This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: BujVpcWOm3A4u6A+TrS2I/kGcofSqs1QDZ87z5pW3Cs= Subject key identifier: 2F:95:82:32:CC:DB:E2:E6:3F:21:4A:B2:6B:A9:3D:49:4F:6E:18:25 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: F1 Signing time: Sat 20 Dec 2025 22:48:24 +0000 Manifest this update: Sat 20 Dec 2025 22:48:24 +0000 Manifest next update: Sat 27 Dec 2025 22:48:24 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: 4I5agjSnaaRg2fSMVq3NY0VzNigN0LYtkJCXpa2h5bE=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: uoDT5F7S64QhLS2Zprh4X3DnbqtCN+iY00UgCBuklGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Dec 20 22:48:24 2025 GMT Not After : Dec 27 22:48:24 2025 GMT Subject: CN=694727b8-642b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:0f:ee:87:07:7d:18:64:dd:0e:4d:8b:b2: c3:22:ca:4a:c6:16:28:ff:3c:f3:b9:d1:81:a5:53: 5d:95:be:f2:eb:e0:55:70:48:1b:ec:7e:4b:b4:b0: 5d:23:97:d1:0d:0d:aa:79:ca:5c:d0:bd:ed:1a:d3: 56:93:b9:53:26:47:b8:bb:35:a7:08:3f:4c:e2:a6: dc:9a:a6:6d:85:74:f5:b4:f1:ad:98:09:50:06:65: a1:85:7a:1e:78:46:36:d9:5f:52:fe:45:fd:1b:c4: ac:d0:88:bd:fa:b0:25:ee:48:40:c4:5d:34:aa:8f: 23:dc:58:cb:63:3d:34:20:c8:40:98:08:f5:4f:e9: de:6d:d2:8b:8a:d8:9d:e6:df:05:44:05:13:74:80: 1a:78:1e:ff:2d:c4:14:39:b2:56:0b:b9:dc:c1:02: 15:79:ab:60:36:85:9f:3b:fd:88:2c:c7:cb:06:98: 12:2a:c2:ef:dd:22:fe:35:f0:88:1e:de:bf:63:9b: 17:6b:b0:ac:28:a5:e8:47:84:aa:4c:e8:6c:93:8f: f5:d7:b1:cb:f9:4a:d8:78:93:19:22:f0:89:c6:d5: 67:b7:b6:fc:a7:cb:1b:2a:d2:ff:d4:9b:5c:3d:a2: 89:c9:ea:fa:ba:b4:e7:b6:49:47:01:4b:da:49:7e: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:95:82:32:CC:DB:E2:E6:3F:21:4A:B2:6B:A9:3D:49:4F:6E:18:25 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:dc:40:bd:86:2c:5b:ed:cb:65:d7:70:2a:41:a3:c2:6b:f3: 09:67:31:08:4b:03:96:ac:2b:2f:f7:a7:2c:65:ef:85:2e:39: 42:4b:41:39:62:0f:8d:4f:fa:2f:44:30:3b:a6:0d:3b:01:01: 22:da:65:56:4f:d9:93:b9:3e:b8:3f:ec:4f:52:b7:e6:c6:03: 41:eb:58:c7:5c:cf:2a:7c:7a:c1:a7:25:ad:22:0e:5a:d5:86: 54:03:58:b8:50:c8:fa:c5:61:33:9b:73:4c:38:52:d7:bf:42: 65:85:90:c9:3b:a2:f9:e7:6e:db:fc:37:34:42:e0:1a:48:f6: ec:16:e8:fa:27:fc:85:98:8b:4e:92:9d:4b:6b:77:5c:03:a9: c2:14:ea:28:46:81:20:b8:93:c8:b1:a8:b5:3d:94:8a:21:a7: d4:21:7c:c1:f1:56:f5:8d:dc:37:71:30:91:e0:a2:38:ec:55: 5e:78:b7:59:1c:fb:bb:a6:49:53:ea:2a:b3:7f:89:1d:45:de: 78:08:83:2a:af:11:50:fc:49:4c:64:89:68:24:33:ef:ee:60: f6:fc:07:3c:65:5a:d2:1e:e9:14:a6:3e:c1:c4:b3:fe:5e:9b: 6c:cb:84:b1:60:39:fc:f3:7b:47:0c:11:e2:7d:30:c9:c1:b6: 1d:e8:7b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUxMjIwMjI0ODI0WhcNMjUxMjI3MjI0ODI0WjAYMRYwFAYD VQQDDA02OTQ3MjdiOC02NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BYP7ocHfRhk3Q5Ni7LDIspKxhYo/zzzudGBpVNdlb7y6+BVcEgb7H5LtLBd I5fRDQ2qecpc0L3tGtNWk7lTJke4uzWnCD9M4qbcmqZthXT1tPGtmAlQBmWhhXoe eEY22V9S/kX9G8Ss0Ii9+rAl7khAxF00qo8j3FjLYz00IMhAmAj1T+nebdKLitid 5t8FRAUTdIAaeB7/LcQUObJWC7ncwQIVeatgNoWfO/2ILMfLBpgSKsLv3SL+NfCI Ht6/Y5sXa7CsKKXoR4SqTOhsk4/117HL+UrYeJMZIvCJxtVnt7b8p8sbKtL/1Jtc PaKJyer6urTntklHAUvaSX7MXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+VgjLM 2+LmPyFKsmupPUlPbhglMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE3EC9hixb7ctl13AqQaPCa/MJZzEISwOWrCsv96csZe+FLjlCS0E5 Yg+NT/ovRDA7pg07AQEi2mVWT9mTuT64P+xPUrfmxgNB61jHXM8qfHrBpyWtIg5a 1YZUA1i4UMj6xWEzm3NMOFLXv0JlhZDJO6L5527b/Dc0QuAaSPbsFuj6J/yFmItO kp1La3dcA6nCFOooRoEguJPIsai1PZSKIafUIXzB8Vb1jdw3cTCR4KI47FVeeLdZ HPu7pklT6iqzf4kdRd54CIMqrxFQ/ElMZIloJDPv7mD2/Ac8ZVrSHukUpj7BxLP+ Xptsy4SxYDn883tHDBHifTDJwbYd6HsF -----END CERTIFICATE-----Generated at Sun Dec 21 21:45:52 2025 by rpki-client