This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: MwKOd1zt7KJd6iy8yfW0Bp2psHhQb+ytl1n4mUGlN4w= Subject key identifier: 0E:55:B5:8F:54:F4:5C:63:2A:83:B1:53:03:18:F1:D2:9F:2B:99:78 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A84 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A84 Signing time: Tue 30 Dec 2025 15:28:58 +0000 Manifest this update: Tue 30 Dec 2025 15:28:58 +0000 Manifest next update: Tue 06 Jan 2026 15:28:58 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: wZzC9RdocjRbmqDgOaLN+X1x59JzQ53pm6p3Y/KhB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10884 (0x2a84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Dec 30 15:28:58 2025 GMT Not After : Jan 6 15:28:58 2026 GMT Subject: CN=6953efba-1089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:a5:5b:d6:90:84:5a:42:0c:4c:4a:d6:76: 5c:3a:3a:5d:88:ce:51:26:96:8e:b4:f0:2a:9a:9e: 41:a0:2b:30:40:0b:9d:be:e6:12:e6:8b:99:d5:ab: cc:70:c9:87:b8:48:70:38:41:84:18:1c:13:6b:cd: 49:3a:d4:3d:a8:40:2a:d8:08:81:03:97:1d:b3:34: 38:7f:78:60:9c:19:ba:c5:ad:e1:2d:9f:e9:c2:c5: 78:f4:e5:e0:ca:de:96:af:f3:58:b9:c5:37:f2:1a: b9:53:47:b5:03:47:2c:c4:07:55:a7:bf:a1:13:88: fb:87:4c:5f:15:ca:a0:4f:18:a8:e3:54:82:44:4b: 3b:ae:89:dd:b5:ee:65:54:a3:70:b7:9a:76:51:1c: de:07:43:64:30:0a:ef:75:40:40:cb:26:79:98:5b: 8e:78:19:ef:91:a0:de:44:06:bb:ba:f4:5d:4d:f3: 1f:66:29:7c:c5:4d:bb:dc:c7:df:f0:5c:f7:12:2e: 73:5f:1c:7b:e7:91:78:37:01:b3:98:c4:6b:df:35: bb:e6:7d:44:a8:cd:92:62:47:be:fb:5c:c3:6b:1c: 02:a1:2b:73:8a:94:cc:4e:5b:8a:c9:50:19:d1:4e: b0:b7:bf:95:26:1a:92:03:4c:52:30:69:31:de:64: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:55:B5:8F:54:F4:5C:63:2A:83:B1:53:03:18:F1:D2:9F:2B:99:78 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c9:26:2b:00:d7:fc:5b:8f:30:65:3d:c3:c5:d3:d0:57:78: 96:9d:c0:5f:dc:11:3c:6c:4e:d1:97:84:e2:a9:8a:eb:46:e3: 3c:49:ba:e4:3a:11:25:ca:fb:f9:ea:a2:16:00:b8:41:f7:66: 68:87:63:a8:00:20:5f:e2:c3:b4:b1:77:64:bf:bb:16:b8:ea: 69:22:36:a1:ed:21:2c:e0:45:9b:98:10:24:0c:c9:71:b7:98: d5:f7:ba:34:d6:0f:45:c3:ea:8b:03:27:2e:c7:20:66:4e:24: 86:8c:67:3a:16:8e:ad:5a:0a:d8:f3:33:38:d4:c2:5c:d2:65: 1a:1c:fa:f5:e4:57:dd:21:27:d2:4e:96:56:c8:0a:38:1a:3f: 04:39:18:a6:f9:4d:38:16:4e:74:47:13:8f:0c:ae:9c:7c:a7: 9d:db:ad:ba:ba:71:c3:fa:e8:ab:1c:02:7f:2d:ec:6b:ca:68: b8:52:3c:ed:cd:34:57:67:68:6e:c6:f0:1c:e3:26:ea:dd:48: ae:4e:3d:2c:2a:a2:b7:b4:a7:b7:60:b9:7c:73:61:59:54:23: e0:eb:6a:03:96:31:4c:9e:18:ba:62:c4:f1:d3:b1:a6:b8:60: f5:58:e3:3b:3f:a2:fa:72:b1:e3:eb:22:79:3e:d5:f2:1f:e9: 0a:50:6d:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUxMjMwMTUyODU4WhcNMjYwMTA2MTUyODU4WjAYMRYwFAYD VQQDDA02OTUzZWZiYS0xMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy76lW9aQhFpCDExK1nZcOjpdiM5RJpaOtPAqmp5BoCswQAudvuYS5ouZ1avM cMmHuEhwOEGEGBwTa81JOtQ9qEAq2AiBA5cdszQ4f3hgnBm6xa3hLZ/pwsV49OXg yt6Wr/NYucU38hq5U0e1A0csxAdVp7+hE4j7h0xfFcqgTxio41SCREs7rondte5l VKNwt5p2URzeB0NkMArvdUBAyyZ5mFuOeBnvkaDeRAa7uvRdTfMfZil8xU273Mff 8Fz3Ei5zXxx755F4NwGzmMRr3zW75n1EqM2SYke++1zDaxwCoStzipTMTluKyVAZ 0U6wt7+VJhqSA0xSMGkx3mQTqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5VtY9U 9FxjKoOxUwMY8dKfK5l4MB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZySYrANf8W48wZT3DxdPQV3iWncBf3BE8bE7Rl4TiqYrrRuM8Sbrk OhElyvv56qIWALhB92Zoh2OoACBf4sO0sXdkv7sWuOppIjah7SEs4EWbmBAkDMlx t5jV97o01g9Fw+qLAycuxyBmTiSGjGc6Fo6tWgrY8zM41MJc0mUaHPr15FfdISfS TpZWyAo4Gj8EORim+U04Fk50RxOPDK6cfKed2626unHD+uirHAJ/Lexrymi4Ujzt zTRXZ2huxvAc4ybq3UiuTj0sKqK3tKe3YLl8c2FZVCPg62oDljFMnhi6YsTx07Gm uGD1WOM7P6L6crHj6yJ5PtXyH+kKUG07 -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:35 2025 by rpki-client