This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: 3AePdru/mo5jv33iFSXKumfe71ng9Ea6TF6ojU7UVA4= Subject key identifier: D3:39:CF:22:65:15:61:F0:1D:1D:01:E1:50:DC:14:51:1A:3F:9C:74 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 08C1 Signing time: Thu 18 Dec 2025 14:43:30 +0000 Manifest this update: Thu 18 Dec 2025 14:43:30 +0000 Manifest next update: Thu 25 Dec 2025 14:43:30 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: uKW4U/nIb6WK2DSdhGLE7CPcetLXVNcP464mwzECIIQ=) 2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=) 3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Dec 18 14:43:30 2025 GMT Not After : Dec 25 14:43:30 2025 GMT Subject: CN=69441312-5671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:85:89:7e:10:81:13:6a:81:c6:92:60:9b: fd:51:1a:74:ec:62:2b:9e:31:8e:fb:4b:9b:d8:87: f1:fa:eb:41:cc:0e:1e:29:23:4b:d5:34:09:8a:61: 3f:f0:2d:99:d6:f6:3e:23:6d:cf:f5:61:85:6a:1c: ed:f7:34:9c:75:9f:9e:24:ee:f6:6b:70:1a:b2:6a: 1a:d8:3d:51:d5:06:ce:1f:aa:41:48:e2:61:4c:79: 94:68:4d:4d:85:b5:8d:40:ea:b1:99:af:00:27:a1: 51:62:3d:fb:5b:68:5c:42:b1:a9:e0:8c:82:b3:2d: 38:85:e8:cd:c7:31:8a:9f:86:2b:b1:f2:b2:f6:3b: 99:69:d7:b6:67:99:40:59:7f:c4:86:5f:79:cb:23: dd:63:74:3c:21:63:52:99:78:b2:08:71:01:98:72: f0:c8:79:2b:dd:8e:e9:93:15:56:58:39:3c:e8:73: 21:5e:d3:b7:17:c9:28:28:4b:d6:04:12:54:b5:29: b6:27:0b:65:0e:de:37:7b:38:15:b5:15:80:c2:5a: 15:ac:2b:fe:03:fd:cb:9c:1f:c0:a1:45:0c:44:d9: 45:9f:c9:f8:93:77:27:44:01:46:d9:d0:51:e3:98: 71:c7:6d:9b:6f:94:37:0f:38:a3:e9:51:3c:e9:69: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:39:CF:22:65:15:61:F0:1D:1D:01:E1:50:DC:14:51:1A:3F:9C:74 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c7:0d:c8:05:ab:15:86:04:b2:62:52:83:ef:17:7d:9a:ad: cb:c9:22:be:1d:1f:4e:01:01:ae:03:3e:1f:bf:cb:26:50:65: 10:f0:dc:46:98:b1:9f:54:e5:6b:b6:ff:7b:09:d5:48:d5:87: 58:3a:47:6d:b5:a1:c3:fc:61:d4:ce:32:70:ab:4f:6f:33:f0: a4:f6:6c:49:b5:c1:60:bc:a0:41:f0:5e:61:a4:3b:50:f9:1b: 6d:60:5c:e6:40:58:43:13:91:47:33:ce:42:96:52:01:d3:5f: 27:9e:a4:7b:92:9d:b7:62:66:13:63:f3:a4:85:23:30:4e:18: 01:5b:51:d6:87:d4:3f:ea:db:3e:71:64:49:37:30:a3:48:e0: 92:36:3f:ae:26:5f:23:94:2c:77:f9:54:53:ce:9e:15:c7:51: 72:ab:4f:0e:64:c5:c4:26:a3:b0:06:75:36:c7:83:fe:20:90: 3d:7f:cf:2f:ae:dc:68:d1:b6:68:30:4d:78:ab:4f:6b:de:6b: cb:bc:14:cb:d5:3f:3e:09:98:a2:a0:37:d3:da:b1:18:9c:bd: fd:d8:10:31:2e:89:42:3c:57:a2:82:61:e0:dc:cd:23:c4:63: 22:12:15:dc:52:1b:3c:da:34:bb:67:fb:52:25:3d:2e:b9:c6: 6c:91:a6:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUxMjE4MTQ0MzMwWhcNMjUxMjI1MTQ0MzMwWjAYMRYwFAYD VQQDDA02OTQ0MTMxMi01NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6qFiX4QgRNqgcaSYJv9URp07GIrnjGO+0ub2Ifx+utBzA4eKSNL1TQJimE/ 8C2Z1vY+I23P9WGFahzt9zScdZ+eJO72a3Aasmoa2D1R1QbOH6pBSOJhTHmUaE1N hbWNQOqxma8AJ6FRYj37W2hcQrGp4IyCsy04hejNxzGKn4YrsfKy9juZade2Z5lA WX/Ehl95yyPdY3Q8IWNSmXiyCHEBmHLwyHkr3Y7pkxVWWDk86HMhXtO3F8koKEvW BBJUtSm2JwtlDt43ezgVtRWAwloVrCv+A/3LnB/AoUUMRNlFn8n4k3cnRAFG2dBR 45hxx22bb5Q3Dzij6VE86Wn/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM5zyJl FWHwHR0B4VDcFFEaP5x0MB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLxw3IBasVhgSyYlKD7xd9mq3LySK+HR9OAQGuAz4fv8smUGUQ8NxG mLGfVOVrtv97CdVI1YdYOkdttaHD/GHUzjJwq09vM/Ck9mxJtcFgvKBB8F5hpDtQ +RttYFzmQFhDE5FHM85CllIB018nnqR7kp23YmYTY/OkhSMwThgBW1HWh9Q/6ts+ cWRJNzCjSOCSNj+uJl8jlCx3+VRTzp4Vx1Fyq08OZMXEJqOwBnU2x4P+IJA9f88v rtxo0bZoME14q09r3mvLvBTL1T8+CZiioDfT2rEYnL392BAxLolCPFeigmHg3M0j xGMiEhXcUhs82jS7Z/tSJT0uucZskaYy -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:14 2025 by rpki-client