This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: g3nU4zSTzRzHuGAhtC2TLEYrj0f+/j+TSy96FWN1N1Y= Subject key identifier: 16:97:E5:56:8D:A7:49:85:21:B1:A8:97:9D:9A:60:82:E3:44:13:24 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 0136 Signing time: Thu 25 Dec 2025 03:35:39 +0000 Manifest this update: Thu 25 Dec 2025 03:35:39 +0000 Manifest next update: Thu 01 Jan 2026 03:35:39 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: e6PlTrjKUSVJ+/Ta4WMCnkmvqifRdtP/mJRa4Rq277A=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 03:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Dec 25 03:35:39 2025 GMT Not After : Jan 1 03:35:39 2026 GMT Subject: CN=694cb10b-39fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:45:fb:6e:f9:59:25:f5:05:4c:a8:43:ff: ae:70:dd:90:e5:75:a2:f4:74:e6:63:bc:df:55:79: b2:c4:67:6d:70:9f:55:74:ea:6a:73:0e:19:03:33: 51:b7:4b:f1:ac:24:7d:49:17:6b:7e:3f:eb:ef:22: c9:3c:ac:a3:21:8e:84:97:19:1e:a9:ac:a2:ba:98: 58:3e:05:48:27:dc:1f:d8:51:cf:6c:10:08:b8:9f: 58:90:89:03:1b:12:0c:ec:2f:ea:7e:42:95:6a:78: 95:5e:63:70:90:33:a6:ea:bb:92:9d:39:ea:e6:3c: 42:0b:2e:b7:62:15:4a:51:8b:30:d4:43:71:a1:20: 54:9a:e0:a5:9d:e1:12:1e:32:f4:47:96:16:59:38: e5:85:b6:6d:fb:6a:0e:f4:a6:6b:65:b7:2f:c2:a7: 10:d7:a1:e9:38:f9:8c:67:a1:0e:75:5e:01:45:6a: ec:d8:af:4b:55:98:80:ad:05:f6:02:e1:85:60:88: d9:bf:e3:db:b7:94:1e:6a:53:dc:33:26:4d:8d:95: eb:89:d5:f0:c0:e8:36:f8:33:d3:cd:c2:cc:61:05: 68:89:ed:90:c5:9a:2b:8a:e0:e3:0b:0c:a0:99:35: 8d:7f:d1:93:2b:7e:30:5d:d5:aa:aa:98:f9:ee:7f: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:97:E5:56:8D:A7:49:85:21:B1:A8:97:9D:9A:60:82:E3:44:13:24 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:17:36:53:aa:b9:58:37:ff:be:59:d4:8c:f8:a3:ce:1a:e6: 29:02:83:92:b8:12:2b:6a:87:0c:fc:fb:cb:24:d5:24:38:80: 82:54:94:9b:61:b7:09:45:0e:46:95:a4:30:f9:2e:90:49:c0: 77:81:7e:29:eb:d9:1a:d0:e8:74:f5:af:af:0e:82:c3:ca:53: 99:3a:62:e6:fa:49:9b:1d:c0:c1:db:8a:0f:84:70:f8:e3:77: c0:f7:eb:01:ca:16:2f:ae:ec:ec:3d:5d:e8:68:6d:d3:66:d8: e3:fd:9a:09:03:25:b8:17:1e:3a:e8:d8:5c:e9:3f:8b:10:02: b6:82:5b:a2:fd:7d:63:9b:b5:3d:6a:8f:f0:15:7f:40:94:9b: 40:d7:e9:3b:bb:49:e8:c3:48:5c:64:10:ef:db:a1:fa:be:58: 93:ba:3f:b5:7c:d2:5a:31:5c:ad:99:ad:d2:18:c2:a7:fd:78: 0f:ca:70:c6:f6:22:18:9d:f1:54:3c:9d:42:4a:d6:0d:a4:9e: 6f:dc:df:b2:40:b1:d0:35:0a:98:e9:e1:03:8d:db:82:92:c6: 24:0a:65:78:fb:af:55:cd:dc:2f:3d:13:c4:ac:60:fb:a7:dd: aa:f5:1b:9e:5d:01:52:e0:d1:cf:bc:db:68:8e:2b:4c:2b:12: 48:a9:20:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUxMjI1MDMzNTM5WhcNMjYwMTAxMDMzNTM5WjAYMRYwFAYD VQQDDA02OTRjYjEwYi0zOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu49F+275WSX1BUyoQ/+ucN2Q5XWi9HTmY7zfVXmyxGdtcJ9VdOpqcw4ZAzNR t0vxrCR9SRdrfj/r7yLJPKyjIY6ElxkeqayiuphYPgVIJ9wf2FHPbBAIuJ9YkIkD GxIM7C/qfkKVaniVXmNwkDOm6ruSnTnq5jxCCy63YhVKUYsw1ENxoSBUmuClneES HjL0R5YWWTjlhbZt+2oO9KZrZbcvwqcQ16HpOPmMZ6EOdV4BRWrs2K9LVZiArQX2 AuGFYIjZv+Pbt5QealPcMyZNjZXridXwwOg2+DPTzcLMYQVoie2QxZoriuDjCwyg mTWNf9GTK34wXdWqqpj57n/3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaX5VaN p0mFIbGol52aYILjRBMkMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfFzZTqrlYN/++WdSM+KPOGuYpAoOSuBIraocM/PvLJNUkOICCVJSb YbcJRQ5GlaQw+S6QScB3gX4p69ka0Oh09a+vDoLDylOZOmLm+kmbHcDB24oPhHD4 43fA9+sByhYvruzsPV3oaG3TZtjj/ZoJAyW4Fx466Nhc6T+LEAK2glui/X1jm7U9 ao/wFX9AlJtA1+k7u0now0hcZBDv26H6vliTuj+1fNJaMVytma3SGMKn/XgPynDG 9iIYnfFUPJ1CStYNpJ5v3N+yQLHQNQqY6eEDjduCksYkCmV4+69VzdwvPRPErGD7 p92q9RueXQFS4NHPvNtojitMKxJIqSD/ -----END CERTIFICATE-----Generated at Fri Dec 26 09:39:04 2025 by rpki-client