This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: +Q0S5ECq2/U/MNcq+rslDCBOw16marzJRLVQUx65Cjs= Subject key identifier: 43:CF:C6:2B:BF:0D:28:A6:48:7B:11:5F:54:25:DC:44:BA:65:F1:AB Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0CA7 Signing time: Thu 18 Dec 2025 18:08:23 +0000 Manifest this update: Thu 18 Dec 2025 18:08:23 +0000 Manifest next update: Thu 25 Dec 2025 18:08:23 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: aQxLOaURi8EY1BTo9J2ueQpI/ylE8q87OLHRo8neCkg=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Dec 18 18:08:23 2025 GMT Not After : Dec 25 18:08:23 2025 GMT Subject: CN=69444317-0cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:45:47:5d:83:0f:d8:13:26:44:85:7d:7f: cd:9e:2d:e6:29:68:2f:1d:b4:a2:ef:86:ea:7f:a0: c7:ae:b1:09:8a:67:43:ef:e3:92:cd:21:b5:69:96: fe:37:fe:0a:ea:c7:70:8b:70:45:fb:3f:1c:91:96: 9e:8d:3e:a7:45:e1:cb:68:ec:48:07:75:00:f3:cb: e8:7b:e0:f0:91:eb:02:40:96:a8:cd:f7:c2:bf:5c: 6a:de:e8:f6:48:27:4a:c4:e9:0a:8d:a8:71:76:6b: 3d:8c:21:b1:09:44:d1:c2:a6:d6:10:ba:ab:d1:a2: a0:bc:32:5b:90:6f:46:34:d5:c2:19:81:47:46:ef: 2d:dc:0e:d6:fd:cb:df:72:b3:64:44:0b:3e:87:c4: ee:75:24:bf:33:80:f2:b2:21:34:79:43:c4:50:81: 76:83:b5:9c:1b:3e:f4:82:f0:15:4c:fd:b5:a1:23: 72:a5:ee:48:26:8c:d8:e2:c6:86:78:d3:36:85:f2: c6:9a:72:b2:34:00:ef:b6:5b:b4:d5:a8:d2:d4:21: d1:a5:bc:2c:73:59:17:d9:21:92:c9:98:6a:2d:f1: 05:c7:9f:94:a1:a9:56:96:b3:e6:6f:94:5d:4f:2c: 6a:26:77:f8:f3:4c:83:ce:78:c4:56:95:c3:ba:e9: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:C6:2B:BF:0D:28:A6:48:7B:11:5F:54:25:DC:44:BA:65:F1:AB X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ae:f0:e1:48:85:62:25:30:e7:73:7b:20:cc:51:37:b0:e1: 34:86:ed:76:a2:4f:7a:bd:fd:13:35:bd:4a:fe:bb:99:dc:eb: 4e:87:e3:0d:04:f3:6f:12:b0:30:4c:66:4f:45:25:47:02:49: c1:c8:30:52:7e:22:c0:6e:ba:66:0d:60:03:3a:ad:2b:72:20: 9a:a2:5f:20:ba:c8:31:44:0d:d0:af:dc:00:05:cd:71:66:2d: 58:4c:c0:63:0d:b7:d9:59:98:c1:f3:95:f6:26:33:3c:6c:56: ab:03:9e:cf:30:f8:73:99:b5:f2:40:d0:0d:42:be:12:c9:7c: df:6d:d5:57:24:5e:8b:9c:a2:f1:c4:bd:3f:e5:9a:c5:b7:db: c0:c8:52:66:65:49:82:28:89:6a:6c:c8:cd:d4:97:b9:7e:96: 80:b5:ec:09:f3:4e:80:c9:2e:e0:85:c4:49:68:6e:b0:30:8e: ae:98:4a:04:0d:7d:5f:25:47:57:0d:fc:02:23:8c:11:43:e6: b2:c5:57:96:c5:84:e1:fe:0c:ec:a3:b9:b2:de:33:7b:98:98: 00:b8:9a:8d:80:c4:2c:5f:60:1b:f4:cb:be:d6:c4:65:a2:39: bf:7c:bf:8e:76:d2:46:ca:94:05:72:84:4b:70:52:0f:f9:75: da:d1:38:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUxMjE4MTgwODIzWhcNMjUxMjI1MTgwODIzWjAYMRYwFAYD VQQDDA02OTQ0NDMxNy0wY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKNFR12DD9gTJkSFfX/Nni3mKWgvHbSi74bqf6DHrrEJimdD7+OSzSG1aZb+ N/4K6sdwi3BF+z8ckZaejT6nReHLaOxIB3UA88voe+DwkesCQJaozffCv1xq3uj2 SCdKxOkKjahxdms9jCGxCUTRwqbWELqr0aKgvDJbkG9GNNXCGYFHRu8t3A7W/cvf crNkRAs+h8TudSS/M4DysiE0eUPEUIF2g7WcGz70gvAVTP21oSNype5IJozY4saG eNM2hfLGmnKyNADvtlu01ajS1CHRpbwsc1kX2SGSyZhqLfEFx5+UoalWlrPmb5Rd TyxqJnf480yDznjEVpXDuun5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPPxiu/ DSimSHsRX1Ql3ES6ZfGrMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgrvDhSIViJTDnc3sgzFE3sOE0hu12ok96vf0TNb1K/ruZ3OtOh+MN BPNvErAwTGZPRSVHAknByDBSfiLAbrpmDWADOq0rciCaol8gusgxRA3Qr9wABc1x Zi1YTMBjDbfZWZjB85X2JjM8bFarA57PMPhzmbXyQNANQr4SyXzfbdVXJF6LnKLx xL0/5ZrFt9vAyFJmZUmCKIlqbMjN1Je5fpaAtewJ806AyS7ghcRJaG6wMI6umEoE DX1fJUdXDfwCI4wRQ+ayxVeWxYTh/gzso7my3jN7mJgAuJqNgMQsX2Ab9Mu+1sRl ojm/fL+OdtJGypQFcoRLcFIP+XXa0TiS -----END CERTIFICATE-----Generated at Fri Dec 19 08:54:10 2025 by rpki-client