKdec9cbtA8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:40 2025 by rpki-client