This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: Dijt5CMwNZes5sxWrE+402Psn6OeOeaGx2kDeHofnfo= Subject key identifier: 69:6C:B4:9E:49:14:AC:96:42:E4:A4:B9:AD:2A:D8:62:A4:CC:BC:AB Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2671 Signing time: Sat 06 Dec 2025 15:57:45 +0000 Manifest this update: Sat 06 Dec 2025 15:57:45 +0000 Manifest next update: Sat 13 Dec 2025 15:57:45 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: efKfB/ms2nvatZka7XXc4c0vi7idIJk+jCRwA/n9+bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Dec 6 15:57:45 2025 GMT Not After : Dec 13 15:57:45 2025 GMT Subject: CN=69345279-9a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:5c:64:c3:91:ef:ce:90:ed:f2:58:25:34: 5d:ff:63:8a:f2:87:32:d4:1c:17:72:c4:9b:36:1e: 7c:a1:57:3d:61:4b:8f:db:3b:d8:9c:12:31:6c:47: ae:0b:49:19:a1:b9:06:49:4f:a5:0e:ad:e7:d1:7f: f4:25:39:36:44:39:a2:42:09:a7:41:f1:25:26:4b: 1b:79:f2:04:61:b8:a6:c4:1a:7d:18:23:0d:60:78: 63:b2:67:af:64:ca:54:bb:2b:f5:58:99:ed:db:84: 75:b5:cd:da:32:dd:14:b1:67:ee:d0:3a:98:79:e4: 13:2e:8d:25:ed:84:5b:e6:14:d2:46:f9:1a:fc:aa: c2:9e:4e:97:f5:db:ba:61:86:ca:a6:6d:ce:1e:62: 85:e6:10:05:91:d5:50:ed:fe:94:37:b3:12:fd:dd: 8b:de:ca:82:7d:3c:a2:4a:99:04:7b:1a:e1:e7:97: 3d:b7:b7:35:e5:f9:91:19:6b:c0:5c:43:f0:8b:ae: 44:55:1d:8d:10:08:f4:f8:3a:ab:d6:4d:73:ee:a1: d5:04:ee:cc:e0:1a:56:62:2c:e3:3c:30:c7:8e:82: ae:6e:0c:63:93:09:95:42:e8:2a:f4:c1:13:38:e1: 8c:aa:2e:f5:d3:a6:0b:e5:ef:4c:98:e3:56:f7:e4: 3f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6C:B4:9E:49:14:AC:96:42:E4:A4:B9:AD:2A:D8:62:A4:CC:BC:AB X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2b:4e:79:a9:8d:9f:ef:ee:13:db:83:6c:a0:d1:40:7e:75: a8:1f:f8:8c:12:ad:1c:cf:63:06:6a:c8:17:f8:96:e6:35:f9: 6b:8d:5f:e2:a5:3d:d3:92:8c:0f:bf:ce:7c:03:8c:f9:28:55: 5b:38:23:a7:71:0d:2a:1e:ad:79:eb:6d:1c:c8:d4:7f:0d:f3: 96:22:b1:7e:73:48:8a:a7:d2:b3:4d:ca:cb:13:e6:5e:f0:8e: a2:1f:69:96:d5:04:ae:00:94:d6:10:b0:7e:56:a1:80:36:69: 28:20:85:70:d6:d5:50:12:37:24:7e:1f:a5:2c:78:8a:c7:15: 6f:d8:1c:05:c0:5e:ba:5e:18:3f:8c:3e:34:98:f1:d6:15:31: eb:2d:1f:6c:a9:e1:d3:db:03:c5:da:68:4e:be:82:0d:a7:b2: 83:3c:fe:5e:16:ef:7d:d8:a2:af:9a:7d:2d:13:bf:63:a1:da: 0b:f0:d3:50:78:d0:32:0c:1e:54:03:b8:f5:1b:95:32:ac:1a: 23:02:d2:c7:35:82:1b:10:a8:fa:31:3b:79:1a:9b:3c:06:76: 2b:04:c3:db:44:0f:26:1b:25:f1:21:e9:d5:89:64:99:2c:4e: 60:bc:9c:6a:0a:2e:2d:7f:94:06:d8:95:b2:a0:3a:a1:0e:a2: 1b:6f:68:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUxMjA2MTU1NzQ1WhcNMjUxMjEzMTU1NzQ1WjAYMRYwFAYD VQQDEw02OTM0NTI3OS05YTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7lcZMOR786Q7fJYJTRd/2OK8ocy1BwXcsSbNh58oVc9YUuP2zvYnBIxbEeu C0kZobkGSU+lDq3n0X/0JTk2RDmiQgmnQfElJksbefIEYbimxBp9GCMNYHhjsmev ZMpUuyv1WJnt24R1tc3aMt0UsWfu0DqYeeQTLo0l7YRb5hTSRvka/KrCnk6X9du6 YYbKpm3OHmKF5hAFkdVQ7f6UN7MS/d2L3sqCfTyiSpkEexrh55c9t7c15fmRGWvA XEPwi65EVR2NEAj0+Dqr1k1z7qHVBO7M4BpWYizjPDDHjoKubgxjkwmVQugq9MET OOGMqi7106YL5e9MmONW9+Q/PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlstJ5J FKyWQuSkua0q2GKkzLyrMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVK055qY2f7+4T24NsoNFAfnWoH/iMEq0cz2MGasgX+JbmNflrjV/i pT3TkowPv858A4z5KFVbOCOncQ0qHq15620cyNR/DfOWIrF+c0iKp9KzTcrLE+Ze 8I6iH2mW1QSuAJTWELB+VqGANmkoIIVw1tVQEjckfh+lLHiKxxVv2BwFwF66Xhg/ jD40mPHWFTHrLR9sqeHT2wPF2mhOvoINp7KDPP5eFu992KKvmn0tE79jodoL8NNQ eNAyDB5UA7j1G5UyrBojAtLHNYIbEKj6MTt5Gps8BnYrBMPbRA8mGyXxIenViWSZ LE5gvJxqCi4tf5QG2JWyoDqhDqIbb2ha -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:41 2025 by rpki-client