This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: Pb/2iJxmWBM2pMwTcBBelgTpgdp7G7Kr73zg1Ti2BH8= Subject key identifier: 30:B6:F9:D7:B5:2E:5A:26:CA:B9:E5:C4:B1:FD:F2:2A:5B:E3:39:C1 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A78 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A78 Signing time: Sat 06 Dec 2025 15:21:51 +0000 Manifest this update: Sat 06 Dec 2025 15:21:50 +0000 Manifest next update: Sat 13 Dec 2025 15:21:50 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: 5gNuyemU1eymrPozjjVoO25ZaM3wAtD8as/xHvX1PT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10872 (0x2a78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Dec 6 15:21:50 2025 GMT Not After : Dec 13 15:21:50 2025 GMT Subject: CN=69344a0e-f8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:6d:a5:e9:34:d0:83:21:64:c7:8c:83:ab: 11:3e:fe:29:cf:2d:9a:8c:44:47:89:91:01:18:88: ab:f2:07:64:4f:d3:c1:26:16:4e:d9:ed:1e:4d:dd: a1:73:64:d4:c2:80:36:72:f2:74:bf:57:d9:0d:f2: 3b:e0:b7:1f:2f:a6:e8:87:d9:c3:c5:6a:b6:34:2d: 72:ff:98:41:cc:a5:09:32:3a:f8:ae:92:4c:e2:9d: 9e:6d:0d:02:7c:a0:e2:e8:47:66:0c:97:11:e6:d8: 74:e1:c1:0c:a4:1d:dd:21:f6:2d:d7:a5:0d:c3:cd: c8:81:db:67:68:cc:e7:9d:ca:b2:87:a3:fa:e0:46: 49:c7:82:b9:dd:63:70:b1:53:6a:a6:9c:13:34:15: 70:27:f2:28:1f:40:94:10:7b:3c:89:3a:0d:e7:1d: dd:8b:ab:f5:09:27:37:e5:9a:bb:56:d5:ee:64:46: 15:b5:1e:77:48:54:dc:e2:08:45:61:b8:aa:53:84: 5f:be:bd:cf:b2:cb:64:f1:f7:2c:1d:61:24:4f:91: 75:df:a1:68:72:44:1c:e5:b8:6d:9a:a9:a4:12:1c: 1c:7d:ae:13:03:ba:28:28:de:0f:ef:bd:a2:4a:f3: 01:19:d9:b2:53:97:1d:10:c3:6c:f9:38:a8:90:7e: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B6:F9:D7:B5:2E:5A:26:CA:B9:E5:C4:B1:FD:F2:2A:5B:E3:39:C1 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:41:3a:72:fd:1b:46:4c:38:42:6c:25:83:6e:ea:b7:0e:49: 58:0a:bc:00:77:bf:27:bb:40:10:91:d6:81:0c:d1:5e:31:11: 22:90:5d:56:34:ed:d6:8b:ae:47:66:ab:f1:49:7a:4b:71:29: e8:5e:f9:f5:1d:72:7a:31:b7:53:b7:a2:67:1c:da:f0:f2:52: c9:27:51:7f:d0:99:77:cd:1a:64:f6:28:b1:a8:20:29:07:4a: 4f:5c:6a:0a:48:c9:64:62:13:1e:60:03:2b:5f:4a:de:b4:e9: 10:68:bc:c8:c1:d2:4e:88:d4:02:81:a4:5d:8d:6f:0a:4d:d2: dd:94:f7:ac:df:d7:65:16:b8:d3:4f:8a:b1:c6:73:f2:7e:63: 5a:7f:5f:89:91:84:3a:81:34:8a:0a:f9:e8:05:ab:57:0e:a1: 38:18:a2:68:55:60:5f:d2:5c:7c:bd:2e:a0:65:f0:67:3d:a7: 4a:e7:a7:ec:11:20:4f:89:b9:ec:01:33:d6:7a:d7:11:be:96: f7:44:7a:63:91:73:b3:9b:75:af:84:e9:f3:57:d5:a6:e5:ea: d6:da:35:4d:cb:66:3e:be:a7:c2:75:5a:5d:23:95:cb:7d:82: 61:56:09:68:f7:7b:be:45:0b:f1:d5:aa:65:31:f7:1d:53:55: f3:78:e0:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUxMjA2MTUyMTUwWhcNMjUxMjEzMTUyMTUwWjAYMRYwFAYD VQQDEw02OTM0NGEwZS1mOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyBtpek00IMhZMeMg6sRPv4pzy2ajERHiZEBGIir8gdkT9PBJhZO2e0eTd2h c2TUwoA2cvJ0v1fZDfI74LcfL6boh9nDxWq2NC1y/5hBzKUJMjr4rpJM4p2ebQ0C fKDi6EdmDJcR5th04cEMpB3dIfYt16UNw83IgdtnaMznncqyh6P64EZJx4K53WNw sVNqppwTNBVwJ/IoH0CUEHs8iToN5x3di6v1CSc35Zq7VtXuZEYVtR53SFTc4ghF YbiqU4Rfvr3Psstk8fcsHWEkT5F136FockQc5bhtmqmkEhwcfa4TA7ooKN4P772i SvMBGdmyU5cdEMNs+TiokH4yKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC2+de1 LlomyrnlxLH98ipb4znBMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9QTpy/RtGTDhCbCWDbuq3DklYCrwAd78nu0AQkdaBDNFeMREikF1W NO3Wi65HZqvxSXpLcSnoXvn1HXJ6MbdTt6JnHNrw8lLJJ1F/0Jl3zRpk9iixqCAp B0pPXGoKSMlkYhMeYAMrX0retOkQaLzIwdJOiNQCgaRdjW8KTdLdlPes39dlFrjT T4qxxnPyfmNaf1+JkYQ6gTSKCvnoBatXDqE4GKJoVWBf0lx8vS6gZfBnPadK56fs ESBPibnsATPWetcRvpb3RHpjkXOzm3WvhOnzV9Wm5erW2jVNy2Y+vqfCdVpdI5XL fYJhVglo93u+RQvx1aplMfcdU1XzeOCE -----END CERTIFICATE-----Generated at Sun Dec 7 03:16:44 2025 by rpki-client