This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: YAUzCd9l1SfaaD1VpYkuOdC4+ddnjRjWFnGQf9t8jAI= Subject key identifier: 27:77:6F:31:BD:29:30:30:A8:EE:39:DF:DF:D6:02:3B:74:16:72:4E Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 0161 Signing time: Fri 19 Dec 2025 03:12:30 +0000 Manifest this update: Fri 19 Dec 2025 03:12:30 +0000 Manifest next update: Fri 26 Dec 2025 03:12:30 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: ySM0gBCUUAxRu75/TcxwQIUZ8nsxxwItcrgVVoAyFao=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Dec 19 03:12:30 2025 GMT Not After : Dec 26 03:12:30 2025 GMT Subject: CN=6944c29e-f541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:28:81:48:1d:79:18:05:75:17:e1:8c:61: 4a:31:c2:44:61:7c:d9:9f:aa:b7:42:18:15:f9:77: 91:e7:85:22:d6:2f:c3:54:a1:3e:3c:76:c9:32:09: 11:9f:75:07:1c:73:82:c5:a6:85:d6:cd:96:a3:fd: f7:24:98:af:af:d1:b5:ec:d2:d1:4d:50:7a:89:91: 49:49:d1:36:db:4c:a6:c3:20:2d:72:6a:b7:2c:a9: 02:f2:90:4f:1e:7e:97:d7:af:c8:1d:a0:42:06:2d: 67:35:12:25:c5:81:ad:37:0d:40:af:07:e7:83:82: 3f:ca:22:90:b5:ad:23:bf:c7:01:1f:c5:94:59:d8: 7b:00:02:84:e1:01:9e:29:d5:1b:02:33:72:58:cd: 5d:b2:18:66:f0:c7:ca:d5:25:12:ed:1f:ab:43:13: 17:d5:d0:c6:30:da:b9:10:d1:b7:2a:7b:13:5b:cc: d6:a3:b6:ea:d4:e2:aa:c6:ae:70:f8:e9:16:d6:27: 73:19:20:9f:cb:07:f4:d4:db:a9:69:10:d8:f4:37: c4:39:90:2e:ab:9d:94:5d:54:51:d7:6e:54:b1:c2: a8:20:1b:03:7e:c9:2d:cc:01:2c:6e:e3:ee:bf:44: 6f:db:8c:d4:7a:2b:9c:7f:b0:13:8c:94:17:7f:5e: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:77:6F:31:BD:29:30:30:A8:EE:39:DF:DF:D6:02:3B:74:16:72:4E X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:fe:72:23:30:33:36:b4:dc:bc:66:2b:e2:24:4e:bc:d4:f0: c3:8c:6c:0c:3d:a7:3a:e4:cb:81:87:ec:e4:1c:29:ca:f3:b6: fe:30:03:3b:3e:dd:f9:8c:49:1a:e6:3e:94:89:34:c5:9f:33: 6c:ca:ed:92:bf:26:5b:df:4b:d8:96:e1:17:f4:94:fa:b8:00: db:6b:ba:96:6b:d7:fa:26:73:bc:40:91:0c:f7:ac:78:36:ea: 7a:b1:ec:7d:d2:9a:bb:f1:25:10:47:a1:da:99:37:3a:30:d1: 19:53:ff:75:fa:9a:1c:94:42:33:6c:66:b3:a3:3e:91:e9:d5: aa:86:99:fb:92:7e:be:01:19:51:86:e4:95:67:ff:8f:ca:bb: 69:d6:fe:9c:0c:23:04:64:3a:6f:da:a8:63:81:30:96:bb:fb: 2b:94:3b:6d:f1:16:fa:87:11:f5:6c:5d:e7:f4:e3:1d:68:f2: 8c:f4:7b:66:5e:01:30:b7:69:13:c0:36:aa:e8:34:6f:db:c0: 44:e4:52:36:35:40:b7:ff:89:45:5a:da:61:e6:3b:aa:d7:8a: 00:58:a8:db:0c:34:ad:10:12:4d:2f:a1:ed:92:c7:fe:18:25: 66:a7:16:87:35:3f:3d:1b:06:38:26:e3:ef:af:29:d8:87:0c: ce:ed:31:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUxMjE5MDMxMjMwWhcNMjUxMjI2MDMxMjMwWjAYMRYwFAYD VQQDDA02OTQ0YzI5ZS1mNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V4ogUgdeRgFdRfhjGFKMcJEYXzZn6q3QhgV+XeR54Ui1i/DVKE+PHbJMgkR n3UHHHOCxaaF1s2Wo/33JJivr9G17NLRTVB6iZFJSdE220ymwyAtcmq3LKkC8pBP Hn6X16/IHaBCBi1nNRIlxYGtNw1Arwfng4I/yiKQta0jv8cBH8WUWdh7AAKE4QGe KdUbAjNyWM1dshhm8MfK1SUS7R+rQxMX1dDGMNq5ENG3KnsTW8zWo7bq1OKqxq5w +OkW1idzGSCfywf01NupaRDY9DfEOZAuq52UXVRR125UscKoIBsDfsktzAEsbuPu v0Rv24zUeiucf7ATjJQXf14bpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCd3bzG9 KTAwqO4539/WAjt0FnJOMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm/nIjMDM2tNy8ZiviJE681PDDjGwMPac65MuBh+zkHCnK87b+MAM7 Pt35jEka5j6UiTTFnzNsyu2SvyZb30vYluEX9JT6uADba7qWa9f6JnO8QJEM96x4 Nup6sex90pq78SUQR6HamTc6MNEZU/91+poclEIzbGazoz6R6dWqhpn7kn6+ARlR huSVZ/+Pyrtp1v6cDCMEZDpv2qhjgTCWu/srlDtt8Rb6hxH1bF3n9OMdaPKM9Htm XgEwt2kTwDaq6DRv28BE5FI2NUC3/4lFWtph5juq14oAWKjbDDStEBJNL6Htksf+ GCVmpxaHNT89GwY4JuPvrynYhwzO7TFI -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:19 2025 by rpki-client