This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: vsg0L2K5KOFHABcuvm015hv6sKNTUxATzQ3Tim+e7Uk= Subject key identifier: 6F:8E:4A:52:58:88:40:87:A5:66:4B:FC:78:0B:42:2A:CF:37:D9:66 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 09B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 09AA Signing time: Thu 18 Dec 2025 19:33:58 +0000 Manifest this update: Thu 18 Dec 2025 19:33:58 +0000 Manifest next update: Thu 25 Dec 2025 19:33:58 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: gD+cgY1nh1gWHvx9REqJ1lJyyeami1D7mCjA3IZpIRM=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2480 (0x9b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Dec 18 19:33:58 2025 GMT Not After : Dec 25 19:33:58 2025 GMT Subject: CN=69445726-3f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:81:a6:1c:d4:39:dc:21:ed:85:fa:af:cd: 9d:72:ff:a7:26:7b:95:f5:f7:16:5a:fe:3b:fd:62: fd:7a:90:b0:b1:18:e8:4e:9d:a9:d3:4a:0e:63:39: 51:00:49:11:d0:58:56:83:c6:9d:f1:e4:6e:3b:80: 06:f6:8a:54:c4:60:47:a1:5c:79:1f:d8:0d:b5:b2: fb:8f:62:f2:04:57:41:89:4c:90:03:c3:81:30:ef: cd:74:b6:e9:09:47:18:e0:d7:fc:53:a4:38:9d:54: 30:ed:f7:7d:4a:95:29:b5:ba:52:2f:83:f4:69:53: eb:03:f2:78:99:38:50:05:10:0d:98:64:d4:92:6c: a8:79:f8:17:4a:fd:b7:b9:67:4b:fe:01:13:53:bb: e0:2a:7a:c2:be:41:4d:9d:97:00:6a:3b:1a:f7:cc: 90:1f:56:a0:28:21:74:8a:72:5b:31:95:e1:4c:85: e6:df:4e:c3:89:05:d1:72:6a:f9:66:f8:69:15:49: 45:c8:68:04:d2:70:44:2c:71:53:3d:d5:ff:b9:f3: 3f:ef:3e:85:15:a6:9d:bf:39:6e:ab:b2:12:26:ec: c6:11:3c:12:c7:9f:7a:3b:38:95:1c:9f:aa:02:fa: b7:7b:6d:c4:e9:f6:dc:9a:c2:49:72:92:78:fa:9c: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8E:4A:52:58:88:40:87:A5:66:4B:FC:78:0B:42:2A:CF:37:D9:66 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:be:b9:b3:43:09:19:01:2f:b7:fb:56:82:ba:33:94:08:0c: 7b:42:5a:dc:cb:3d:46:41:79:9d:fd:26:b5:5a:7a:c2:38:ba: 8d:ac:1b:c6:53:3e:83:f5:2a:3b:b3:f9:1f:ee:79:0b:56:80: bd:2f:ca:0a:5a:e2:2e:8d:22:85:3d:9c:42:ee:f8:c2:0c:32: 76:ca:70:8c:41:8a:b3:f2:19:88:27:37:f1:f4:a1:77:0e:b1: 7a:fc:0e:e4:8f:f7:3f:ae:95:fa:cc:1d:52:02:20:97:91:cf: 8f:90:53:1e:8c:3c:0a:de:59:6b:c9:6e:a4:cb:c0:96:5e:9c: 88:8c:91:5e:b6:48:4e:bc:37:c0:51:21:c9:94:4f:1f:f2:4c: 15:c7:fd:99:94:75:5e:34:aa:7a:11:61:80:71:69:74:07:1e: 9c:39:a0:3b:aa:7d:72:f0:c6:2e:78:5d:fa:be:71:20:cb:4f: 19:cc:f9:f5:c3:b8:43:f9:fd:cb:1a:cf:35:5f:49:ec:ab:1d: cd:50:cc:81:fc:b5:c4:ce:20:3f:81:f2:25:2e:a1:71:90:ac: b2:ea:5b:4e:cf:e0:f4:71:cc:b7:02:68:68:e4:98:53:e9:7b: 8c:7b:5b:15:f2:5b:02:21:61:4b:21:a5:cb:94:d6:fe:34:67: d3:60:0b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjUxMjE4MTkzMzU4WhcNMjUxMjI1MTkzMzU4WjAYMRYwFAYD VQQDDA02OTQ0NTcyNi0zZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunyBphzUOdwh7YX6r82dcv+nJnuV9fcWWv47/WL9epCwsRjoTp2p00oOYzlR AEkR0FhWg8ad8eRuO4AG9opUxGBHoVx5H9gNtbL7j2LyBFdBiUyQA8OBMO/NdLbp CUcY4Nf8U6Q4nVQw7fd9SpUptbpSL4P0aVPrA/J4mThQBRANmGTUkmyoefgXSv23 uWdL/gETU7vgKnrCvkFNnZcAajsa98yQH1agKCF0inJbMZXhTIXm307DiQXRcmr5 ZvhpFUlFyGgE0nBELHFTPdX/ufM/7z6FFaadvzluq7ISJuzGETwSx596OziVHJ+q Avq3e23E6fbcmsJJcpJ4+pzAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+OSlJY iECHpWZL/HgLQirPN9lmMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASvrmzQwkZAS+3+1aCujOUCAx7Qlrcyz1GQXmd/Sa1WnrCOLqNrBvG Uz6D9So7s/kf7nkLVoC9L8oKWuIujSKFPZxC7vjCDDJ2ynCMQYqz8hmIJzfx9KF3 DrF6/A7kj/c/rpX6zB1SAiCXkc+PkFMejDwK3llryW6ky8CWXpyIjJFetkhOvDfA USHJlE8f8kwVx/2ZlHVeNKp6EWGAcWl0Bx6cOaA7qn1y8MYueF36vnEgy08ZzPn1 w7hD+f3LGs81X0nsqx3NUMyB/LXEziA/gfIlLqFxkKyy6ltOz+D0ccy3Amho5JhT 6XuMe1sV8lsCIWFLIaXLlNb+NGfTYAvs -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:12 2025 by rpki-client