This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: 9kr9IKUSUo8CmLB1FEkpjDoGDticghh9BX0a2X3bYZY= Subject key identifier: E4:2C:3B:21:53:6B:BB:1E:A8:9E:14:05:37:F6:DC:24:94:1F:EC:2B Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 0908 Signing time: Sun 28 Dec 2025 20:02:08 +0000 Manifest this update: Sun 28 Dec 2025 20:02:08 +0000 Manifest next update: Sun 04 Jan 2026 20:02:08 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: fZ1Z4uhE/ZYiGtlt08B96fMTwMzscnGPcHIkf1eUB/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 20:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Dec 28 20:02:08 2025 GMT Not After : Jan 4 20:02:08 2026 GMT Subject: CN=69518cc0-d8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:85:c0:fe:34:79:5a:21:96:1e:41:b6:80: 25:83:e6:43:50:9a:30:3a:88:82:0d:39:93:59:fa: c1:05:db:3d:18:3b:c2:81:10:85:42:60:f1:89:a2: 7b:2c:3e:7a:80:5b:42:47:10:a2:e2:df:81:5c:00: f9:0e:0b:7d:a7:c5:a8:62:c7:5a:33:26:6e:16:9b: 09:45:ac:7b:97:5e:16:2f:1b:e2:f2:6b:b2:0c:02: 4e:6b:2b:87:e2:b0:e6:ba:88:b2:11:4b:fa:29:1e: f0:17:c7:b5:84:b9:fa:6f:f4:62:7f:c2:c9:4d:b4: 9b:91:c0:50:3d:40:01:8c:c1:c6:6f:4f:ff:de:7e: 8f:ee:14:52:5f:be:38:0c:d3:04:af:49:25:a7:81: 0d:31:97:a3:15:9f:ef:32:7f:bd:f4:f2:d6:c6:76: 84:3c:5b:fc:7f:38:05:4f:0b:e3:09:2d:04:e2:b0: 41:6c:0f:22:b0:4d:42:4d:99:33:6e:75:5b:39:85: 61:0c:e9:63:d7:fc:22:68:4a:a1:10:60:5c:2c:f2: d2:3d:57:64:74:35:b7:3b:74:c6:2d:6b:07:a7:bd: cb:5f:77:09:89:92:c0:24:3b:47:1e:9b:fd:60:4f: 70:9a:3d:93:aa:81:61:1b:40:a8:fa:a4:71:d5:db: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:3B:21:53:6B:BB:1E:A8:9E:14:05:37:F6:DC:24:94:1F:EC:2B X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:98:28:2e:e3:93:30:db:4e:0c:6b:61:a0:15:5a:c2:66:f8: 25:93:77:97:23:a7:e9:92:b6:0e:94:78:92:c3:23:75:26:5e: 0d:0c:58:3e:1a:48:6e:a4:f9:54:e1:e1:ab:32:69:53:e0:92: 69:db:6e:0a:5d:4f:bf:eb:3f:53:bd:d9:da:8c:9e:a3:cf:34: e7:b9:73:a3:36:99:72:a3:96:da:f1:2b:4f:d9:96:d4:61:83: 94:e2:1d:6d:50:0a:05:21:b0:0a:a2:70:f8:21:de:89:a5:a0: f8:52:a3:ab:9c:e9:4f:a9:5a:22:3f:95:ef:8c:24:b4:9f:cf: 37:66:36:73:9e:a3:e8:ea:88:2f:de:69:27:32:40:0f:23:29: 64:83:30:81:b0:86:8b:47:16:6f:38:ff:c9:66:00:fd:b5:0e: a7:3c:be:34:0e:7d:e4:1f:bd:79:44:b9:77:8c:ab:99:ed:2d: d0:f7:73:97:be:96:e1:53:0e:34:04:62:2d:c0:bc:1a:14:42: 18:0b:bc:44:88:7c:df:c7:65:26:2c:fd:2b:17:91:61:01:69: 22:17:87:98:5a:e4:64:1e:31:6f:b1:15:8c:1b:bc:e3:16:15: 29:1e:ef:45:2b:8f:1a:68:4b:3c:db:69:86:6d:ec:34:d2:7c: 89:76:45:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUxMjI4MjAwMjA4WhcNMjYwMTA0MjAwMjA4WjAYMRYwFAYD VQQDDA02OTUxOGNjMC1kOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJCFwP40eVohlh5BtoAlg+ZDUJowOoiCDTmTWfrBBds9GDvCgRCFQmDxiaJ7 LD56gFtCRxCi4t+BXAD5Dgt9p8WoYsdaMyZuFpsJRax7l14WLxvi8muyDAJOayuH 4rDmuoiyEUv6KR7wF8e1hLn6b/Rif8LJTbSbkcBQPUABjMHGb0//3n6P7hRSX744 DNMEr0klp4ENMZejFZ/vMn+99PLWxnaEPFv8fzgFTwvjCS0E4rBBbA8isE1CTZkz bnVbOYVhDOlj1/wiaEqhEGBcLPLSPVdkdDW3O3TGLWsHp73LX3cJiZLAJDtHHpv9 YE9wmj2TqoFhG0Co+qRx1duQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQsOyFT a7seqJ4UBTf23CSUH+wrMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPmCgu45Mw204Ma2GgFVrCZvglk3eXI6fpkrYOlHiSwyN1Jl4NDFg+ GkhupPlU4eGrMmlT4JJp224KXU+/6z9TvdnajJ6jzzTnuXOjNplyo5ba8StP2ZbU YYOU4h1tUAoFIbAKonD4Id6JpaD4UqOrnOlPqVoiP5XvjCS0n883ZjZznqPo6ogv 3mknMkAPIylkgzCBsIaLRxZvOP/JZgD9tQ6nPL40Dn3kH715RLl3jKuZ7S3Q93OX vpbhUw40BGItwLwaFEIYC7xEiHzfx2UmLP0rF5FhAWkiF4eYWuRkHjFvsRWMG7zj FhUpHu9FK48aaEs822mGbew00nyJdkWH -----END CERTIFICATE-----Generated at Tue Dec 30 09:06:28 2025 by rpki-client