This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: FzPcVHdKxOrtjg0fXYsUWu2kOcMRH2b0PkVxU7NpOCs= Subject key identifier: BA:FE:37:23:3E:A9:53:4B:C1:06:2E:B0:FC:3B:E0:44:C3:8B:31:05 Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 051F Signing time: Wed 31 Dec 2025 23:03:23 +0000 Manifest this update: Wed 31 Dec 2025 23:03:23 +0000 Manifest next update: Wed 07 Jan 2026 23:03:23 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: /8girqM/ppzqOh5mKWROcQ9awQbc7Jr52XQEK7THKn0=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: 8X5eBnJACDnF25R5obyjBzrkQFPgd4fVGHDaVysBGCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 23:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Dec 31 23:03:23 2025 GMT Not After : Jan 7 23:03:23 2026 GMT Subject: CN=6955abbb-51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:ec:b9:09:e6:4e:1d:11:2f:2a:ba:92:8e: a0:f9:8f:ab:26:9f:6d:58:ec:b9:1a:ef:37:f8:61: a5:b2:69:28:b9:d0:8e:11:06:ea:b3:26:c3:46:2d: fb:fe:17:c1:42:6d:9d:2a:d1:be:85:20:7e:c8:13: 99:c7:18:07:32:aa:75:fe:80:38:85:c1:00:a1:93: ce:50:f8:78:d7:19:47:bc:ea:76:91:a5:b1:a0:b6: eb:d8:59:a5:cd:15:8e:29:e0:73:7b:56:36:54:a3: 09:5f:2f:3e:11:a3:ef:72:f9:c6:51:d8:94:d4:bf: 7c:1b:64:4c:43:25:5c:9a:31:60:d9:1f:32:3b:30: 69:d8:4d:55:0c:8a:ea:2d:c2:90:6f:c1:ba:c3:6f: b2:19:e0:b5:c9:c2:ac:6d:20:93:cf:7d:f0:7e:1e: c4:00:2a:29:f8:84:3c:08:45:8e:9f:4f:3b:3e:15: cd:bf:a7:1c:2f:6f:a6:2c:06:14:3c:50:d4:48:a9: 5a:ed:0b:e2:79:49:5d:65:6c:de:0a:fe:f5:e9:4e: 22:78:a7:c7:fd:5f:e5:c2:0c:2f:e7:c7:e6:5c:04: b4:6e:be:16:56:e8:38:96:9f:65:c0:20:5c:f4:95: 1b:4e:ba:11:69:f0:a4:44:6d:90:ae:a4:73:ea:ea: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:37:23:3E:A9:53:4B:C1:06:2E:B0:FC:3B:E0:44:C3:8B:31:05 X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:7b:16:80:bb:8f:2c:a7:7c:8d:81:48:94:17:79:64:7c: 91:20:36:89:9b:64:5c:4d:26:f2:02:52:92:eb:38:a6:6f:4a: ba:2c:e3:bd:3a:61:83:dc:d6:b9:27:c7:fa:a0:a0:3f:e2:4a: a1:c0:f6:8e:06:e3:bf:cb:2b:bc:27:68:3e:0d:74:21:6b:d5: db:ae:2b:34:1d:4a:26:21:92:5d:93:0e:55:fd:38:d8:8a:8c: 4d:7f:76:b0:16:cf:b0:5e:e1:a2:8b:76:85:cb:d9:1f:ea:e1: 52:dd:2c:31:8d:46:7b:39:6c:f4:13:58:43:a2:71:81:5b:aa: 8e:c3:52:1e:18:4b:72:da:1e:19:d0:9b:46:b6:17:ec:f0:8b: c8:ba:e3:ea:da:f9:37:c9:bf:3f:10:dd:ce:c0:b7:5e:fd:9e: 2b:ea:c4:cd:c7:6a:9b:2e:c8:21:34:f2:81:46:68:2a:02:6e: 16:e7:5e:c9:84:c7:6f:e8:7e:78:37:f5:f4:94:bd:5b:d4:44: 4b:b1:b6:f9:78:f3:59:83:04:73:43:5a:13:7b:c6:1b:7b:db: b5:6e:5b:b9:19:95:d7:ee:93:70:3b:f8:97:40:59:3f:56:ae: f5:b2:60:ef:13:c4:15:39:34:3e:bd:ad:3a:fb:52:53:83:4e: b7:7e:2a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjUxMjMxMjMwMzIzWhcNMjYwMTA3MjMwMzIzWjAYMRYwFAYD VQQDDA02OTU1YWJiYi01MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuujsuQnmTh0RLyq6ko6g+Y+rJp9tWOy5Gu83+GGlsmkoudCOEQbqsybDRi37 /hfBQm2dKtG+hSB+yBOZxxgHMqp1/oA4hcEAoZPOUPh41xlHvOp2kaWxoLbr2Fml zRWOKeBze1Y2VKMJXy8+EaPvcvnGUdiU1L98G2RMQyVcmjFg2R8yOzBp2E1VDIrq LcKQb8G6w2+yGeC1ycKsbSCTz33wfh7EACop+IQ8CEWOn087PhXNv6ccL2+mLAYU PFDUSKla7QvieUldZWzeCv716U4ieKfH/V/lwgwv58fmXAS0br4WVug4lp9lwCBc 9JUbTroRafCkRG2QrqRz6ur2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr+NyM+ qVNLwQYusPw74ETDizEFMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThHsWgLuPLKd8jYFIlBd5ZHyRIDaJm2RcTSbyAlKS6zimb0q6LOO9 OmGD3Na5J8f6oKA/4kqhwPaOBuO/yyu8J2g+DXQha9Xbris0HUomIZJdkw5V/TjY ioxNf3awFs+wXuGii3aFy9kf6uFS3SwxjUZ7OWz0E1hDonGBW6qOw1IeGEty2h4Z 0JtGthfs8IvIuuPq2vk3yb8/EN3OwLde/Z4r6sTNx2qbLsghNPKBRmgqAm4W517J hMdv6H54N/X0lL1b1ERLsbb5ePNZgwRzQ1oTe8Ybe9u1blu5GZXX7pNwO/iXQFk/ Vq71smDvE8QVOTQ+va06+1JTg063fioS -----END CERTIFICATE-----Generated at Fri Jan 2 23:23:00 2026 by rpki-client