This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: RPyZlm1UeiBV2lZu2ek6jJ97cfrhlf6z0tyYfYhP2KA= Subject key identifier: 9A:77:9C:FC:F7:E0:74:0A:E5:50:3E:DB:06:90:93:92:B3:DC:4E:B3 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 015D Signing time: Mon 29 Dec 2025 03:12:38 +0000 Manifest this update: Mon 29 Dec 2025 03:12:38 +0000 Manifest next update: Mon 05 Jan 2026 03:12:38 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: lBMFn+72/o93XVnbUm9Itfobz5XOe5KurY3/IOF5bdA=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Dec 29 03:12:38 2025 GMT Not After : Jan 5 03:12:38 2026 GMT Subject: CN=6951f1a6-7d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:ea:2a:10:c3:3d:2b:65:35:4a:bc:f8:71: 71:e2:6e:8a:35:bb:03:49:73:70:f7:26:80:7e:09: 50:7b:3a:16:cd:d6:24:c5:cb:63:ae:48:19:73:d0: c2:5d:bb:86:6c:8c:41:ad:c0:c3:c1:b6:40:41:36: 5b:37:60:5f:f2:d6:32:0d:97:31:6e:40:fe:c9:03: 51:e7:86:c4:32:1c:c8:38:21:57:81:4c:50:e0:23: 1d:8a:08:75:d7:77:da:ab:d9:b3:cb:cd:c2:a0:34: 92:1a:00:44:22:9a:33:7d:7d:5a:32:4d:8c:35:9f: dc:ae:8a:51:eb:0f:d8:13:f6:f3:23:4e:f3:24:3b: 0d:e7:20:0a:d5:20:87:df:bc:03:27:21:ce:ac:ea: f2:21:4f:64:c7:38:ea:0f:76:51:50:56:3a:91:6d: 4c:4e:0a:01:7e:74:46:6d:52:5d:ea:26:dc:7e:97: 92:5d:83:c8:a6:57:f3:26:46:0e:32:4e:28:f9:51: 1d:b2:bf:d8:c4:7c:9e:bd:44:21:37:36:fd:0b:d7: ee:2c:ba:9e:57:45:33:c3:0c:84:c8:4b:35:cb:6a: 85:2f:fc:2e:32:1e:5c:e2:61:ae:db:ce:92:4a:da: b9:e3:da:3f:c7:8a:9c:97:bf:ee:7c:51:4d:76:99: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:77:9C:FC:F7:E0:74:0A:E5:50:3E:DB:06:90:93:92:B3:DC:4E:B3 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:34:72:c6:07:86:ba:ac:58:9c:fb:fd:bd:08:a4:5f:b7:65: fc:3c:e1:c1:cc:a4:53:b0:93:ad:d3:1a:40:a8:ef:36:e1:34: 24:f9:66:c2:de:38:9a:0b:72:94:ec:80:dc:2f:db:1e:8e:a1: e4:78:97:d8:57:aa:fa:e5:f3:8c:f1:cf:92:b6:65:53:b8:a6: d7:cc:e9:f0:1c:3a:27:bb:e8:1c:df:5c:d8:cb:76:c3:81:e0: c7:c2:ff:3d:07:7a:b1:30:09:3d:b0:b4:b2:a7:be:48:bd:ec: 16:60:9c:b2:ea:57:94:2e:8e:75:ab:73:e5:4a:78:70:66:82: f5:cb:ae:98:10:45:ef:a5:b5:3f:5e:77:34:73:13:90:51:e9: b1:62:c7:68:4c:58:9c:71:f5:5d:c9:e2:a2:da:57:f3:df:a2: f6:57:66:45:52:40:d3:3f:75:3d:8d:5f:fd:a0:2f:bd:ba:a5: e0:db:52:1b:ad:9f:71:c3:9a:91:6f:b7:2e:b9:4c:20:6e:ea: a0:b0:c9:97:30:ff:e2:f8:70:d7:83:d4:13:77:22:da:5d:b5: 7c:b1:3d:07:b3:39:b5:45:49:8b:15:7b:ff:a2:9c:70:45:80: 67:d2:eb:eb:e1:d4:78:1a:76:5d:80:b8:f7:56:4b:90:bf:bf: bb:72:09:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUxMjI5MDMxMjM4WhcNMjYwMTA1MDMxMjM4WjAYMRYwFAYD VQQDDA02OTUxZjFhNi03ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjXqKhDDPStlNUq8+HFx4m6KNbsDSXNw9yaAfglQezoWzdYkxctjrkgZc9DC XbuGbIxBrcDDwbZAQTZbN2Bf8tYyDZcxbkD+yQNR54bEMhzIOCFXgUxQ4CMdigh1 13faq9mzy83CoDSSGgBEIpozfX1aMk2MNZ/cropR6w/YE/bzI07zJDsN5yAK1SCH 37wDJyHOrOryIU9kxzjqD3ZRUFY6kW1MTgoBfnRGbVJd6ibcfpeSXYPIplfzJkYO Mk4o+VEdsr/YxHyevUQhNzb9C9fuLLqeV0UzwwyEyEs1y2qFL/wuMh5c4mGu286S Stq549o/x4qcl7/ufFFNdpn9zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp3nPz3 4HQK5VA+2waQk5Kz3E6zMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpNHLGB4a6rFic+/29CKRft2X8POHBzKRTsJOt0xpAqO824TQk+WbC 3jiaC3KU7IDcL9sejqHkeJfYV6r65fOM8c+StmVTuKbXzOnwHDonu+gc31zYy3bD geDHwv89B3qxMAk9sLSyp75IvewWYJyy6leULo51q3PlSnhwZoL1y66YEEXvpbU/ Xnc0cxOQUemxYsdoTFiccfVdyeKi2lfz36L2V2ZFUkDTP3U9jV/9oC+9uqXg21Ib rZ9xw5qRb7cuuUwgbuqgsMmXMP/i+HDXg9QTdyLaXbV8sT0Hszm1RUmLFXv/opxw RYBn0uvr4dR4GnZdgLj3VkuQv7+7cgkd -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:32 2025 by rpki-client