This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: NjFKhRPLYNFkjdxIKmpYaZruHPC+93fJrXtR3FVn3SQ= Subject key identifier: 2C:E3:79:6B:F7:B0:16:21:87:60:95:CB:8A:29:A2:72:25:8B:2A:D7 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 5C Signing time: Fri 19 Dec 2025 06:15:14 +0000 Manifest this update: Fri 19 Dec 2025 06:15:14 +0000 Manifest next update: Fri 26 Dec 2025 06:15:14 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: 7AXFTDbE89CsYW96XTSQhMKiZF4r3kjiCP2sB/ahAz0=) 2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Dec 19 06:15:14 2025 GMT Not After : Dec 26 06:15:14 2025 GMT Subject: CN=6944ed72-7b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:98:a3:7a:5e:37:76:ea:f5:ca:12:1f:52:0a: d3:e1:d4:1b:81:df:77:c7:76:9a:c2:45:d4:0d:67: b7:3b:46:80:de:03:a6:2b:b9:f8:a5:1f:07:65:43: 8b:e9:48:c1:17:5e:cb:b6:04:b8:d0:07:45:a0:8a: e9:28:3a:ee:af:0c:65:eb:54:88:45:be:e5:3e:ae: c8:9f:ee:c6:2f:b9:69:b1:32:1f:5e:03:ae:16:ef: 09:24:b0:70:46:3b:9d:35:24:d6:03:ea:13:de:0f: 16:f4:b9:72:28:b0:40:99:a2:17:7c:20:77:09:db: 9a:1d:97:44:fa:9f:1d:45:68:b9:58:97:26:68:9d: 3d:08:cf:90:7f:02:d5:9f:13:08:a2:61:0b:0f:7d: 25:aa:f7:0b:cd:37:4e:47:cc:e9:4c:e9:75:6b:1d: 58:0f:d3:55:54:2f:b8:fa:b9:dd:47:15:0f:2e:47: a8:4e:78:4f:91:c3:29:79:a2:d2:36:63:58:cd:50: a6:9b:21:b6:6b:db:2f:ff:02:6c:81:bd:f7:8a:5c: b9:11:0e:4d:5d:74:91:ed:12:2c:66:ec:70:df:da: 8f:ad:45:42:21:eb:0f:f8:82:22:2f:d2:45:c1:3f: 53:f7:70:af:b8:3c:9f:c9:e5:ea:21:0d:80:7c:ea: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E3:79:6B:F7:B0:16:21:87:60:95:CB:8A:29:A2:72:25:8B:2A:D7 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:10:2a:6c:cb:62:c2:f7:2b:d5:c6:06:c9:df:4b:3b:ef:b4: 05:19:10:0c:b3:10:81:ce:8b:7d:9c:1e:f1:87:36:7c:df:2b: 31:d0:3f:f6:0d:70:bf:ec:e2:65:a4:c1:30:67:9a:7d:27:b8: 91:f0:3f:50:f1:9f:fd:3e:67:a8:49:cd:94:96:49:af:55:10: 76:f8:cb:d9:0a:63:80:59:51:40:62:68:ea:20:e8:f2:fd:7f: a3:fc:55:fe:be:78:f2:70:b2:ba:a9:36:22:86:2d:2e:a4:9d: 96:83:48:49:95:44:6f:d7:c5:7b:a5:a0:a3:9f:3f:ad:61:9c: c2:b2:80:1c:a2:69:1e:4e:ce:1a:52:9b:5c:32:75:73:24:1d: 6f:b9:45:ae:c5:4b:25:51:16:df:81:81:f9:e5:15:0f:5d:8e: 5b:82:b9:f1:1b:f1:0f:40:74:14:47:d3:1e:85:d2:ec:4f:b0: e7:f5:8c:b5:7d:f3:62:26:9c:0b:ca:06:87:9f:b2:f8:b1:73: e5:96:52:75:ef:18:c5:ec:1e:41:ad:17:ad:80:4d:89:80:7b: 81:bd:52:ba:9b:c1:03:5b:3e:86:a5:98:6b:e0:7a:f4:60:05: e4:12:73:48:c2:4d:35:f9:08:51:86:10:3d:e9:c3:72:33:ce: 51:3a:60:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTEyMTkwNjE1MTRaFw0yNTEyMjYwNjE1MTRaMBgxFjAUBgNV BAMMDTY5NDRlZDcyLTdiMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkmKN6Xjd26vXKEh9SCtPh1BuB33fHdprCRdQNZ7c7RoDeA6YrufilHwdlQ4vp SMEXXsu2BLjQB0WgiukoOu6vDGXrVIhFvuU+rsif7sYvuWmxMh9eA64W7wkksHBG O501JNYD6hPeDxb0uXIosECZohd8IHcJ25odl0T6nx1FaLlYlyZonT0Iz5B/AtWf EwiiYQsPfSWq9wvNN05HzOlM6XVrHVgP01VUL7j6ud1HFQ8uR6hOeE+Rwyl5otI2 Y1jNUKabIbZr2y//AmyBvfeKXLkRDk1ddJHtEixm7HDf2o+tRUIh6w/4giIv0kXB P1P3cK+4PJ/J5eohDYB86oOPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULON5a/ew FiGHYJXLiimiciWLKtcwHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACMQKmzLYsL3K9XGBsnfSzvvtAUZEAyzEIHOi32cHvGHNnzfKzHQP/YN cL/s4mWkwTBnmn0nuJHwP1Dxn/0+Z6hJzZSWSa9VEHb4y9kKY4BZUUBiaOog6PL9 f6P8Vf6+ePJwsrqpNiKGLS6knZaDSEmVRG/XxXuloKOfP61hnMKygByiaR5OzhpS m1wydXMkHW+5Ra7FSyVRFt+BgfnlFQ9djluCufEb8Q9AdBRH0x6F0uxPsOf1jLV9 82ImnAvKBoefsvixc+WWUnXvGMXsHkGtF62ATYmAe4G9UrqbwQNbPoalmGvgevRg BeQSc0jCTTX5CFGGED3pw3IzzlE6YC8= -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:29 2025 by rpki-client