This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: VK0qyRg/uh7E0W2MNvEaeEDwje6ewHdL/k2SKPKC+C8= Subject key identifier: C1:88:1F:34:57:14:0A:74:15:5E:5E:D1:81:BC:85:D9:8F:B0:33:81 Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 052C Signing time: Mon 22 Dec 2025 22:38:07 +0000 Manifest this update: Mon 22 Dec 2025 22:38:07 +0000 Manifest next update: Mon 29 Dec 2025 22:38:07 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: RQTipf8xvwhpJ2JN5KS7RFqLLC8Ld4RL9LBl1qv2Ryc=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: 3GuUWWSw68MOlVK92wSYlp+NhvzxWsoKxH6173siIPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Dec 22 22:38:07 2025 GMT Not After : Dec 29 22:38:07 2025 GMT Subject: CN=6949c84f-3da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:23:b7:3e:33:12:8b:ac:7d:40:4e:7a:32: 71:a0:80:56:a8:a5:2d:cf:5d:8f:9d:b5:ab:8a:ed: f5:43:c5:7a:66:50:6c:f3:6c:49:a9:7c:30:c3:c5: f4:74:4b:18:63:a7:1d:a3:21:79:e5:55:14:64:be: 78:50:f0:77:e0:60:2c:3f:e0:f6:07:f9:8c:b1:da: 63:16:0d:c6:14:bc:68:5f:dd:38:27:6d:d4:7f:2b: 24:a9:63:a3:ec:0d:87:37:27:59:7f:84:d3:8b:44: eb:c6:af:3d:fc:98:69:19:de:78:88:6f:54:ce:f5: 8f:82:a4:5e:dd:d8:3d:d0:f2:4a:e2:43:71:17:d6: 65:1a:f6:34:d0:0d:2b:79:14:8b:06:af:14:52:5e: c7:53:af:d1:e8:98:f8:b5:cd:49:8c:01:51:bc:73: 30:44:e4:2a:ec:3d:03:43:7d:c9:26:c5:4d:45:84: 4e:1f:df:e4:7a:71:11:96:4d:e6:0b:e6:32:fe:2c: a2:d1:a4:28:af:5c:77:18:67:ab:8e:6c:a9:a4:37: ac:24:33:2b:a8:4c:f0:ab:d9:2c:74:5f:69:7d:80: e2:9b:c9:c7:11:ed:cd:9f:e6:8e:95:ca:f7:79:a0: 24:0b:33:90:92:c3:fd:0e:dc:16:e1:5d:db:a3:d9: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:88:1F:34:57:14:0A:74:15:5E:5E:D1:81:BC:85:D9:8F:B0:33:81 X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:51:c7:02:56:5b:07:6f:9c:6e:6c:30:ee:2a:7d:ec:05:56: 2e:5b:bd:52:5e:6b:8f:df:d0:87:66:cb:e4:dd:2e:cc:f4:f8: 74:2f:c5:9c:9b:e7:dc:2a:40:30:84:e7:a6:6f:f6:27:f4:25: 9e:51:0d:7b:46:2e:e5:b5:6b:a9:7e:c7:46:3a:fa:c0:e7:ca: cb:7b:f9:a1:42:9a:68:b3:32:0d:cf:1e:96:75:34:b8:3b:a2: d2:ce:38:71:1e:04:93:20:ff:61:32:29:57:fe:99:4f:31:62: d0:40:71:92:8a:a8:de:d6:68:98:87:76:01:cf:c6:91:3f:db: d8:e9:a6:97:16:1e:b2:f4:25:15:a8:fd:79:c6:21:5b:e9:34: fe:7d:47:a7:46:4d:91:b5:81:22:ec:d3:da:5f:47:cd:40:30: c9:a8:5b:c5:e1:2f:80:20:8d:e0:19:9f:38:df:bb:ae:6c:34: 6d:4b:55:ac:f3:b6:50:ef:c4:53:24:08:81:c0:84:2b:1d:cb: 1d:b2:33:00:76:da:b0:b6:92:a3:2a:39:42:55:6b:80:42:7f: 56:48:18:d3:d8:d3:b5:63:32:32:46:cc:5d:f8:29:28:0c:15: b6:07:36:ea:e4:6b:ae:23:73:19:db:8e:f4:74:cf:88:80:35: 1c:b4:f4:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjUxMjIyMjIzODA3WhcNMjUxMjI5MjIzODA3WjAYMRYwFAYD VQQDDA02OTQ5Yzg0Zi0zZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ0jtz4zEousfUBOejJxoIBWqKUtz12PnbWriu31Q8V6ZlBs82xJqXwww8X0 dEsYY6cdoyF55VUUZL54UPB34GAsP+D2B/mMsdpjFg3GFLxoX904J23UfyskqWOj 7A2HNydZf4TTi0Trxq89/JhpGd54iG9UzvWPgqRe3dg90PJK4kNxF9ZlGvY00A0r eRSLBq8UUl7HU6/R6Jj4tc1JjAFRvHMwROQq7D0DQ33JJsVNRYROH9/kenERlk3m C+Yy/iyi0aQor1x3GGerjmyppDesJDMrqEzwq9ksdF9pfYDim8nHEe3Nn+aOlcr3 eaAkCzOQksP9DtwW4V3bo9kJ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGIHzRX FAp0FV5e0YG8hdmPsDOBMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4UccCVlsHb5xubDDuKn3sBVYuW71SXmuP39CHZsvk3S7M9Ph0L8Wc m+fcKkAwhOemb/Yn9CWeUQ17Ri7ltWupfsdGOvrA58rLe/mhQpposzINzx6WdTS4 O6LSzjhxHgSTIP9hMilX/plPMWLQQHGSiqje1miYh3YBz8aRP9vY6aaXFh6y9CUV qP15xiFb6TT+fUenRk2RtYEi7NPaX0fNQDDJqFvF4S+AII3gGZ8437uubDRtS1Ws 87ZQ78RTJAiBwIQrHcsdsjMAdtqwtpKjKjlCVWuAQn9WSBjT2NO1YzIyRsxd+Cko DBW2Bzbq5GuuI3MZ2470dM+IgDUctPTG -----END CERTIFICATE-----Generated at Tue Dec 23 12:58:04 2025 by rpki-client