This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: 3Wm7F3RVlrbjw8+gS6yZlj522DGG4fu/qLFaYq5191E= Subject key identifier: A0:56:EE:29:1E:B7:4E:15:B6:C0:1E:31:1C:D6:C5:7D:DE:E9:7A:A3 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 09A3 Signing time: Thu 04 Dec 2025 19:15:31 +0000 Manifest this update: Thu 04 Dec 2025 19:15:30 +0000 Manifest next update: Thu 11 Dec 2025 19:15:30 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: 6zjPh1yI4MK0JEK3Ur224tgjU+pUZqFXBY7YDXLYZbs=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Dec 4 19:15:30 2025 GMT Not After : Dec 11 19:15:30 2025 GMT Subject: CN=6931ddd2-6d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:08:7f:bc:aa:2c:c3:d4:e1:d0:4b:ec:d0: db:2f:d1:86:6e:9e:b7:65:3e:94:62:75:5d:70:b4: 09:d6:b3:a5:1d:8e:40:44:ab:d0:2b:e0:bf:7f:23: d0:90:ff:1d:95:16:4a:af:f7:ef:45:88:a6:f2:43: 81:ab:09:3b:51:43:32:c0:b5:59:4a:69:64:a2:87: fb:37:68:74:78:fd:b4:05:8e:4e:04:32:72:a2:dd: eb:10:32:b0:a5:6b:28:02:b5:91:fa:17:24:fd:0b: 1d:4d:cd:6a:9c:88:63:69:34:fd:42:be:d9:40:82: df:28:66:57:ac:5c:02:22:1f:fb:39:f1:99:c3:da: 08:19:ad:32:80:d9:36:84:9c:94:66:69:a1:e8:89: 48:28:ca:a3:28:5b:c1:57:c3:77:80:01:cf:5a:db: 2e:44:55:d0:2e:06:56:d0:02:8c:d7:3c:8a:5a:ee: 4e:0f:42:f4:b2:7b:da:ca:ff:65:39:23:42:29:f3: 7a:b6:d1:99:79:62:b5:28:46:76:0b:7e:7e:2d:7f: 6a:d6:69:f1:56:76:cf:27:e8:f8:82:41:f5:72:b9: 4d:e5:c5:7d:4a:5a:be:d2:6e:bc:46:0c:d8:b8:da: f5:4e:a4:ee:99:f4:9f:70:7b:36:61:99:7e:2c:5b: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:56:EE:29:1E:B7:4E:15:B6:C0:1E:31:1C:D6:C5:7D:DE:E9:7A:A3 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7a:30:95:6b:9d:41:43:26:85:09:52:aa:6e:cf:05:b5:23: c8:d8:00:b5:f5:5c:7f:41:b2:1a:53:8a:6e:54:a4:a0:07:aa: 81:38:3c:df:9e:b5:c0:47:eb:24:c1:09:83:60:c5:0f:4b:53: 90:88:cd:8a:64:ec:74:02:ff:94:fd:b5:f4:86:3f:a9:15:2f: 8f:ad:33:ea:db:70:b3:fd:b1:36:fc:a5:7f:a5:01:1b:d4:30: 3b:5b:01:04:fa:b3:26:cd:6d:78:b0:d7:88:c8:fd:a7:3e:68: 4c:23:42:3b:44:30:67:3b:5b:78:ed:88:5d:78:45:ea:db:b3: 70:59:a2:a3:2e:5d:e7:eb:c7:ba:6e:aa:f3:b1:df:34:f9:7a: d8:7f:4c:a0:c3:0b:2c:f5:f2:67:3e:82:43:e3:9d:1a:06:0b: 84:74:bb:28:68:05:ae:7e:f7:2d:3b:63:3f:c3:87:0d:25:7c: 92:1a:75:08:d9:6e:54:08:b3:5c:ad:72:f8:c3:ad:9b:c8:13: 88:81:52:03:f0:ca:4c:08:23:26:d6:3b:44:25:ab:2b:19:f2: 1d:18:0d:8b:e2:c3:c0:e8:17:c1:8d:d7:f9:ee:9b:6d:63:4d: 96:52:25:f1:03:e2:0b:53:99:ee:ba:67:21:1e:b5:b0:2d:81: f6:09:cb:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjUxMjA0MTkxNTMwWhcNMjUxMjExMTkxNTMwWjAYMRYwFAYD VQQDEw02OTMxZGRkMi02ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dEIf7yqLMPU4dBL7NDbL9GGbp63ZT6UYnVdcLQJ1rOlHY5ARKvQK+C/fyPQ kP8dlRZKr/fvRYim8kOBqwk7UUMywLVZSmlkoof7N2h0eP20BY5OBDJyot3rEDKw pWsoArWR+hck/QsdTc1qnIhjaTT9Qr7ZQILfKGZXrFwCIh/7OfGZw9oIGa0ygNk2 hJyUZmmh6IlIKMqjKFvBV8N3gAHPWtsuRFXQLgZW0AKM1zyKWu5OD0L0snvayv9l OSNCKfN6ttGZeWK1KEZ2C35+LX9q1mnxVnbPJ+j4gkH1crlN5cV9Slq+0m68RgzY uNr1TqTumfSfcHs2YZl+LFvzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBW7ike t04VtsAeMRzWxX3e6XqjMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXejCVa51BQyaFCVKqbs8FtSPI2AC19Vx/QbIaU4puVKSgB6qBODzf nrXAR+skwQmDYMUPS1OQiM2KZOx0Av+U/bX0hj+pFS+PrTPq23Cz/bE2/KV/pQEb 1DA7WwEE+rMmzW14sNeIyP2nPmhMI0I7RDBnO1t47YhdeEXq27NwWaKjLl3n68e6 bqrzsd80+XrYf0ygwwss9fJnPoJD450aBguEdLsoaAWufvctO2M/w4cNJXySGnUI 2W5UCLNcrXL4w62byBOIgVID8MpMCCMm1jtEJasrGfIdGA2L4sPA6BfBjdf57ptt Y02WUiXxA+ILU5nuumchHrWwLYH2Ccvz -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:41 2025 by rpki-client