This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: 3GiiYFCcy46+v7m7qgLYpf+1hZwYvlbNF2bgD2TnFQ4= Subject key identifier: A8:4E:83:0F:09:00:AF:1D:D6:73:5B:B3:04:A2:F3:77:73:0F:D2:55 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 10F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 19ED Signing time: Sat 20 Dec 2025 17:01:38 +0000 Manifest this update: Sat 20 Dec 2025 17:01:38 +0000 Manifest next update: Sat 27 Dec 2025 17:01:38 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: w4YAcvl9zteUepq6jvznzHGnXKZBuvSsfdkYgl0tJS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4337 (0x10f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Dec 20 17:01:38 2025 GMT Not After : Dec 27 17:01:38 2025 GMT Subject: CN=6946d672-89fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:7e:00:cd:e3:31:77:4b:40:ae:e9:25:1d: e1:2a:c0:5a:9f:39:11:10:5b:6a:7a:6a:0d:2e:2f: 3f:58:c4:89:e4:0c:8b:5b:87:15:e3:a5:74:28:07: 20:ee:23:c3:e1:b5:e1:af:b4:8c:5a:18:82:f6:7f: 9c:10:93:58:e9:a8:65:ec:b7:51:a4:d2:44:62:2d: 02:df:69:04:3f:49:77:33:fa:17:30:43:cb:c7:0c: de:3b:ca:7c:14:a5:b6:43:f6:eb:49:67:f3:54:f4: 9f:7e:b7:cc:7b:84:af:4d:93:5f:64:09:19:bd:26: 40:79:3d:d7:14:78:e5:3b:ed:be:32:e7:34:c2:bd: 97:d0:e6:22:28:60:b1:2c:76:90:f9:c4:a7:fa:ba: d2:cc:c7:79:54:77:dd:51:7a:11:85:5a:29:1b:39: 01:de:42:dc:d4:b2:c9:fb:3a:3a:64:dc:0f:fe:20: 00:c8:af:07:71:26:6c:c3:5a:a2:b3:fe:37:bb:49: ed:33:98:6c:6a:34:98:14:fd:40:7d:c7:5d:c3:64: 0d:fb:01:37:c7:24:00:dd:4a:22:af:67:76:bf:b0: e4:2b:af:b0:fd:cf:1d:61:d4:ce:ee:d4:15:3a:d8: 35:46:7d:54:78:a7:3c:22:5f:a1:69:94:2a:81:97: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:83:0F:09:00:AF:1D:D6:73:5B:B3:04:A2:F3:77:73:0F:D2:55 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f8:23:63:8a:81:08:7a:68:cf:9a:d4:09:49:18:6b:2f:60: a1:61:97:98:75:0f:f6:38:3b:14:cf:a5:9d:c3:c7:1e:0c:5e: 97:1c:6d:4a:15:6f:a2:cc:d9:1e:54:9b:da:fd:7b:36:cb:9f: ae:4d:e8:49:26:a6:31:19:84:37:0b:51:4f:f9:95:63:b0:b8: 40:51:3b:3d:9e:9b:96:a8:6e:f0:62:68:c1:c1:be:22:35:60: 60:41:5a:6c:2b:1b:3a:55:73:56:91:98:92:8f:1e:ea:3f:88: b6:76:db:10:65:ae:49:e0:e5:f2:49:3f:df:dc:50:ed:66:e2: 1a:a9:b8:75:2d:69:bf:27:5d:8a:7e:bc:6f:e8:af:f3:50:6e: 61:98:63:05:87:24:45:19:ef:a9:01:af:2e:80:15:bf:a3:14: 17:64:49:3a:67:fc:66:ed:0c:c3:fe:86:56:03:74:d8:61:0b: 15:24:5e:70:53:f2:f7:45:32:95:e5:dc:4f:76:81:31:a0:73: 39:7b:aa:55:e4:d1:1f:4f:47:53:a7:95:a7:86:dc:05:91:d3: e9:73:94:23:ca:ba:2c:e9:01:87:c0:3d:b0:66:8c:36:4a:5b: 52:6c:a2:1f:d8:e2:1e:41:81:96:0e:05:fe:5b:f2:65:8e:ca: 75:dd:07:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUxMjIwMTcwMTM4WhcNMjUxMjI3MTcwMTM4WjAYMRYwFAYD VQQDDA02OTQ2ZDY3Mi04OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMd+AM3jMXdLQK7pJR3hKsBanzkREFtqemoNLi8/WMSJ5AyLW4cV46V0KAcg 7iPD4bXhr7SMWhiC9n+cEJNY6ahl7LdRpNJEYi0C32kEP0l3M/oXMEPLxwzeO8p8 FKW2Q/brSWfzVPSffrfMe4SvTZNfZAkZvSZAeT3XFHjlO+2+Muc0wr2X0OYiKGCx LHaQ+cSn+rrSzMd5VHfdUXoRhVopGzkB3kLc1LLJ+zo6ZNwP/iAAyK8HcSZsw1qi s/43u0ntM5hsajSYFP1Afcddw2QN+wE3xyQA3Uoir2d2v7DkK6+w/c8dYdTO7tQV Otg1Rn1UeKc8Il+haZQqgZdQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhOgw8J AK8d1nNbswSi83dzD9JVMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq+CNjioEIemjPmtQJSRhrL2ChYZeYdQ/2ODsUz6Wdw8ceDF6XHG1K FW+izNkeVJva/Xs2y5+uTehJJqYxGYQ3C1FP+ZVjsLhAUTs9npuWqG7wYmjBwb4i NWBgQVpsKxs6VXNWkZiSjx7qP4i2dtsQZa5J4OXyST/f3FDtZuIaqbh1LWm/J12K frxv6K/zUG5hmGMFhyRFGe+pAa8ugBW/oxQXZEk6Z/xm7QzD/oZWA3TYYQsVJF5w U/L3RTKV5dxPdoExoHM5e6pV5NEfT0dTp5WnhtwFkdPpc5Qjyros6QGHwD2wZow2 SltSbKIf2OIeQYGWDgX+W/Jljsp13QcA -----END CERTIFICATE-----Generated at Sun Dec 21 05:55:04 2025 by rpki-client