This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: NAO+IdhSjNASUvwV4Y3zP9HrG1/qEBgYUSHm4BAGTHQ= Subject key identifier: E4:54:91:D8:13:83:A2:CA:DB:E8:89:9B:28:03:28:C2:FE:7F:1F:CD Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 01C0 Signing time: Fri 05 Dec 2025 01:15:56 +0000 Manifest this update: Fri 05 Dec 2025 01:15:55 +0000 Manifest next update: Fri 12 Dec 2025 01:15:55 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: D2QtsPXq2GBVAAceYMvSI4TS9pzM+woGoiRq82AuyRw=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Dec 5 01:15:55 2025 GMT Not After : Dec 12 01:15:55 2025 GMT Subject: CN=6932324b-3336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:ca:ad:59:2a:29:4e:13:b1:f6:93:f9:16: 6e:ec:e3:5f:a1:9d:4b:5f:64:06:1e:40:71:54:ef: a4:d2:c5:ae:17:a0:70:1d:43:34:41:30:3f:f6:7f: dd:7a:1e:bd:90:0a:2a:2c:14:8d:d8:76:c0:d0:f5: df:bb:96:db:54:6e:8d:f3:90:d0:bb:68:76:53:17: e0:33:e6:e6:2e:88:59:e8:89:41:c1:cc:12:a4:1e: 4f:e3:88:e5:bb:bf:de:0c:d9:d4:3e:a1:49:ae:8f: 9d:f0:e6:4d:f6:35:7d:0a:b8:08:c8:06:28:ea:95: d9:0c:d1:d7:84:c1:f8:7a:bc:61:2e:56:12:ab:81: 21:eb:44:57:bd:77:4f:3a:e4:85:60:bd:f6:26:43: b5:7e:bb:55:7f:9f:f3:33:81:e8:b7:35:7d:d8:be: d8:0b:01:a4:4e:0f:0c:3f:00:6e:d4:62:f0:09:67: a3:c4:93:39:52:a9:ea:f8:e2:e0:8f:34:db:75:0f: 66:46:b5:82:97:f0:fb:9a:e3:73:c1:52:b8:91:d5: 84:c6:db:30:d7:d5:83:56:bd:45:77:bd:a3:e7:d6: b3:43:01:53:1c:c8:7f:82:eb:dc:54:13:00:ce:e3: eb:40:c5:e8:71:87:6a:44:1a:8f:34:cb:02:fa:84: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:54:91:D8:13:83:A2:CA:DB:E8:89:9B:28:03:28:C2:FE:7F:1F:CD X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f8:af:54:5e:5f:11:5b:ed:49:90:66:1d:6d:72:b0:46:51: 3f:ce:c8:ac:d4:d4:3b:29:65:e8:34:2c:2c:b7:c8:f3:d7:e4: 6d:0a:5c:92:c0:36:5b:4e:1b:02:b6:55:a9:74:cd:4d:f4:4c: ea:07:85:10:76:58:c8:d5:4f:c9:df:4e:2c:32:e6:47:f6:81: 0c:35:85:1f:59:62:27:ce:89:36:4e:fe:ae:eb:c7:51:0c:bc: f3:c6:30:ef:78:2a:6d:f0:0e:62:23:69:bd:2d:6a:83:b2:8a: 78:66:31:6a:ab:2c:8e:76:28:0a:dd:d2:42:b0:f3:52:de:92: 4d:00:89:9a:5e:02:40:4d:fb:f0:4e:63:6e:ee:5d:75:27:2d: 49:d3:1b:d1:01:c9:dd:ee:d4:6a:ea:bf:4c:86:f2:b1:0a:d0: ce:9d:46:9d:e0:1e:d7:04:fb:37:f7:06:0f:11:d4:a0:ed:d1: 2e:c2:d8:88:0b:d9:77:cf:6d:28:3f:45:f9:e4:4c:c3:c1:32: d1:a2:d7:d4:f0:a2:07:31:3a:2b:83:02:c5:dd:87:ff:c6:70: e6:fc:d9:4e:4c:bb:33:b2:b2:72:c1:28:18:db:82:0c:11:51: 81:dd:17:56:36:a7:99:6b:cb:ca:1e:59:33:b2:79:43:65:bf: 04:75:2c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUxMjA1MDExNTU1WhcNMjUxMjEyMDExNTU1WjAYMRYwFAYD VQQDEw02OTMyMzI0Yi0zMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcPKrVkqKU4TsfaT+RZu7ONfoZ1LX2QGHkBxVO+k0sWuF6BwHUM0QTA/9n/d eh69kAoqLBSN2HbA0PXfu5bbVG6N85DQu2h2UxfgM+bmLohZ6IlBwcwSpB5P44jl u7/eDNnUPqFJro+d8OZN9jV9CrgIyAYo6pXZDNHXhMH4erxhLlYSq4Eh60RXvXdP OuSFYL32JkO1frtVf5/zM4HotzV92L7YCwGkTg8MPwBu1GLwCWejxJM5Uqnq+OLg jzTbdQ9mRrWCl/D7muNzwVK4kdWExtsw19WDVr1Fd72j59azQwFTHMh/guvcVBMA zuPrQMXocYdqRBqPNMsC+oRmGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORUkdgT g6LK2+iJmygDKML+fx/NMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU+K9UXl8RW+1JkGYdbXKwRlE/zsis1NQ7KWXoNCwst8jz1+RtClyS wDZbThsCtlWpdM1N9EzqB4UQdljI1U/J304sMuZH9oEMNYUfWWInzok2Tv6u68dR DLzzxjDveCpt8A5iI2m9LWqDsop4ZjFqqyyOdigK3dJCsPNS3pJNAImaXgJATfvw TmNu7l11Jy1J0xvRAcnd7tRq6r9MhvKxCtDOnUad4B7XBPs39wYPEdSg7dEuwtiI C9l3z20oP0X55EzDwTLRotfU8KIHMTorgwLF3Yf/xnDm/NlOTLszsrJywSgY24IM EVGB3RdWNqeZa8vKHlkzsnlDZb8EdSwR -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:20 2025 by rpki-client