This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: jiwqIWsXnC3Ajcvgc4up663OGVRLbmhEhqpFICJdZUw= Subject key identifier: 2D:FF:F6:D6:8E:0C:0E:B0:C2:D7:2E:1D:DA:B6:BD:FB:58:37:30:22 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 01B5 Signing time: Thu 25 Dec 2025 02:15:05 +0000 Manifest this update: Thu 25 Dec 2025 02:15:05 +0000 Manifest next update: Thu 01 Jan 2026 02:15:05 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: JjHHapbZtOBMhXklR3lQefi9l7UP2HkAA8mXlcccN/I=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: Pq73PgAG6oMeQVEVi6eMUHjuXX4heTdR3HOjLtOdzzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 02:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: Dec 25 02:15:05 2025 GMT Not After : Jan 1 02:15:05 2026 GMT Subject: CN=694c9e29-0341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:97:5b:d4:57:27:02:2a:89:92:41:cb:2b: 7c:87:f5:5a:6a:94:2b:d8:67:8c:d2:b6:83:c9:56: a9:8e:3b:a1:0b:62:7a:36:fb:e0:75:8a:73:d0:5e: e5:78:db:80:16:a7:27:7b:42:eb:18:dc:48:a4:89: 44:8f:6a:aa:d9:da:83:26:1d:a6:2a:7c:59:7d:9a: c5:42:f9:41:4a:83:b4:e1:49:5d:94:cf:97:68:9a: b3:24:ec:c5:d0:9a:d5:99:80:f0:2a:7e:4c:83:f8: 76:8b:52:5b:f4:3e:31:79:c0:d4:57:f7:d3:50:26: 7a:83:2e:38:54:78:ab:b1:3d:13:5a:74:c6:fa:8a: f9:29:d0:f2:9a:51:cc:f9:3d:54:ac:43:e5:7e:09: ba:b4:f4:4e:96:1a:ab:ac:32:9a:39:c9:d7:51:b3: ed:2b:62:74:ff:a5:47:64:fd:43:15:93:67:e6:f5: 51:67:b8:ed:41:d9:91:9a:fc:53:72:f8:72:f3:fc: 3e:3c:d4:f8:ca:6d:80:69:2c:d9:72:e9:56:dc:79: b7:21:e5:ad:9b:6d:93:0e:fb:49:2c:5a:02:e6:1c: e5:3d:65:27:1c:55:4d:0d:c9:e5:22:b1:73:91:e5: 31:b1:70:65:16:1b:76:9b:3c:1a:f4:0c:08:99:6c: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FF:F6:D6:8E:0C:0E:B0:C2:D7:2E:1D:DA:B6:BD:FB:58:37:30:22 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:63:84:6d:22:cf:dd:eb:6c:c5:3a:1a:a6:dc:8f:e9:89:00: 20:25:ef:56:a2:b1:af:17:24:9e:a2:dc:b5:f6:e5:ee:8d:b1: 81:02:f0:a5:78:ad:fe:0b:18:9f:e1:f5:cb:94:c1:02:c6:08: 39:a8:10:02:8c:e2:a9:a1:26:23:e0:8b:ca:17:06:b0:d4:43: 9a:05:6e:10:29:7e:c5:a5:ed:fb:42:2b:af:1d:6f:b8:c3:a7: 13:60:a4:6e:ab:b9:e0:d4:54:c4:e3:7e:59:27:53:9a:a5:81: f7:d6:21:3b:5e:f6:51:44:a3:5d:1a:e9:b0:0e:62:bc:ab:d2: 00:fe:39:e5:65:6a:dc:f8:83:d6:a5:33:b7:1a:0c:4b:fc:e1: 7a:98:cb:91:82:d3:29:a2:e5:bc:5f:18:1a:69:d4:00:ee:53: 36:ab:9b:6f:cd:d5:f0:d6:d0:13:12:e3:5f:3d:96:f8:80:18: a5:8f:2c:76:36:cb:03:5e:eb:2e:fd:e7:eb:9f:92:9a:15:f6: 99:c0:7f:b0:41:93:fb:9d:55:bb:3b:25:97:09:ec:7c:d2:76: ee:6e:6b:39:70:1e:88:30:31:a6:b0:65:bb:3f:da:87:c2:d7: 54:70:d0:b3:aa:6b:c5:bf:96:28:32:7b:1a:c9:9a:84:4e:e6: f9:b8:72:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjUxMjI1MDIxNTA1WhcNMjYwMTAxMDIxNTA1WjAYMRYwFAYD VQQDDA02OTRjOWUyOS0wMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AeXW9RXJwIqiZJByyt8h/VaapQr2GeM0raDyVapjjuhC2J6NvvgdYpz0F7l eNuAFqcne0LrGNxIpIlEj2qq2dqDJh2mKnxZfZrFQvlBSoO04UldlM+XaJqzJOzF 0JrVmYDwKn5Mg/h2i1Jb9D4xecDUV/fTUCZ6gy44VHirsT0TWnTG+or5KdDymlHM +T1UrEPlfgm6tPROlhqrrDKaOcnXUbPtK2J0/6VHZP1DFZNn5vVRZ7jtQdmRmvxT cvhy8/w+PNT4ym2AaSzZculW3Hm3IeWtm22TDvtJLFoC5hzlPWUnHFVNDcnlIrFz keUxsXBlFht2mzwa9AwImWx0yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3/9taO DA6wwtcuHdq2vftYNzAiMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaY4RtIs/d62zFOhqm3I/piQAgJe9WorGvFySeoty19uXujbGBAvCl eK3+Cxif4fXLlMECxgg5qBACjOKpoSYj4IvKFwaw1EOaBW4QKX7Fpe37QiuvHW+4 w6cTYKRuq7ng1FTE435ZJ1OapYH31iE7XvZRRKNdGumwDmK8q9IA/jnlZWrc+IPW pTO3GgxL/OF6mMuRgtMpouW8XxgaadQA7lM2q5tvzdXw1tATEuNfPZb4gBiljyx2 NssDXusu/efrn5KaFfaZwH+wQZP7nVW7OyWXCex80nbubms5cB6IMDGmsGW7P9qH wtdUcNCzqmvFv5YoMnsayZqETub5uHJJ -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:36 2025 by rpki-client