This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: rsHYiJA468xOQyuE/lyO1LKL5dFtklJhc4ZzVwGtkws= Subject key identifier: 14:59:1F:F7:0C:D9:84:3E:2F:EA:74:47:E1:4F:31:2E:78:30:0E:65 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D77 Signing time: Wed 24 Dec 2025 15:57:21 +0000 Manifest this update: Wed 24 Dec 2025 15:57:20 +0000 Manifest next update: Wed 31 Dec 2025 15:57:20 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: evOrBo0jRtwJfRez6oxq1oBE4DQOEFmCGbSHkEWd9r8=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: /prr9YJCzmst/EHhwq+RVn+bdS5HeKi3OTJCcnb49ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7564 (0x1d8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Dec 24 15:57:20 2025 GMT Not After : Dec 31 15:57:20 2025 GMT Subject: CN=694c0d61-70dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:61:49:29:e6:db:2e:e8:10:ec:cf:38:27: f7:4d:ab:7e:6e:ca:7f:70:bc:fe:8d:43:d3:9e:d7: c0:db:21:44:d0:a8:3d:e7:86:6e:a4:62:e0:a7:dd: 51:30:53:29:5c:3a:b8:20:a4:b1:b8:6c:79:d6:46: c2:f7:ef:7b:aa:5a:c0:97:1a:7e:86:b4:d4:a5:2f: 9b:94:72:3f:81:43:44:30:aa:f9:1c:ac:40:cd:b0: 0a:95:8e:11:3e:4e:df:95:46:08:5a:25:dc:97:42: 54:4c:54:e5:e7:ee:28:7d:f1:dc:3b:cc:8f:5a:99: 5f:db:1d:aa:57:06:94:26:16:8b:34:8b:20:c2:b0: 17:45:ee:f3:07:50:64:9b:5f:a5:80:a0:a7:99:e4: fb:6d:82:37:09:d7:f2:e1:ca:e1:bb:1e:fd:7a:c1: 38:30:bd:20:bb:1b:82:15:b8:63:cc:c1:e7:49:c7: b6:20:69:68:6e:7e:9c:eb:09:7f:14:49:af:a3:c3: 19:21:7b:ce:60:2d:fb:c1:ab:aa:4d:4b:80:55:e0: 96:7c:39:90:03:c8:0c:3d:0b:fb:ac:ac:63:11:21: d3:26:15:09:ca:29:6f:9f:0d:82:3f:08:bc:b9:e5: 07:3c:f9:07:9f:fc:f3:d9:0a:ed:29:6e:b0:68:3f: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:1F:F7:0C:D9:84:3E:2F:EA:74:47:E1:4F:31:2E:78:30:0E:65 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7b:1f:5b:e1:20:07:c6:3e:b4:a4:d5:06:6e:c1:ba:0b:9a: c3:d9:0c:b7:0e:ae:87:19:84:95:9d:6a:67:13:9c:fb:54:77: 8d:ff:50:dd:a6:08:3f:53:8f:82:9d:57:e9:7a:75:16:15:77: 53:da:85:41:07:ea:f1:9c:44:e3:b5:b9:39:c4:6a:79:a8:05: 2a:63:d8:80:78:88:83:37:07:e7:cb:b3:ef:15:82:f9:85:bd: 6e:21:34:6f:f0:01:ce:25:ce:19:cc:74:68:11:73:83:b0:8b: 1c:fd:6b:56:01:d4:20:c6:bf:75:30:d9:64:dd:ac:15:95:62: fd:35:50:bc:da:4f:10:f1:6f:a6:32:be:30:26:7f:11:02:fa: 5d:5a:a1:93:ec:d1:fa:ff:6e:41:49:ea:b7:58:90:f8:a3:78: 95:25:85:e6:2a:d6:23:e4:95:ee:33:b6:71:a7:8c:c3:85:6d: 80:4e:bc:ee:45:80:70:87:53:07:0c:74:dc:d9:63:be:89:21: aa:2e:2a:fe:f8:bc:e3:64:0b:d6:00:f3:13:ac:9c:0a:7e:54: 53:61:96:e9:13:f6:e2:44:06:aa:5d:06:d9:b1:e1:f9:4a:c0: fd:fd:6b:a2:79:2b:26:a0:87:ff:4d:44:2b:97:0c:d3:55:de: 2f:48:b1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUxMjI0MTU1NzIwWhcNMjUxMjMxMTU1NzIwWjAYMRYwFAYD VQQDDA02OTRjMGQ2MS03MGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0phSSnm2y7oEOzPOCf3Tat+bsp/cLz+jUPTntfA2yFE0Kg954ZupGLgp91R MFMpXDq4IKSxuGx51kbC9+97qlrAlxp+hrTUpS+blHI/gUNEMKr5HKxAzbAKlY4R Pk7flUYIWiXcl0JUTFTl5+4offHcO8yPWplf2x2qVwaUJhaLNIsgwrAXRe7zB1Bk m1+lgKCnmeT7bYI3Cdfy4crhux79esE4ML0guxuCFbhjzMHnSce2IGlobn6c6wl/ FEmvo8MZIXvOYC37wauqTUuAVeCWfDmQA8gMPQv7rKxjESHTJhUJyilvnw2CPwi8 ueUHPPkHn/zz2QrtKW6waD9nYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRZH/cM 2YQ+L+p0R+FPMS54MA5lMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjex9b4SAHxj60pNUGbsG6C5rD2Qy3Dq6HGYSVnWpnE5z7VHeN/1Dd pgg/U4+CnVfpenUWFXdT2oVBB+rxnETjtbk5xGp5qAUqY9iAeIiDNwfny7PvFYL5 hb1uITRv8AHOJc4ZzHRoEXODsIsc/WtWAdQgxr91MNlk3awVlWL9NVC82k8Q8W+m Mr4wJn8RAvpdWqGT7NH6/25BSeq3WJD4o3iVJYXmKtYj5JXuM7Zxp4zDhW2ATrzu RYBwh1MHDHTc2WO+iSGqLir++LzjZAvWAPMTrJwKflRTYZbpE/biRAaqXQbZseH5 SsD9/WuieSsmoIf/TUQrlwzTVd4vSLEE -----END CERTIFICATE-----Generated at Fri Dec 26 09:36:05 2025 by rpki-client