This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: HuAG3OVFPhqmLxjLi8SlzqZMCCPfGLophgdt+U/FACM= Subject key identifier: E0:C4:92:22:7A:3A:5A:11:58:CA:BD:57:39:E8:96:9F:3B:74:7E:C2 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 08BB Signing time: Sat 06 Dec 2025 14:40:46 +0000 Manifest this update: Sat 06 Dec 2025 14:40:45 +0000 Manifest next update: Sat 13 Dec 2025 14:40:45 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: aemBf5kMfiDgFe8ugTXKSM1JCRgf+nymwuDsaSN8gDU=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Dec 6 14:40:45 2025 GMT Not After : Dec 13 14:40:45 2025 GMT Subject: CN=6934406e-d05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:64:53:7f:5d:95:65:4b:ed:c8:dd:4c:e5: 24:fc:a0:d4:d3:06:fa:51:d6:d1:f8:35:8e:46:98: 4d:0d:d7:f3:a5:fd:c0:13:72:61:8e:41:dd:b8:f1: 46:40:ff:42:8f:d9:b4:64:90:24:26:8d:ba:52:2d: c7:f8:c7:13:8f:38:68:b4:e9:25:78:8e:a7:a2:d4: 52:fe:30:e1:9b:3b:6e:a3:14:b5:57:83:43:0b:5e: fc:2d:23:4d:02:14:02:e4:ee:7c:8c:d8:c2:a4:ad: f5:9c:46:9a:c7:b4:3c:fc:ca:f1:61:95:08:90:1b: 3c:fe:f3:b5:c0:9b:19:d9:8c:75:f4:e5:fe:19:c2: ce:59:c5:8c:92:ea:6e:d8:13:e7:40:fc:e7:ce:62: 9b:eb:52:d9:a8:93:4d:0d:e7:37:aa:d2:bf:43:c8: 39:c7:c8:35:d5:cd:4f:66:ec:7c:ce:af:f1:cd:6e: db:98:2a:5c:bb:b7:94:d0:71:79:5d:30:98:ef:6e: 3f:c9:68:a7:7b:d5:68:6e:c0:9e:55:e6:40:c9:45: 7d:f7:17:c9:4e:ab:8d:69:02:3c:84:74:b4:12:91: dd:90:34:4f:ce:9a:56:19:30:40:c8:72:dc:62:6a: 74:2f:28:45:c6:1c:3a:04:88:ea:a7:34:3c:65:d1: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C4:92:22:7A:3A:5A:11:58:CA:BD:57:39:E8:96:9F:3B:74:7E:C2 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3f:ae:1e:40:64:a6:f2:d2:93:27:ea:4b:63:2c:d1:f0:f9: 7d:ca:48:0d:c5:ba:91:d3:9e:f8:98:ca:87:49:7a:ea:b5:c8: 26:22:be:a8:c8:42:ba:75:f8:87:45:11:8b:ac:76:28:79:6d: f0:ca:35:8f:e3:5d:38:cf:0f:9c:0f:d0:f3:eb:7e:b0:3d:43: 4d:cc:23:c6:0c:4a:df:19:46:2f:27:25:62:c5:7b:d5:df:29: ac:9c:28:2f:e2:9b:4a:1a:f4:df:ff:c5:db:bd:fe:0f:6b:23: ef:ee:c1:8e:50:f2:34:e9:7d:10:ef:b1:b4:8a:83:0f:2d:cd: 44:d1:f7:9b:28:59:41:c3:8b:9f:61:39:74:3f:de:f7:db:6d: 6c:e9:ef:7b:f9:c4:3f:7f:f8:a1:f6:ff:9d:c4:46:59:6b:85: 27:44:45:bd:93:c0:c7:da:58:2c:f7:64:e0:89:71:18:f1:ed: 3c:1c:f2:e6:54:a3:65:c5:28:26:a4:0a:91:8e:c7:d8:a3:95: 95:18:07:90:ad:bc:33:50:c7:fb:ab:12:14:16:3b:7e:34:43: 48:fb:4c:ce:7a:bc:69:0e:43:7f:f5:cb:0e:0b:f6:27:49:20: c2:f8:99:61:bc:89:b8:87:09:53:73:f1:5d:c5:cb:2c:f2:d9: c7:7d:e9:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUxMjA2MTQ0MDQ1WhcNMjUxMjEzMTQ0MDQ1WjAYMRYwFAYD VQQDEw02OTM0NDA2ZS1kMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uVkU39dlWVL7cjdTOUk/KDU0wb6UdbR+DWORphNDdfzpf3AE3JhjkHduPFG QP9Cj9m0ZJAkJo26Ui3H+McTjzhotOkleI6notRS/jDhmztuoxS1V4NDC178LSNN AhQC5O58jNjCpK31nEaax7Q8/MrxYZUIkBs8/vO1wJsZ2Yx19OX+GcLOWcWMkupu 2BPnQPznzmKb61LZqJNNDec3qtK/Q8g5x8g11c1PZux8zq/xzW7bmCpcu7eU0HF5 XTCY724/yWine9VobsCeVeZAyUV99xfJTquNaQI8hHS0EpHdkDRPzppWGTBAyHLc Ymp0LyhFxhw6BIjqpzQ8ZdEBrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODEkiJ6 OloRWMq9Vznolp87dH7CMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQP64eQGSm8tKTJ+pLYyzR8Pl9ykgNxbqR0574mMqHSXrqtcgmIr6o yEK6dfiHRRGLrHYoeW3wyjWP4104zw+cD9Dz636wPUNNzCPGDErfGUYvJyVixXvV 3ymsnCgv4ptKGvTf/8Xbvf4PayPv7sGOUPI06X0Q77G0ioMPLc1E0febKFlBw4uf YTl0P973221s6e97+cQ/f/ih9v+dxEZZa4UnREW9k8DH2lgs92TgiXEY8e08HPLm VKNlxSgmpAqRjsfYo5WVGAeQrbwzUMf7qxIUFjt+NENI+0zOerxpDkN/9csOC/Yn SSDC+JlhvIm4hwlTc/Fdxcss8tnHfelu -----END CERTIFICATE-----Generated at Sun Dec 7 01:34:44 2025 by rpki-client