This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: Jiwz3SOUo1bGcnumXgtpHnY+ZaoojqYDeuqrL8UvEYo= Subject key identifier: F3:44:06:E8:2D:20:EF:0C:95:0E:83:4A:CD:14:60:53:B8:1E:56:13 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 024F Signing time: Sun 21 Dec 2025 00:58:58 +0000 Manifest this update: Sun 21 Dec 2025 00:58:58 +0000 Manifest next update: Sun 28 Dec 2025 00:58:58 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: S1oiuxnpQdh8kd4MV3jp+yLnvHotX5n4q0kEmivgP0Q=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Dec 21 00:58:58 2025 GMT Not After : Dec 28 00:58:58 2025 GMT Subject: CN=69474652-8ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:f3:0d:db:d2:62:ce:72:e0:34:44:a5:fe: 23:74:e8:5b:09:40:34:60:81:58:0a:1c:8e:3b:52: 8f:2c:d3:8b:f7:61:2f:38:22:57:c7:43:d6:97:44: 69:e1:a6:9a:73:d1:9a:09:fe:1e:33:c3:8b:42:19: ed:ce:91:fa:2a:a3:55:5f:52:9e:e7:ba:d7:a2:e7: e2:a7:22:55:ac:be:69:7b:b3:5c:41:ad:54:ad:37: f5:18:d3:73:81:51:34:94:92:c8:f7:22:ba:29:51: 0c:a6:f1:3a:8d:a1:48:11:b9:56:03:f9:24:1e:59: cb:12:84:6c:bf:61:2b:63:10:3d:59:3f:98:a4:e9: ee:77:2b:1a:5e:ee:1e:95:7f:10:28:4a:3c:c1:f2: 8e:28:45:b3:00:f7:35:4c:40:b4:56:60:8a:61:10: 3e:f5:c2:81:92:40:14:4a:fc:d3:99:30:a2:0f:5b: a3:ce:57:5c:eb:19:41:79:b7:c0:0b:f1:26:16:dc: 99:11:3d:c5:d9:cc:44:65:da:29:09:06:20:c0:9a: 4e:b4:ba:52:b7:16:82:1f:f5:2b:bc:bb:b4:04:88: e4:42:74:9b:e0:c3:df:33:d3:01:5f:19:bf:1e:12: 97:b3:ba:f7:cf:7f:10:a1:73:2a:40:db:80:05:63: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:44:06:E8:2D:20:EF:0C:95:0E:83:4A:CD:14:60:53:B8:1E:56:13 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:77:24:5d:e4:f8:36:28:b0:13:b6:76:d0:a6:71:cf:2a:aa: e6:59:df:92:ea:9d:17:4b:ec:3f:2e:f6:42:23:70:33:99:c0: 3d:1a:61:52:78:05:05:73:67:6a:05:04:25:c0:05:82:81:bd: ee:f4:77:e3:1d:30:42:11:38:76:f4:f4:1b:47:2c:47:ef:4b: c0:a1:78:18:0b:8c:6e:68:7b:49:0a:fb:8c:39:b1:d3:7a:c2: 27:2f:f1:dc:c3:5b:9e:16:a5:59:e8:ae:e4:41:c4:fb:0e:97: 25:b4:5e:6b:c5:ff:b3:4e:3d:1e:f4:dd:f4:9d:e6:4d:3b:ea: 6a:3a:81:55:f8:0b:20:ba:c9:f3:d2:32:de:58:2c:f3:1f:a0: 5a:e8:1d:04:da:4c:fa:88:7a:9d:76:a0:b3:26:20:00:e0:a7: 21:e7:34:6a:c9:2b:cd:de:e0:27:a7:1c:56:0e:14:9e:89:aa: 9f:ef:1e:8b:15:ba:a9:ae:c6:5a:ec:71:4b:33:90:63:29:27: 18:8a:62:16:44:7f:52:89:93:a6:e0:49:fc:50:a4:9f:40:f9: 65:67:f9:a6:2a:94:2e:14:f8:37:40:fa:06:6b:cd:5e:01:a0: 2a:80:35:8f:e0:dd:43:ef:86:d9:62:6b:15:77:9a:9a:1e:23: 43:1c:ce:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMjIxMDA1ODU4WhcNMjUxMjI4MDA1ODU4WjAYMRYwFAYD VQQDDA02OTQ3NDY1Mi04ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IrzDdvSYs5y4DREpf4jdOhbCUA0YIFYChyOO1KPLNOL92EvOCJXx0PWl0Rp 4aaac9GaCf4eM8OLQhntzpH6KqNVX1Ke57rXoufipyJVrL5pe7NcQa1UrTf1GNNz gVE0lJLI9yK6KVEMpvE6jaFIEblWA/kkHlnLEoRsv2ErYxA9WT+YpOnudysaXu4e lX8QKEo8wfKOKEWzAPc1TEC0VmCKYRA+9cKBkkAUSvzTmTCiD1ujzldc6xlBebfA C/EmFtyZET3F2cxEZdopCQYgwJpOtLpStxaCH/UrvLu0BIjkQnSb4MPfM9MBXxm/ HhKXs7r3z38QoXMqQNuABWMzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNEBugt IO8MlQ6DSs0UYFO4HlYTMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdyRd5Pg2KLATtnbQpnHPKqrmWd+S6p0XS+w/LvZCI3AzmcA9GmFS eAUFc2dqBQQlwAWCgb3u9HfjHTBCETh29PQbRyxH70vAoXgYC4xuaHtJCvuMObHT esInL/Hcw1ueFqVZ6K7kQcT7DpcltF5rxf+zTj0e9N30neZNO+pqOoFV+Asgusnz 0jLeWCzzH6Ba6B0E2kz6iHqddqCzJiAA4Kch5zRqySvN3uAnpxxWDhSeiaqf7x6L FbqprsZa7HFLM5BjKScYimIWRH9SiZOm4En8UKSfQPllZ/mmKpQuFPg3QPoGa81e AaAqgDWP4N1D74bZYmsVd5qaHiNDHM7i -----END CERTIFICATE-----Generated at Sun Dec 21 22:42:35 2025 by rpki-client