This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json) Hash identifier: znUVacSE2M4sk2/agbXkJcx/AVOPb9LRX2cvaFrCRF8= Subject key identifier: 56:93:9D:B6:F5:F5:0B:B1:10:2F:E4:BC:F8:6D:6C:B4:E4:74:29:5B Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft Manifest number: 0167 Signing time: Mon 29 Dec 2025 03:11:45 +0000 Manifest this update: Mon 29 Dec 2025 03:11:44 +0000 Manifest next update: Mon 05 Jan 2026 03:11:44 +0000 Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: Pcz4D6NAu2gRnw+s6TgMKzwoZf/XAXnFUVuTkJdqn2g=) 2: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=) 3: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Validity Not Before: Dec 29 03:11:44 2025 GMT Not After : Jan 5 03:11:44 2026 GMT Subject: CN=6951f171-8510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e2:88:8d:4d:ca:5e:c0:99:20:ba:18:9e:57: a3:1b:6c:f3:5b:ec:a1:f8:0e:60:c9:cc:30:65:36: 2b:5e:6a:f8:74:d3:8f:81:61:53:27:13:c8:d9:c3: e8:a2:20:6c:53:39:e9:79:1b:3f:7a:d4:0e:a8:6b: ff:71:72:8d:74:b3:f0:a2:4e:4c:d4:4e:19:29:8f: 44:e1:82:e9:88:6c:b8:86:b9:04:5f:aa:bb:7d:d7: 5c:9f:45:e0:f0:a5:9b:05:41:5b:44:d0:08:5d:8b: 39:99:af:bb:33:63:88:80:5e:09:88:cb:06:7f:ca: 97:c9:0a:98:29:17:d2:f7:60:e1:31:47:ed:6c:ac: 65:4e:6e:ed:a8:3b:b0:6f:81:d6:b4:66:35:c8:c7: 5c:09:4d:df:3f:ee:0c:1e:f4:af:ce:a5:90:18:5d: 7a:8a:cc:ca:70:bb:f3:72:87:66:7d:71:fb:14:2c: fa:d4:a9:2a:d8:bb:de:71:bf:ce:01:c1:65:ae:04: 41:dc:64:b9:ed:57:a5:fe:cf:ac:3c:8b:10:26:24: 05:89:6f:1a:3c:a9:80:df:4f:9f:17:7d:97:20:06: d8:35:4d:d3:6c:db:a4:67:db:83:91:13:f2:bd:b5: 6f:69:d4:05:9f:1b:10:2f:eb:65:26:20:a3:d3:61: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:93:9D:B6:F5:F5:0B:B1:10:2F:E4:BC:F8:6D:6C:B4:E4:74:29:5B X509v3 Authority Key Identifier: keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:29:65:51:1d:49:d8:04:10:8a:7c:e6:66:58:3a:b6:f9:c9: c7:fc:34:f5:c2:45:b8:cf:6e:61:d7:57:a4:7a:27:72:8e:b5: 4f:ec:48:7e:ef:81:28:19:aa:a6:0c:e3:56:67:ad:e4:a7:6a: 6a:b5:0e:ba:6f:96:6d:0f:b8:2c:8c:b6:c0:b3:c5:1b:0c:19: 75:c8:91:60:46:a6:40:f8:ee:6a:2c:dd:9f:ba:28:25:0f:32: ca:6d:09:ba:de:fe:24:b8:73:10:8b:1e:31:9c:f8:e6:db:d1: 2e:8a:67:73:e9:fb:fc:56:e8:b6:66:8a:65:5b:89:cf:b0:05: a4:60:48:0e:68:c9:c4:df:f1:4f:78:c7:5e:09:ab:63:12:ac: b1:d4:98:b3:cf:d0:44:66:24:a6:8d:41:f0:ec:a5:49:cc:d6: 0f:50:ab:3f:b4:4d:55:10:8f:cf:5d:b3:f5:41:d4:1b:99:62: 8e:7c:78:5b:71:d9:65:dd:8d:82:46:3e:b2:eb:8f:8c:52:7d: 49:a5:48:f6:20:fe:ff:3a:5f:5c:8f:91:66:e4:76:e9:a8:35: 81:0b:78:90:5d:a1:71:c5:66:90:1c:32:ff:8c:d1:df:c8:99: 87:77:55:67:96:1a:72:b2:ba:eb:4b:c6:a1:5c:27:c4:0f:04: 2e:7f:17:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1 QjFEMUI3Q0MwHhcNMjUxMjI5MDMxMTQ0WhcNMjYwMTA1MDMxMTQ0WjAYMRYwFAYD VQQDDA02OTUxZjE3MS04NTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uKIjU3KXsCZILoYnlejG2zzW+yh+A5gycwwZTYrXmr4dNOPgWFTJxPI2cPo oiBsUznpeRs/etQOqGv/cXKNdLPwok5M1E4ZKY9E4YLpiGy4hrkEX6q7fddcn0Xg 8KWbBUFbRNAIXYs5ma+7M2OIgF4JiMsGf8qXyQqYKRfS92DhMUftbKxlTm7tqDuw b4HWtGY1yMdcCU3fP+4MHvSvzqWQGF16iszKcLvzcodmfXH7FCz61Kkq2Lvecb/O AcFlrgRB3GS57Vel/s+sPIsQJiQFiW8aPKmA30+fF32XIAbYNU3TbNukZ9uDkRPy vbVvadQFnxsQL+tlJiCj02GvaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaTnbb1 9QuxEC/kvPhtbLTkdClbMB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTgxQi9CQzVDRUFCNkNBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9I QWlIYVhLQ1hoWWhiSFJ0OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnKWVRHUnYBBCKfOZmWDq2+cnH/DT1wkW4z25h11ekeidyjrVP7Eh+ 74EoGaqmDONWZ63kp2pqtQ66b5ZtD7gsjLbAs8UbDBl1yJFgRqZA+O5qLN2fuigl DzLKbQm63v4kuHMQix4xnPjm29Euimdz6fv8Vui2ZoplW4nPsAWkYEgOaMnE3/FP eMdeCatjEqyx1Jizz9BEZiSmjUHw7KVJzNYPUKs/tE1VEI/PXbP1QdQbmWKOfHhb cdll3Y2CRj6y64+MUn1JpUj2IP7/Ol9cj5Fm5HbpqDWBC3iQXaFxxWaQHDL/jNHf yJmHd1VnlhpysrrrS8ahXCfEDwQufxeM -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:09 2025 by rpki-client