This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: HzDICaD9f/c9K5L34+uMiIYLCLU3aanPv3QAtDb3jHI= Subject key identifier: D7:D1:B3:03:1A:40:32:C0:EE:DE:E6:1C:A6:C8:5D:C6:BE:41:DE:99 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0248 Signing time: Sun 07 Dec 2025 00:18:53 +0000 Manifest this update: Sun 07 Dec 2025 00:18:52 +0000 Manifest next update: Sun 14 Dec 2025 00:18:52 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: UNT0uMc0HCybkgkj3Kh+3SN5mffRWKYUGPq1DJ9BGFE=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Dec 7 00:18:52 2025 GMT Not After : Dec 14 00:18:52 2025 GMT Subject: CN=6934c7ed-94bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:c8:d7:f1:78:5c:a7:f1:23:de:c7:bd:9d: 68:47:ad:fc:8b:06:b4:b9:8c:34:45:40:84:e0:58: 7d:2d:a7:be:02:a1:05:c0:4b:10:07:cd:42:99:3b: a6:ed:34:0f:0e:d0:4c:86:52:e2:71:1f:3c:13:08: e1:f5:de:6e:78:6d:f5:9f:25:13:5d:6a:d3:41:58: 0c:c9:d9:7c:c8:e1:f1:4e:54:21:ba:9b:4b:ec:ce: 65:db:6e:f0:19:35:9d:5e:56:87:a0:c9:e5:16:42: c4:10:99:f3:29:58:60:78:98:8d:25:10:08:14:c1: 46:55:fd:40:9d:57:a0:2d:98:b1:38:79:3a:05:ad: bf:b8:7c:ca:43:0f:5c:6b:35:aa:10:b3:a4:22:94: 3d:0d:76:e8:7b:79:a4:74:c0:8f:b6:6c:5a:ca:78: ed:6d:b0:95:6b:54:43:0b:9a:a0:06:ac:1b:e2:76: 8b:7a:90:b1:da:a2:4d:01:00:1d:1d:b2:b8:aa:1e: 14:80:27:22:1c:7a:4f:78:ef:36:4c:85:aa:d1:ef: ae:1d:57:f4:16:9c:36:89:fd:d7:4c:d8:30:65:7d: 88:95:95:c1:2d:ca:62:a8:e0:3f:5e:0e:a3:55:c4: bb:00:5e:ca:32:ae:11:f0:77:06:5c:43:bb:ad:02: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D1:B3:03:1A:40:32:C0:EE:DE:E6:1C:A6:C8:5D:C6:BE:41:DE:99 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f2:34:6f:ae:e1:8a:b3:e3:92:78:48:59:2d:45:f2:53:81: e3:1a:dc:65:55:6d:f7:9a:09:e6:a1:07:3e:92:50:25:00:20: 02:d3:1f:0b:6e:43:fc:ed:00:e0:f2:24:e4:32:74:a7:00:80: 20:a2:50:fe:8e:9e:c1:58:ea:13:ef:06:11:cc:28:3f:6f:1a: 68:24:bc:3e:ea:05:7c:46:8c:af:9a:1d:53:9e:73:c1:2a:43: e4:d2:2f:25:0e:69:1b:07:2e:0a:d2:b0:9c:cf:42:28:56:dd: 06:5e:85:d5:5c:4a:d8:13:0e:3c:78:56:be:4a:1f:2f:d4:18: 57:5f:37:10:d9:71:17:0b:f6:ea:ad:ee:18:a0:eb:fb:d7:f3: 1a:ee:2a:e7:45:5c:94:c2:a8:39:05:6a:3e:fe:af:b4:5b:fb: c4:20:03:ca:9b:9f:c3:2d:fb:82:98:28:fe:be:7d:f1:8b:f6: f6:be:32:c4:26:d7:57:5a:52:ba:0e:58:21:30:0f:fd:6e:e8: 78:79:fb:f8:77:02:5a:65:f3:03:17:a8:58:93:1d:ec:6b:cb: df:ce:bb:f9:3d:c8:dc:da:db:2b:36:82:de:70:58:e1:fb:2e: e0:10:42:96:cd:cf:71:f9:13:7b:77:4a:fb:ce:33:de:7a:79: a4:89:11:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMjA3MDAxODUyWhcNMjUxMjE0MDAxODUyWjAYMRYwFAYD VQQDEw02OTM0YzdlZC05NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGbI1/F4XKfxI97HvZ1oR638iwa0uYw0RUCE4Fh9Lae+AqEFwEsQB81CmTum 7TQPDtBMhlLicR88Ewjh9d5ueG31nyUTXWrTQVgMydl8yOHxTlQhuptL7M5l227w GTWdXlaHoMnlFkLEEJnzKVhgeJiNJRAIFMFGVf1AnVegLZixOHk6Ba2/uHzKQw9c azWqELOkIpQ9DXboe3mkdMCPtmxaynjtbbCVa1RDC5qgBqwb4naLepCx2qJNAQAd HbK4qh4UgCciHHpPeO82TIWq0e+uHVf0Fpw2if3XTNgwZX2IlZXBLcpiqOA/Xg6j VcS7AF7KMq4R8HcGXEO7rQIFKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfRswMa QDLA7t7mHKbIXca+Qd6ZMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt8jRvruGKs+OSeEhZLUXyU4HjGtxlVW33mgnmoQc+klAlACAC0x8L bkP87QDg8iTkMnSnAIAgolD+jp7BWOoT7wYRzCg/bxpoJLw+6gV8Royvmh1TnnPB KkPk0i8lDmkbBy4K0rCcz0IoVt0GXoXVXErYEw48eFa+Sh8v1BhXXzcQ2XEXC/bq re4YoOv71/Ma7irnRVyUwqg5BWo+/q+0W/vEIAPKm5/DLfuCmCj+vn3xi/b2vjLE JtdXWlK6DlghMA/9buh4efv4dwJaZfMDF6hYkx3sa8vfzrv5Pcjc2tsrNoLecFjh +y7gEEKWzc9x+RN7d0r7zjPeenmkiRGA -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:39 2025 by rpki-client