This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: MaOBMhxX0he75J03lVAcZlWHJRAGcj+M/YgzQGyK9RA= Subject key identifier: F4:E6:3C:12:9D:E0:76:F9:11:82:1C:34:7A:B6:25:97:72:43:52:D6 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 016C Signing time: Sun 21 Dec 2025 03:09:29 +0000 Manifest this update: Sun 21 Dec 2025 03:09:29 +0000 Manifest next update: Sun 28 Dec 2025 03:09:29 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: R82v2sqFu/7CeVAEFTcSCe7rlgUt7sBkONC7ySOOyLo=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Dec 21 03:09:29 2025 GMT Not After : Dec 28 03:09:29 2025 GMT Subject: CN=694764e9-d97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:fe:cf:96:3f:40:61:37:41:7c:6c:7f:96: ff:78:33:de:d0:42:74:79:be:46:89:75:18:7d:27: b0:93:54:3b:01:50:c2:0d:08:7b:22:2e:02:b0:5d: 08:f6:20:13:dd:5f:9d:50:13:cd:1d:1c:a7:62:61: 5d:07:be:a6:2b:c9:39:03:db:7f:2d:21:5d:3c:dd: 0e:3a:13:d9:50:0f:6e:b9:3a:04:29:8a:08:16:25: 43:29:fd:0b:60:b1:02:9d:26:3d:f0:1a:56:37:66: e5:dd:dd:ba:90:4c:d0:c3:2e:e5:3e:0d:61:27:d5: db:82:64:39:af:68:d9:91:9d:40:3a:61:38:3c:30: ae:85:59:3d:67:7b:c0:a7:b8:c2:44:7c:1b:2e:48: 59:3b:56:66:13:82:87:99:0c:9f:c7:2b:e3:16:5e: e8:8e:92:ec:18:7a:f4:74:a8:fe:d0:7a:25:fc:02: b6:79:4c:c6:a8:37:67:91:59:1f:56:46:c6:3f:6f: d3:35:ca:1f:70:80:ee:3f:ef:ee:75:3f:ce:d2:95: 10:63:9d:df:dd:ac:6e:05:c4:46:8c:19:1a:2e:62: 32:68:4a:5a:c6:65:4d:9c:0b:a8:9d:4d:a8:f1:1e: fc:c9:86:6a:97:76:9c:38:0f:8c:4b:b0:c6:a7:9e: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E6:3C:12:9D:E0:76:F9:11:82:1C:34:7A:B6:25:97:72:43:52:D6 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:08:f1:f8:3a:95:38:b9:74:c2:ef:38:11:f1:83:55:59:54: 1f:a0:4b:3e:c5:de:0d:b2:45:7b:7f:6f:9a:27:13:b3:bf:5b: 1f:1c:3f:44:c6:b2:14:ea:44:66:a4:cf:8c:17:cf:cc:5c:a5: f9:b8:63:d7:c1:8d:5f:50:8b:73:bc:2f:17:7a:e7:be:f7:af: db:c5:3c:a9:c9:fd:51:85:6d:30:56:f7:6d:ec:04:e7:f4:45: 49:9d:ae:66:55:62:a2:56:e1:dd:66:36:36:ec:f0:83:96:49: c2:ae:6b:45:bf:50:1a:34:02:86:03:d5:23:b7:25:aa:33:7e: 5f:4e:54:7e:7f:22:0f:05:bb:6a:31:ed:d9:4b:2c:5a:e6:12: 2e:8e:b1:1a:c8:a1:d4:9d:0a:f7:14:a0:95:fd:f4:1e:25:2f: 0a:9e:29:96:1b:3c:5e:15:f2:ee:04:10:10:37:ef:4c:52:72: db:63:ef:50:f7:0a:2b:26:50:f3:e6:33:14:1f:1f:a6:5f:e0: b7:50:c0:f9:e8:8f:2a:e3:89:97:8a:15:a9:4d:56:08:d9:4c: 5b:41:c8:a4:f9:be:b9:c8:1d:d9:3d:16:fa:ba:76:56:14:12: b1:a6:b1:34:db:ea:74:6d:06:9c:dc:2c:b2:69:e0:f0:04:3b: 6a:d8:20:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUxMjIxMDMwOTI5WhcNMjUxMjI4MDMwOTI5WjAYMRYwFAYD VQQDDA02OTQ3NjRlOS1kOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCP+z5Y/QGE3QXxsf5b/eDPe0EJ0eb5GiXUYfSewk1Q7AVDCDQh7Ii4CsF0I 9iAT3V+dUBPNHRynYmFdB76mK8k5A9t/LSFdPN0OOhPZUA9uuToEKYoIFiVDKf0L YLECnSY98BpWN2bl3d26kEzQwy7lPg1hJ9XbgmQ5r2jZkZ1AOmE4PDCuhVk9Z3vA p7jCRHwbLkhZO1ZmE4KHmQyfxyvjFl7ojpLsGHr0dKj+0Hol/AK2eUzGqDdnkVkf VkbGP2/TNcofcIDuP+/udT/O0pUQY53f3axuBcRGjBkaLmIyaEpaxmVNnAuonU2o 8R78yYZql3acOA+MS7DGp54BEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTmPBKd 4Hb5EYIcNHq2JZdyQ1LWMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCCPH4OpU4uXTC7zgR8YNVWVQfoEs+xd4NskV7f2+aJxOzv1sfHD9E xrIU6kRmpM+MF8/MXKX5uGPXwY1fUItzvC8Xeue+96/bxTypyf1RhW0wVvdt7ATn 9EVJna5mVWKiVuHdZjY27PCDlknCrmtFv1AaNAKGA9UjtyWqM35fTlR+fyIPBbtq Me3ZSyxa5hIujrEayKHUnQr3FKCV/fQeJS8KnimWGzxeFfLuBBAQN+9MUnLbY+9Q 9worJlDz5jMUHx+mX+C3UMD56I8q44mXihWpTVYI2UxbQcik+b65yB3ZPRb6unZW FBKxprE02+p0bQac3CyyaeDwBDtq2CBV -----END CERTIFICATE-----Generated at Mon Dec 22 02:03:47 2025 by rpki-client