This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: 2KwKMedu1hma9y294e4T/3pXGZ/Wh3hHhAvN4O9kEdM= Subject key identifier: 49:13:C7:0C:E1:EC:8D:E5:AC:D2:32:94:FA:75:4A:96:E2:83:73:23 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0CA8 Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:14 +0000 Manifest next update: Sat 27 Dec 2025 18:01:14 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: iRb11y/nO6J0WG7BhvRXFmbF0NLo4CW2EWQQjWgPNdY=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Dec 20 18:01:14 2025 GMT Not After : Dec 27 18:01:14 2025 GMT Subject: CN=6946e46a-cb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:30:84:a9:69:ad:81:6c:a1:b2:0d:22:33: 43:f2:31:94:fe:cb:66:fc:bf:64:0f:86:36:90:21: c8:b5:a7:c2:2e:8c:0a:36:bb:56:fe:d1:1d:88:b3: a0:0a:cc:91:84:f0:35:ba:41:d9:41:3f:f4:bc:28: 83:de:8f:48:c6:81:9f:74:a2:83:4b:41:da:b4:1d: d2:fd:c8:ab:ee:97:8d:55:5e:7e:c7:63:19:45:8e: a1:68:26:a9:a4:c5:8e:0c:68:76:f3:88:ad:e7:d9: a1:f2:bd:63:d2:3e:93:0d:44:99:ed:99:c1:e6:2f: e4:b6:ad:31:d2:68:a0:6f:e4:7e:4f:25:fb:47:a9: 1b:55:7a:6e:f3:d6:0e:e8:23:be:f9:0d:8f:00:32: b2:17:19:e6:29:fc:19:2a:75:33:6a:d6:ad:f0:de: 80:ca:cf:57:8d:1f:5d:bc:14:33:76:a2:06:8b:48: 26:96:eb:02:02:12:c0:af:17:73:b4:6f:c3:a9:a6: b0:1b:77:38:d1:be:6b:6c:4e:50:df:73:fc:43:dd: 98:08:9b:b9:13:13:ab:71:18:4c:ac:ce:05:db:fc: 21:9d:06:64:ae:6c:4f:5d:8a:d4:3f:ea:cd:19:e5: 4b:ab:f9:df:c1:47:af:67:11:7e:17:69:b9:12:35: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:13:C7:0C:E1:EC:8D:E5:AC:D2:32:94:FA:75:4A:96:E2:83:73:23 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a9:50:11:e9:07:ab:0b:e9:ad:01:39:d2:82:0a:5a:4a:6c: fc:2a:fc:5f:98:3e:74:4c:bb:16:27:8f:8f:d8:90:20:fc:10: 3a:43:c6:3f:34:a3:c4:76:0c:8b:aa:49:94:66:7a:52:cf:63: f2:fb:e3:39:a6:ef:14:40:8f:5f:72:c1:ac:cf:5f:e9:a1:37: cb:6a:3e:19:db:ea:30:8a:9d:dd:66:27:94:7d:f2:59:2c:bc: f3:08:f4:55:c2:23:66:67:58:ff:37:a3:36:9c:47:b2:f9:0a: f8:51:50:44:38:7b:17:24:3f:9c:aa:5a:e3:fa:3f:b6:db:36: ec:01:fa:ab:ca:4e:bf:df:23:c7:83:f8:d0:95:bf:11:3c:fd: 60:91:86:9d:0e:78:f1:5f:56:d1:c8:c4:3b:4a:ed:c5:26:d2: 6b:e1:82:19:1c:ba:7a:9b:c2:b6:18:db:53:98:14:8b:5d:fc: 43:ad:e0:b2:fb:1e:fb:65:3b:f1:0a:89:d0:ff:91:8b:19:e9: 35:5a:35:a1:44:8e:b4:3a:96:31:05:e0:6a:bb:db:c7:5d:d0: 22:d3:3b:39:0b:23:d9:41:12:f4:68:a7:4e:a5:08:2b:9a:fa: 13:46:56:50:24:34:0d:2b:fd:ed:5e:b3:96:c2:f6:67:98:9b: 12:94:c0:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUxMjIwMTgwMTE0WhcNMjUxMjI3MTgwMTE0WjAYMRYwFAYD VQQDDA02OTQ2ZTQ2YS1jYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSIwhKlprYFsobINIjND8jGU/stm/L9kD4Y2kCHItafCLowKNrtW/tEdiLOg CsyRhPA1ukHZQT/0vCiD3o9IxoGfdKKDS0HatB3S/cir7peNVV5+x2MZRY6haCap pMWODGh284it59mh8r1j0j6TDUSZ7ZnB5i/ktq0x0migb+R+TyX7R6kbVXpu89YO 6CO++Q2PADKyFxnmKfwZKnUzatat8N6Ays9XjR9dvBQzdqIGi0gmlusCAhLArxdz tG/DqaawG3c40b5rbE5Q33P8Q92YCJu5ExOrcRhMrM4F2/whnQZkrmxPXYrUP+rN GeVLq/nfwUevZxF+F2m5EjUnzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkTxwzh 7I3lrNIylPp1Spbig3MjMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClqVAR6QerC+mtATnSggpaSmz8KvxfmD50TLsWJ4+P2JAg/BA6Q8Y/ NKPEdgyLqkmUZnpSz2Py++M5pu8UQI9fcsGsz1/poTfLaj4Z2+owip3dZieUffJZ LLzzCPRVwiNmZ1j/N6M2nEey+Qr4UVBEOHsXJD+cqlrj+j+22zbsAfqryk6/3yPH g/jQlb8RPP1gkYadDnjxX1bRyMQ7Su3FJtJr4YIZHLp6m8K2GNtTmBSLXfxDreCy +x77ZTvxConQ/5GLGek1WjWhRI60OpYxBeBqu9vHXdAi0zs5CyPZQRL0aKdOpQgr mvoTRlZQJDQNK/3tXrOWwvZnmJsSlMDf -----END CERTIFICATE-----Generated at Mon Dec 22 07:11:50 2025 by rpki-client