This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: OH4mM5pXUIPi6HKivjh4iskdBKOiyqGcCMZWJcewzZ8= Subject key identifier: B6:0D:60:55:67:30:8D:C0:79:B9:4F:C9:63:D0:F3:CA:2C:2D:F6:09 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0996 Signing time: Sat 06 Dec 2025 19:15:19 +0000 Manifest this update: Sat 06 Dec 2025 19:15:18 +0000 Manifest next update: Sat 13 Dec 2025 19:15:18 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: 18zTxan6p2DXCNVmzEGeJMkBjNH8zCjxGFNas9CNyqo=) 2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: vSHaQ8x5/dUFJ2VaCOEg3IfJ6i5TW1m1+SlMwO7G4nc=) 3: F568EF1A7F1711F094D2F035C4F9AE02.roa (hash: zT0Sz7g9V+D+Ya+GE9O18/USSfPNOgS69nwUWk/3R4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Dec 6 19:15:18 2025 GMT Not After : Dec 13 19:15:18 2025 GMT Subject: CN=693480c7-962d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:2b:49:9f:0f:8c:47:22:a4:8b:1c:30:04: cd:29:46:50:d3:e1:9e:9c:b1:01:7e:92:36:92:d6: 4d:89:ec:82:a8:cb:7b:ed:77:b0:c3:32:43:43:e5: ff:bb:a6:2c:46:72:8e:33:cd:e0:1c:4a:42:c1:bd: 4e:b2:8e:39:4a:f8:0a:2c:e2:2e:a6:29:26:28:3d: d8:20:c0:14:c1:c5:93:3a:62:ab:9b:42:d6:ca:24: 62:92:53:69:57:3a:d1:7e:bc:0e:52:0b:08:bf:a8: 95:bf:e3:5a:f9:6d:3d:f8:22:ae:0d:6d:b0:4b:94: d5:df:b1:fd:14:9d:95:b4:79:df:67:e8:74:de:0a: 13:fa:58:33:96:c9:29:f4:a1:71:2c:cf:01:9d:e5: 15:c9:0a:f3:61:4a:cf:c3:b2:96:6c:21:fb:e7:4d: 0d:c6:45:8b:45:e2:f0:4d:b7:23:ef:0f:78:b7:6d: 3f:47:6c:cc:80:40:ad:16:53:c3:50:a8:b5:f9:3b: 1d:ef:9c:51:d9:0e:a1:30:de:cc:ad:04:cf:23:eb: db:61:c9:b2:7a:4a:ee:56:95:35:2e:05:73:6b:a7: a1:63:7b:70:4e:67:be:e1:3e:2d:5b:f5:d7:23:f6: 11:bf:aa:50:a2:f0:2c:0b:cd:10:4f:15:d0:89:8d: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:60:55:67:30:8D:C0:79:B9:4F:C9:63:D0:F3:CA:2C:2D:F6:09 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a4:6e:11:0e:3d:6e:09:e8:52:01:f3:d6:c3:8c:c3:75:b7: b7:33:8c:fb:18:24:4f:7f:c0:be:c8:59:ba:1f:ee:ae:bb:3a: f6:38:36:5a:a6:a4:cf:07:3d:e2:3d:96:01:96:39:de:9a:b2: 85:f0:83:93:9d:3b:67:e7:f7:05:08:a7:04:30:26:c0:b7:58: 50:39:fc:69:8f:ad:c3:ec:be:4b:c5:fb:09:0d:db:62:8b:cb: 14:ac:a7:38:ba:27:74:dc:6c:2f:07:74:5c:9d:22:14:bb:a3: 1c:5e:c7:f6:84:c3:85:fb:3d:22:b2:02:62:a7:d0:c6:f1:2e: df:8e:17:f0:c7:47:7d:43:e7:3e:a8:ec:15:aa:ce:89:1b:8d: c2:5e:69:fe:d4:ce:85:d3:ea:78:d7:6e:1a:20:90:b2:39:81: f8:1f:b7:95:3e:ec:20:45:58:43:7b:d9:6c:e6:4e:dd:75:df: 58:d4:7e:95:7c:75:53:87:da:a2:ba:2e:16:9f:5c:8a:06:f6: c1:85:87:91:be:0d:7f:55:33:9d:58:34:54:1b:dc:16:55:d7: ec:b8:4f:b7:e6:10:4d:8c:32:2a:2b:c7:3f:57:50:21:44:b1: 5c:4b:a7:96:c3:c1:53:fc:ed:17:ad:f4:cc:4d:5f:14:75:40: 4f:f5:a9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUxMjA2MTkxNTE4WhcNMjUxMjEzMTkxNTE4WjAYMRYwFAYD VQQDEw02OTM0ODBjNy05NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu84rSZ8PjEcipIscMATNKUZQ0+GenLEBfpI2ktZNieyCqMt77XewwzJDQ+X/ u6YsRnKOM83gHEpCwb1Oso45SvgKLOIupikmKD3YIMAUwcWTOmKrm0LWyiRiklNp VzrRfrwOUgsIv6iVv+Na+W09+CKuDW2wS5TV37H9FJ2VtHnfZ+h03goT+lgzlskp 9KFxLM8BneUVyQrzYUrPw7KWbCH7500NxkWLReLwTbcj7w94t20/R2zMgECtFlPD UKi1+Tsd75xR2Q6hMN7MrQTPI+vbYcmyekruVpU1LgVza6ehY3twTme+4T4tW/XX I/YRv6pQovAsC80QTxXQiY3ZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYNYFVn MI3AeblPyWPQ88osLfYJMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArpG4RDj1uCehSAfPWw4zDdbe3M4z7GCRPf8C+yFm6H+6uuzr2ODZa pqTPBz3iPZYBljnemrKF8IOTnTtn5/cFCKcEMCbAt1hQOfxpj63D7L5LxfsJDdti i8sUrKc4uid03GwvB3RcnSIUu6McXsf2hMOF+z0isgJip9DG8S7fjhfwx0d9Q+c+ qOwVqs6JG43CXmn+1M6F0+p4124aIJCyOYH4H7eVPuwgRVhDe9ls5k7ddd9Y1H6V fHVTh9qiui4Wn1yKBvbBhYeRvg1/VTOdWDRUG9wWVdfsuE+35hBNjDIqK8c/V1Ah RLFcS6eWw8FT/O0XrfTMTV8UdUBP9anK -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:53 2025 by rpki-client