This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: 67X+XuAZbTRkVj7LUcly0TQDZPepWpkMaOur5eh5zo4= Subject key identifier: 66:B0:44:60:C7:72:11:CC:C1:C3:C7:BC:F2:15:3C:61:78:0F:21:18 Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 34E3 Signing time: Sat 06 Dec 2025 15:02:29 +0000 Manifest this update: Sat 06 Dec 2025 15:02:29 +0000 Manifest next update: Sat 13 Dec 2025 15:02:29 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: mH0TpBOW3PfWWBe1dakXWiprzRtRCGg06nlQp7VWh6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Dec 6 15:02:29 2025 GMT Not After : Dec 13 15:02:29 2025 GMT Subject: CN=69344585-b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:39:8c:c6:de:88:1c:8b:22:94:dd:42:61: d8:ef:72:51:46:97:72:ef:51:7a:7f:ce:63:3a:21: ea:3f:d5:32:98:ed:55:bd:f5:e2:50:24:eb:f1:50: e2:ed:b8:ff:49:d8:f1:c2:5b:4a:97:16:9e:88:46: 41:40:5e:98:77:cb:11:37:5b:42:d0:d3:6c:2f:92: 1d:79:51:43:53:a0:84:95:d5:6a:c7:13:7f:50:6b: 0d:99:42:94:37:48:41:9d:ea:c3:f4:48:aa:4f:94: 7c:dc:de:83:b1:01:26:5c:ed:c2:51:f8:5f:49:71: f7:18:83:6b:3d:25:b3:56:f3:7d:4b:25:3a:0d:0e: ed:ba:e2:1d:c8:16:fa:2b:b5:4e:4b:16:59:3e:c5: e1:e4:11:f9:ab:b4:ec:58:11:bb:2e:2f:99:df:51: d9:c4:40:a4:30:51:55:05:a9:c0:a7:d9:d2:19:2a: a4:79:e9:a1:08:88:fd:cc:82:cc:51:02:c9:52:e4: f6:9b:97:73:06:c4:87:03:ba:90:96:42:00:1f:3e: e5:a7:cd:24:9d:34:4f:dc:dd:74:c6:33:34:d1:e8: 2a:f8:1e:7c:63:41:0e:83:1c:b1:bf:34:da:66:11: 47:db:0c:96:62:db:a5:9a:6a:2f:39:22:b9:ff:a0: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:44:60:C7:72:11:CC:C1:C3:C7:BC:F2:15:3C:61:78:0F:21:18 X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a4:c1:ad:35:69:85:84:3b:8c:52:e5:18:21:76:03:87:ef: 0e:ca:a4:77:36:d9:a4:f3:85:12:10:33:96:f3:c0:13:98:83: d1:b3:64:23:61:db:dd:ca:15:af:6c:20:48:da:ec:42:26:67: 9d:01:68:3c:06:8a:1c:23:d9:3f:d7:6d:42:2b:76:1d:e4:4a: d6:72:9b:d7:bd:b1:19:46:a8:fc:2b:0f:d8:f0:c1:64:bd:eb: 8a:6e:75:b4:50:20:94:7b:3c:03:51:04:44:cf:82:9f:01:31: 43:e2:8f:1f:7e:fa:5c:14:c0:bd:66:9c:4a:0c:58:3a:02:fd: 30:61:38:5a:b7:50:2a:0f:96:9a:79:9f:79:61:e1:3a:0c:3a: c4:76:3b:3e:25:67:db:01:60:16:4a:79:65:33:ce:76:89:1c: 13:e4:a6:52:f6:4b:05:3d:d7:91:6f:75:50:78:4d:a9:aa:9b: 8a:cd:d5:9d:1b:23:52:2f:07:a0:ee:90:6b:00:8b:6f:66:14: a9:b4:81:06:18:3c:92:8d:aa:8e:82:38:c4:20:1e:fc:a8:4c: 67:0f:b3:84:9f:0d:b9:61:fa:fb:19:62:57:7e:da:07:1d:58: 10:a5:23:81:71:d1:6e:01:3f:dc:d8:7c:b3:f6:c0:a2:42:2f: f9:ab:56:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUxMjA2MTUwMjI5WhcNMjUxMjEzMTUwMjI5WjAYMRYwFAYD VQQDEw02OTM0NDU4NS1iNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhc5jMbeiByLIpTdQmHY73JRRpdy71F6f85jOiHqP9UymO1VvfXiUCTr8VDi 7bj/SdjxwltKlxaeiEZBQF6Yd8sRN1tC0NNsL5IdeVFDU6CEldVqxxN/UGsNmUKU N0hBnerD9EiqT5R83N6DsQEmXO3CUfhfSXH3GINrPSWzVvN9SyU6DQ7tuuIdyBb6 K7VOSxZZPsXh5BH5q7TsWBG7Li+Z31HZxECkMFFVBanAp9nSGSqkeemhCIj9zILM UQLJUuT2m5dzBsSHA7qQlkIAHz7lp80knTRP3N10xjM00egq+B58Y0EOgxyxvzTa ZhFH2wyWYtulmmovOSK5/6AHGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGawRGDH chHMwcPHvPIVPGF4DyEYMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAApMGtNWmFhDuMUuUYIXYDh+8OyqR3Ntmk84USEDOW88ATmIPRs2Qj YdvdyhWvbCBI2uxCJmedAWg8BoocI9k/121CK3Yd5ErWcpvXvbEZRqj8Kw/Y8MFk veuKbnW0UCCUezwDUQREz4KfATFD4o8ffvpcFMC9ZpxKDFg6Av0wYThat1AqD5aa eZ95YeE6DDrEdjs+JWfbAWAWSnllM852iRwT5KZS9ksFPdeRb3VQeE2pqpuKzdWd GyNSLweg7pBrAItvZhSptIEGGDySjaqOgjjEIB78qExnD7OEnw25Yfr7GWJXftoH HVgQpSOBcdFuAT/c2Hyz9sCiQi/5q1aU -----END CERTIFICATE-----Generated at Sun Dec 7 03:50:24 2025 by rpki-client