This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: th0YY1dRVJsmpcXTMml+R4Z9+U3H+V48Z5ypYkV2dAY= Subject key identifier: DC:BD:4E:7E:48:B5:4B:D8:56:A0:34:04:F2:A6:DB:A3:1F:A8:62:78 Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 0852 Signing time: Sat 06 Dec 2025 19:52:48 +0000 Manifest this update: Sat 06 Dec 2025 19:52:47 +0000 Manifest next update: Sat 13 Dec 2025 19:52:47 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: qQMPlf7ZRmjIhNPgeJXEd2RUOfFlaEHJW/u5re4SjwE=) 2: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (hash: TsqETkD2u8/g/tvy6c4rcdVrAda/jhvYOMUCzR3OzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: Dec 6 19:52:47 2025 GMT Not After : Dec 13 19:52:47 2025 GMT Subject: CN=69348990-b405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:a7:77:a3:66:65:9f:66:d8:01:55:2c:36: da:b6:d3:7d:a6:2d:0c:56:d3:ec:9b:2a:a9:03:d8: 9b:0c:04:32:5e:ed:10:d0:0d:d5:1a:d5:be:4c:57: f8:cf:db:90:60:a2:0d:7a:e9:52:52:b5:a4:4d:25: f8:c6:1c:23:d4:80:bc:6b:0a:e1:6f:57:6c:ba:fb: ac:b0:94:27:c6:3c:41:6e:e8:d8:10:04:3f:65:2d: 17:96:30:e7:ea:be:f3:fa:16:3d:20:98:69:31:5a: da:04:97:05:76:90:87:18:96:31:2f:b2:33:07:6d: 41:0b:64:97:34:4b:46:8c:da:30:9c:2f:0d:c8:9f: 4e:a1:c2:db:7b:7a:ee:31:af:7a:9a:33:85:38:37: d2:48:e2:66:e8:dd:42:98:1a:0a:c1:2a:56:b4:e7: 9a:96:13:74:ce:dd:40:80:cd:21:70:5e:aa:f6:4f: af:15:6d:71:9f:ca:0a:3c:f3:23:b4:16:7e:3a:4f: 76:4a:5d:96:c6:a3:54:c3:7a:95:04:49:d5:88:19: 83:05:5e:80:6c:4e:7b:de:40:30:fe:a4:af:ac:ae: 08:7a:68:6f:cc:a3:0c:be:56:d1:f2:12:47:c3:63: e8:b0:42:d8:39:a9:42:41:ef:ad:66:1f:f1:d5:67: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BD:4E:7E:48:B5:4B:D8:56:A0:34:04:F2:A6:DB:A3:1F:A8:62:78 X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:94:29:4a:28:e8:1d:a0:f0:c4:02:e5:72:4b:aa:6c:79:3d: 73:e4:5e:d1:73:39:8c:38:1d:5c:a0:b8:9e:d3:ce:9c:ef:12: 0f:22:7f:3c:91:96:cd:3f:5f:89:9d:58:79:f2:38:fe:61:07: ce:3f:3f:07:c4:ae:49:ad:e6:c1:71:df:11:bd:7f:02:cc:46: eb:f3:1e:0d:d5:09:2b:ca:49:7e:b3:f1:72:92:c2:d7:5c:c0: af:c5:3d:eb:0a:08:34:0b:5c:e6:b9:e3:94:e6:45:6e:7e:f5: c0:96:8c:51:23:d5:0d:cf:79:35:d9:ac:22:16:51:d0:05:23: 57:34:11:d5:86:71:ce:c2:85:ec:75:06:94:64:0e:5e:5e:fe: d0:11:27:1a:32:9c:82:14:74:11:ea:12:36:3e:4c:0a:96:e4: 33:b8:0e:24:df:a6:82:0a:9a:e6:fe:83:76:76:e2:38:ca:38: 52:8c:5f:ac:7b:25:32:73:15:3c:0b:57:c2:cc:25:f4:e7:9f: f5:d1:5d:95:d7:33:3e:06:bf:88:af:9a:b9:a9:4d:97:6b:73: 7e:da:d1:31:70:71:cd:ba:78:8d:2e:3d:a3:32:34:62:f7:a1: b5:8f:48:3a:3d:0c:e4:d9:b2:d9:05:3e:a0:f9:47:d2:49:85: f6:71:9e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjUxMjA2MTk1MjQ3WhcNMjUxMjEzMTk1MjQ3WjAYMRYwFAYD VQQDEw02OTM0ODk5MC1iNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnynd6NmZZ9m2AFVLDbattN9pi0MVtPsmyqpA9ibDAQyXu0Q0A3VGtW+TFf4 z9uQYKINeulSUrWkTSX4xhwj1IC8awrhb1dsuvussJQnxjxBbujYEAQ/ZS0XljDn 6r7z+hY9IJhpMVraBJcFdpCHGJYxL7IzB21BC2SXNEtGjNownC8NyJ9OocLbe3ru Ma96mjOFODfSSOJm6N1CmBoKwSpWtOealhN0zt1AgM0hcF6q9k+vFW1xn8oKPPMj tBZ+Ok92Sl2WxqNUw3qVBEnViBmDBV6AbE573kAw/qSvrK4IemhvzKMMvlbR8hJH w2PosELYOalCQe+tZh/x1WdyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy9Tn5I tUvYVqA0BPKm26MfqGJ4MB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvlClKKOgdoPDEAuVyS6pseT1z5F7RczmMOB1coLie086c7xIPIn88 kZbNP1+JnVh58jj+YQfOPz8HxK5JrebBcd8RvX8CzEbr8x4N1Qkrykl+s/FyksLX XMCvxT3rCgg0C1zmueOU5kVufvXAloxRI9UNz3k12awiFlHQBSNXNBHVhnHOwoXs dQaUZA5eXv7QEScaMpyCFHQR6hI2PkwKluQzuA4k36aCCprm/oN2duI4yjhSjF+s eyUycxU8C1fCzCX055/10V2V1zM+Br+Ir5q5qU2Xa3N+2tExcHHNuniNLj2jMjRi 96G1j0g6PQzk2bLZBT6g+UfSSYX2cZ4q -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:05 2025 by rpki-client