This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: W0/kK/qDrnAb56PcjcWaLSObvudFrNVLA9M+KxDkLVU= Subject key identifier: E8:35:75:E0:B5:3F:86:E9:37:7E:15:E9:D3:74:41:19:7E:F8:08:19 Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2FDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2FB0 Signing time: Sat 20 Dec 2025 15:21:33 +0000 Manifest this update: Sat 20 Dec 2025 15:21:33 +0000 Manifest next update: Sat 27 Dec 2025 15:21:33 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: xuKaeKbw11giyJ1vj7lGkG9rFb+B5ViJNgOJr3pMlXM=) 2: 502355A2B13D11E59299870AC4F9AE02.roa (hash: odNG2CTuocV+iFzm6p+rsTOH7z1wG0je4WOLqIbugr8=) 3: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zwQt0U0MX29MPa93PKs9TYXFxS+49eXVEwZ6lR+uSHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12253 (0x2fdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Dec 20 15:21:33 2025 GMT Not After : Dec 27 15:21:33 2025 GMT Subject: CN=6946befd-cd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:5e:31:e6:eb:38:fa:77:7c:3d:6d:a5:34: 7f:5c:5a:87:ac:c2:79:77:ba:e5:f6:88:d4:1d:9f: 15:fe:39:cd:9e:eb:a5:a1:8f:e6:23:d2:03:84:2a: 5b:a4:9d:fb:2a:6c:97:b0:d5:b1:47:d1:c9:11:8f: e4:f8:57:aa:bc:a5:42:eb:f7:b8:9b:7c:94:c7:95: 41:ca:31:8c:0e:84:7f:ae:be:55:e8:fa:23:89:9d: f9:68:88:35:93:22:f8:ca:57:20:d2:47:b6:c7:be: 41:2d:ed:69:0f:a7:51:0c:11:e1:dd:dc:51:94:37: 27:4a:4b:f7:58:16:fa:21:04:69:39:6b:b0:1d:69: 22:b6:b1:cf:dc:79:77:75:9f:c5:08:c2:0f:c3:55: 29:bd:e4:21:5d:84:72:9b:81:54:ee:5a:74:e8:c9: 0b:16:e4:98:11:76:d4:9c:fb:f1:ca:0a:3f:a1:6e: 82:bd:d1:99:c7:15:ee:53:ec:e8:1b:ab:46:cb:67: 05:7e:a8:89:c9:07:c0:ee:f3:1f:96:63:ee:b7:85: 53:17:eb:53:62:24:4b:f8:7d:1b:42:a3:ac:6f:e1: d1:54:5c:e3:47:03:81:81:61:ec:43:44:ab:58:10: 7f:b2:5c:f9:f0:f0:15:82:ed:28:e0:0f:16:e6:6f: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:35:75:E0:B5:3F:86:E9:37:7E:15:E9:D3:74:41:19:7E:F8:08:19 X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7e:4d:01:36:72:48:1c:ed:bd:d5:05:1e:61:e8:22:a1:1c: 57:97:2f:40:3a:ed:ae:1a:83:a4:67:48:59:54:3e:69:ce:29: cd:78:2b:74:ae:31:8a:60:9b:ba:d0:c2:d8:e1:fd:6a:82:64: 32:3c:11:63:c6:9d:ac:69:fc:d7:d6:09:eb:39:de:d3:24:66: a7:56:1d:a1:d9:b9:57:1a:99:e9:80:39:e5:74:b1:98:bd:26: 57:1d:be:47:27:e7:73:da:3e:0f:33:82:2f:12:00:c3:57:a4: 36:f8:7d:2c:ac:9a:59:2d:c2:16:12:65:fc:7a:ed:40:d1:94: a1:7a:4b:f7:55:84:b8:63:c0:f4:91:20:53:0c:2f:ee:8a:3f: 3d:b7:09:2e:6d:11:48:1b:2b:a0:be:70:06:e4:e5:6e:67:29: 3e:d9:f7:e0:70:63:fc:14:6e:92:49:cc:75:3d:e6:85:33:30: 75:42:9d:6f:38:bc:59:93:6b:ca:17:58:3b:4f:36:3f:35:6c: ee:58:0e:97:69:14:29:72:d4:d3:f6:fe:1e:38:fe:55:95:5a: f4:06:f0:b8:ba:d9:98:2e:be:75:cd:c2:a6:d0:08:63:d6:fc: 41:4c:ed:71:63:10:be:b7:2c:7e:9c:70:9e:29:eb:54:1b:c4: 0d:07:ba:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUxMjIwMTUyMTMzWhcNMjUxMjI3MTUyMTMzWjAYMRYwFAYD VQQDDA02OTQ2YmVmZC1jZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfleMebrOPp3fD1tpTR/XFqHrMJ5d7rl9ojUHZ8V/jnNnuuloY/mI9IDhCpb pJ37KmyXsNWxR9HJEY/k+FeqvKVC6/e4m3yUx5VByjGMDoR/rr5V6PojiZ35aIg1 kyL4ylcg0ke2x75BLe1pD6dRDBHh3dxRlDcnSkv3WBb6IQRpOWuwHWkitrHP3Hl3 dZ/FCMIPw1UpveQhXYRym4FU7lp06MkLFuSYEXbUnPvxygo/oW6CvdGZxxXuU+zo G6tGy2cFfqiJyQfA7vMflmPut4VTF+tTYiRL+H0bQqOsb+HRVFzjRwOBgWHsQ0Sr WBB/slz58PAVgu0o4A8W5m9USQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg1deC1 P4bpN34V6dN0QRl++AgZMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdfk0BNnJIHO291QUeYegioRxXly9AOu2uGoOkZ0hZVD5pzinNeCt0 rjGKYJu60MLY4f1qgmQyPBFjxp2safzX1gnrOd7TJGanVh2h2blXGpnpgDnldLGY vSZXHb5HJ+dz2j4PM4IvEgDDV6Q2+H0srJpZLcIWEmX8eu1A0ZShekv3VYS4Y8D0 kSBTDC/uij89twkubRFIGyugvnAG5OVuZyk+2ffgcGP8FG6SScx1PeaFMzB1Qp1v OLxZk2vKF1g7TzY/NWzuWA6XaRQpctTT9v4eOP5VlVr0BvC4utmYLr51zcKm0Ahj 1vxBTO1xYxC+tyx+nHCeKetUG8QNB7r6 -----END CERTIFICATE-----Generated at Mon Dec 22 06:15:23 2025 by rpki-client