This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json) Hash identifier: cRyEeAbVkg8mPiifrj/ra5J3vmwxex9i5vHfM9eI5v0= Subject key identifier: 71:9C:17:D2:00:2B:FF:65:12:98:C2:15:78:AA:28:6C:8B:49:6A:AA Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft Manifest number: 1A Signing time: Fri 05 Dec 2025 05:40:45 +0000 Manifest this update: Fri 05 Dec 2025 05:40:44 +0000 Manifest next update: Fri 12 Dec 2025 05:40:44 +0000 Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: qrBj/XTD0W/naNklTzmI+c4BMr7Mc7iHTOOOsy7/QuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E Validity Not Before: Dec 5 05:40:44 2025 GMT Not After : Dec 12 05:40:44 2025 GMT Subject: CN=6932705d-d3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:31:fe:a5:c2:d4:61:df:e6:91:6f:41:c6: 35:f8:d6:c5:52:a3:0c:90:99:1b:eb:7e:13:6e:88: 9c:9a:4a:0f:cd:63:e0:40:3a:ef:3b:6f:02:24:55: 6a:95:1c:88:34:4a:af:af:48:1b:79:9d:f4:34:c8: ac:0b:fa:45:50:6b:cb:ab:00:7f:75:4e:5c:90:72: 57:bf:2a:c6:4b:29:a7:05:68:4c:f7:ea:91:bb:96: d8:42:42:cd:44:85:1d:85:68:25:35:df:0a:ef:95: 07:2c:e5:9f:ba:7a:b1:df:94:79:58:81:49:01:97: db:df:95:0c:23:68:cd:56:0c:9a:da:b4:3b:f4:49: cd:e8:95:56:09:73:fb:cf:4d:4b:a6:ca:58:bb:a5: cf:b5:97:f7:78:aa:48:1d:fc:69:a7:2c:d6:f9:87: a3:b2:4a:a6:28:b7:cb:04:e0:cc:b6:c1:44:f1:10: 3f:95:39:13:f8:12:6e:70:5e:7b:ab:a4:d7:2f:36: 8b:72:4f:9b:1f:50:c4:3f:86:54:b0:5c:98:67:9f: 2c:cd:1b:33:ae:c5:1a:2d:de:69:24:e4:5f:e8:6d: 87:2e:6c:a0:d4:2c:d9:1b:17:26:a0:74:84:91:8d: 3d:dd:70:e1:20:41:52:3e:11:53:c9:e0:54:13:5a: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9C:17:D2:00:2B:FF:65:12:98:C2:15:78:AA:28:6C:8B:49:6A:AA X509v3 Authority Key Identifier: keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:a2:25:0c:73:bc:8c:a9:28:30:98:6a:56:b6:77:6b:8e:2c: 38:b8:98:01:37:7d:9e:80:87:a0:fc:98:6a:15:f3:ee:34:0e: a3:92:01:8c:45:3e:45:2b:6d:c9:5b:b4:52:d4:9d:02:87:3b: 54:8d:f1:36:a3:3f:7e:ea:a5:8b:1d:9e:67:5b:44:15:e8:08: d1:52:92:1c:97:b0:dc:cc:6d:66:2d:7e:4b:44:06:05:24:58: f5:54:77:b7:41:81:7e:af:28:ea:f6:02:a5:bc:1b:bb:3a:5d: fa:21:6c:9c:02:d1:9d:d7:33:1f:0f:c2:4e:45:38:5c:d6:5d: c4:27:68:ab:5d:62:ac:74:f7:3c:ee:48:3b:cb:ab:65:32:00: d0:b7:96:60:fd:b8:6c:06:7c:28:a3:42:b8:71:46:09:8c:ae: 7c:d7:b5:e7:e9:18:fe:cd:23:43:50:c0:e3:5f:fe:62:b6:f7: a4:25:36:2f:55:7d:07:e7:75:be:5d:ee:88:bb:bd:c6:96:a3: bd:e2:49:4c:5a:95:bd:51:8b:e1:3c:da:ab:27:0f:cb:91:53: e4:2e:da:1c:32:25:cd:02:d2:fc:b4:4e:88:d2:f0:75:33:d8: c0:00:a3:3b:0d:3b:d6:80:5c:74:29:f2:2f:ba:c8:4e:b2:38: eb:9c:25:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoREM5OTNGQUU4ODEwRTkzMTRGNUE3REYwOEQ2RjBDRDU3 RUE1OTE2RTAeFw0yNTEyMDUwNTQwNDRaFw0yNTEyMTIwNTQwNDRaMBgxFjAUBgNV BAMTDTY5MzI3MDVkLWQzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA5zH+pcLUYd/mkW9BxjX41sVSowyQmRvrfhNuiJyaSg/NY+BAOu87bwIkVWqV HIg0Sq+vSBt5nfQ0yKwL+kVQa8urAH91TlyQcle/KsZLKacFaEz36pG7lthCQs1E hR2FaCU13wrvlQcs5Z+6erHflHlYgUkBl9vflQwjaM1WDJratDv0Sc3olVYJc/vP TUumyli7pc+1l/d4qkgd/GmnLNb5h6OySqYot8sE4My2wUTxED+VORP4Em5wXnur pNcvNotyT5sfUMQ/hlSwXJhnnyzNGzOuxRot3mkk5F/obYcubKDULNkbFyagdISR jT3dcOEgQVI+EVPJ4FQTWlTZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcZwX0gAr /2USmMIVeKoobItJaqowHwYDVR0jBBgwFoAU3Jk/rogQ6TFPWn3wjW8M1X6lkW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzU0MUNDNkZBQjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyLzNKa19yb2dRNlRGUFduM3dqVzhNMVg2bGtX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0prX3JvZ1E2VEZQV24zd2pXOE0xWDZsa1c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzU0MUNDNkZBQjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyLzNKa19yb2dRNlRG UFduM3dqVzhNMVg2bGtXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOiJQxzvIypKDCYala2d2uOLDi4mAE3fZ6Ah6D8mGoV8+40DqOSAYxF PkUrbclbtFLUnQKHO1SN8TajP37qpYsdnmdbRBXoCNFSkhyXsNzMbWYtfktEBgUk WPVUd7dBgX6vKOr2AqW8G7s6XfohbJwC0Z3XMx8Pwk5FOFzWXcQnaKtdYqx09zzu SDvLq2UyANC3lmD9uGwGfCijQrhxRgmMrnzXtefpGP7NI0NQwONf/mK296QlNi9V fQfndb5d7oi7vcaWo73iSUxalb1Ri+E82qsnD8uRU+Qu2hwyJc0C0vy0TojS8HUz 2MAAozsNO9aAXHQp8i+6yE6yOOucJfw= -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:48 2025 by rpki-client