This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: 6rmEbi+6u4/YXPfheVv/UmjIOyrabqOi1spwnUIdlhs= Subject key identifier: 1E:DB:41:9F:79:73:B3:77:E8:CE:C7:4C:71:4F:19:0C:47:2F:95:22 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2CFE Signing time: Sat 06 Dec 2025 15:19:01 +0000 Manifest this update: Sat 06 Dec 2025 15:19:01 +0000 Manifest next update: Sat 13 Dec 2025 15:19:01 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: NME2ghBMLIuEcSCiMU2C9GjV1TcfNgXXZKdlnm6V5eY=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: R9f6Z3Uevp4d36wvfS3ESJSWBBwm4wuAIByOXNTGRgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11540 (0x2d14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Dec 6 15:19:01 2025 GMT Not After : Dec 13 15:19:01 2025 GMT Subject: CN=69344965-f0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:fd:28:88:b4:b6:3e:4e:f8:60:91:63:8f: ed:53:d3:f5:38:50:d2:29:92:34:0e:65:ce:d5:66: cb:28:29:a8:54:15:3e:c2:4b:ec:2e:de:10:1e:af: 81:62:4f:9f:2c:9e:a7:49:55:05:68:b2:23:66:af: 51:a6:a2:e2:6b:f0:cd:5b:88:67:7c:4d:dd:51:ba: a6:6f:35:1a:d2:24:56:11:cf:94:2c:94:c4:ef:64: 91:3f:c7:38:64:1a:0e:19:4c:62:34:98:9c:e0:97: 5e:2b:2c:3e:8f:b7:e4:4f:68:b5:d9:2f:82:31:4b: b7:bc:99:5d:e8:9e:7c:e3:58:5e:91:a3:e7:79:3d: d2:fc:30:6f:8d:2a:7d:b7:90:1f:63:40:ef:e1:cc: ec:d4:1e:ac:65:53:18:31:c1:f7:e0:7e:2c:22:fa: 12:06:35:39:dc:96:13:06:83:ae:c4:ec:d7:ea:1d: 9a:47:56:ee:51:50:a0:20:b6:09:f0:94:c4:f5:2a: 83:96:03:f2:ac:24:1d:9d:cd:95:84:25:7a:96:be: 76:5c:6e:03:fa:3d:0b:96:c4:a2:66:cd:09:02:1f: 3d:ee:e8:90:3e:c7:0b:6f:08:8e:dc:bb:01:42:49: 20:2a:37:43:05:8c:0c:25:29:64:95:a1:6d:11:af: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DB:41:9F:79:73:B3:77:E8:CE:C7:4C:71:4F:19:0C:47:2F:95:22 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6b:5b:4f:0f:77:5b:ea:0d:66:c8:cc:f6:21:b5:7a:c9:d4: 70:f7:5e:cd:06:8b:6d:06:43:37:8b:a1:18:0e:29:a4:71:17: 95:9f:0c:c2:1e:9c:8c:23:e7:70:3e:ec:fd:b8:9c:1e:6e:eb: 34:56:3a:24:d6:45:0d:28:e0:a0:60:0d:15:82:be:c7:cc:99: cf:64:bd:b5:ff:a4:47:aa:e7:27:e4:33:f7:29:34:b8:5c:39: 3e:31:ff:2a:c3:c0:9a:ed:96:58:bb:e1:11:8c:49:d5:83:aa: ff:0c:96:9c:bf:1a:db:9a:e2:89:52:95:e3:fa:a1:3e:a3:a3: f9:b5:bc:65:1d:c8:dc:e0:d4:51:c7:14:02:3f:01:c2:2d:1c: 6d:21:e9:30:52:55:20:16:76:6e:c1:3b:46:52:ac:4c:70:1a: a1:d0:c8:e6:3d:6f:b5:73:60:a4:4e:19:9c:ac:f3:d2:0d:cc: 75:4c:af:81:27:f1:e1:5b:ff:42:fc:7e:4d:94:de:ab:9a:9a: 91:0d:69:f2:18:56:f1:f1:ca:b3:64:d0:fb:5c:97:60:6f:0b: 96:70:12:99:13:94:0c:55:64:ff:71:1e:b7:10:76:a7:f9:29: 9f:38:c3:03:04:b9:ca:4b:e2:a3:5a:23:c2:6e:54:95:eb:86: 60:68:f2:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUxMjA2MTUxOTAxWhcNMjUxMjEzMTUxOTAxWjAYMRYwFAYD VQQDEw02OTM0NDk2NS1mMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qb9KIi0tj5O+GCRY4/tU9P1OFDSKZI0DmXO1WbLKCmoVBU+wkvsLt4QHq+B Yk+fLJ6nSVUFaLIjZq9RpqLia/DNW4hnfE3dUbqmbzUa0iRWEc+ULJTE72SRP8c4 ZBoOGUxiNJic4JdeKyw+j7fkT2i12S+CMUu3vJld6J5841hekaPneT3S/DBvjSp9 t5AfY0Dv4czs1B6sZVMYMcH34H4sIvoSBjU53JYTBoOuxOzX6h2aR1buUVCgILYJ 8JTE9SqDlgPyrCQdnc2VhCV6lr52XG4D+j0LlsSiZs0JAh897uiQPscLbwiO3LsB QkkgKjdDBYwMJSlklaFtEa9skwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7bQZ95 c7N36M7HTHFPGQxHL5UiMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFa1tPD3db6g1myMz2IbV6ydRw917NBottBkM3i6EYDimkcReVnwzC HpyMI+dwPuz9uJwebus0Vjok1kUNKOCgYA0Vgr7HzJnPZL21/6RHqucn5DP3KTS4 XDk+Mf8qw8Ca7ZZYu+ERjEnVg6r/DJacvxrbmuKJUpXj+qE+o6P5tbxlHcjc4NRR xxQCPwHCLRxtIekwUlUgFnZuwTtGUqxMcBqh0MjmPW+1c2CkThmcrPPSDcx1TK+B J/HhW/9C/H5NlN6rmpqRDWnyGFbx8cqzZND7XJdgbwuWcBKZE5QMVWT/cR63EHan +SmfOMMDBLnKS+KjWiPCblSV64ZgaPKJ -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:15 2025 by rpki-client