This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: C5edgdaE+wnjYASgpH/y/+NVKj6xiKySIyWhcxVPuAY= Subject key identifier: 37:6D:1D:DB:61:3B:29:43:8B:17:E7:FB:3D:CE:A8:93:89:34:F2:34 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B79 Signing time: Sat 06 Dec 2025 18:21:51 +0000 Manifest this update: Sat 06 Dec 2025 18:21:50 +0000 Manifest next update: Sat 13 Dec 2025 18:21:50 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: GiySIfPZH5Nw1Cu1+Ar1OKakkj0KPDJ/+eMfYr9BPCg=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Dec 6 18:21:50 2025 GMT Not After : Dec 13 18:21:50 2025 GMT Subject: CN=6934743e-00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:02:d9:b4:ef:fb:a1:c7:19:4f:91:7d:5d: 90:c4:b8:f2:ee:f2:c9:e4:e2:d1:37:c3:5b:97:24: dc:9d:55:d6:91:8a:39:f1:5c:4c:f2:bf:02:81:4b: ec:6a:32:6a:94:d8:4e:1c:56:6a:71:79:7c:90:30: 44:6a:af:3c:b3:a8:2a:f8:f6:5a:c7:fa:53:7b:79: 76:ce:83:fa:18:67:4f:e9:ab:13:d0:dd:b8:73:d6: 38:02:95:23:e9:9f:c0:2d:10:79:b5:6c:05:fc:82: de:2f:b6:f0:8e:5b:d7:cd:aa:17:43:8c:cd:38:fb: b0:f8:5b:ac:c3:6a:37:f4:8d:ce:1b:b5:4a:95:93: bb:0a:5a:00:cb:42:35:b2:2e:52:8a:4c:b4:47:af: ac:49:67:d0:7f:0c:be:67:73:c5:1e:d2:e3:75:30: 79:d7:c4:8f:43:f3:a9:0e:41:5c:7b:96:12:72:98: f0:a1:93:5c:54:85:a7:5b:4d:5a:54:99:8e:19:09: 8d:f7:19:55:2e:d7:89:3f:35:ed:f2:48:69:25:3f: 28:10:1e:ca:d1:51:1a:eb:4d:76:78:de:90:ec:eb: 33:a4:8f:a4:58:e8:ef:1c:b2:67:b7:b5:21:48:96: b7:c9:8f:15:2a:1a:2a:ee:cd:07:83:b0:53:10:d7: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:1D:DB:61:3B:29:43:8B:17:E7:FB:3D:CE:A8:93:89:34:F2:34 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:e7:ee:26:7b:d3:b2:85:31:32:d7:09:b3:6e:11:dd:ac: 5b:bb:f6:c2:e0:f9:3a:0d:61:29:7b:1d:ab:41:67:6a:04:37: 31:c9:12:c8:1e:9d:47:75:2c:73:5c:25:c4:dc:67:f6:97:23: 23:6e:f5:7c:86:26:22:52:45:67:71:f3:fc:e7:57:e2:c2:a2: c4:e5:f1:96:c1:4b:af:8a:38:d3:82:1a:c5:6e:21:18:e8:39: 16:ed:1f:c1:7f:7f:91:ec:03:1f:45:b1:e0:0d:f2:df:15:0c: 12:f0:b1:b1:0b:a2:12:b6:d0:ab:2f:f5:ad:dd:7e:8f:51:26: 91:d5:cc:68:10:e1:55:98:97:ff:7f:2d:d2:0f:f7:1c:2d:04: 80:91:48:2d:26:da:03:31:9c:13:12:4a:f3:0d:8b:b0:fc:d9: ea:8e:22:3c:bb:5e:13:a7:37:cd:20:c4:76:c9:90:c6:01:e9: c5:53:0c:61:35:7a:81:6f:3b:c8:8c:59:d8:d1:43:4b:d9:99: 45:bc:9d:c7:43:b3:f6:30:a6:be:78:99:39:d2:00:9c:f8:1b: c9:91:0d:e1:d7:f4:5e:d0:b8:0d:c9:ed:8e:a0:76:18:9f:28: d8:1c:42:8c:c2:78:c6:97:03:c6:0c:c9:ac:71:90:e3:59:68: c2:a7:8d:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUxMjA2MTgyMTUwWhcNMjUxMjEzMTgyMTUwWjAYMRYwFAYD VQQDEw02OTM0NzQzZS0wMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb4C2bTv+6HHGU+RfV2QxLjy7vLJ5OLRN8NblyTcnVXWkYo58VxM8r8CgUvs ajJqlNhOHFZqcXl8kDBEaq88s6gq+PZax/pTe3l2zoP6GGdP6asT0N24c9Y4ApUj 6Z/ALRB5tWwF/ILeL7bwjlvXzaoXQ4zNOPuw+Fusw2o39I3OG7VKlZO7CloAy0I1 si5Siky0R6+sSWfQfwy+Z3PFHtLjdTB518SPQ/OpDkFce5YScpjwoZNcVIWnW01a VJmOGQmN9xlVLteJPzXt8khpJT8oEB7K0VEa6012eN6Q7OszpI+kWOjvHLJnt7Uh SJa3yY8VKhoq7s0Hg7BTENf5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdtHdth OylDixfn+z3OqJOJNPI0MB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6xefuJnvTsoUxMtcJs24R3axbu/bC4Pk6DWEpex2rQWdqBDcxyRLI Hp1HdSxzXCXE3Gf2lyMjbvV8hiYiUkVncfP851fiwqLE5fGWwUuvijjTghrFbiEY 6DkW7R/Bf3+R7AMfRbHgDfLfFQwS8LGxC6ISttCrL/Wt3X6PUSaR1cxoEOFVmJf/ fy3SD/ccLQSAkUgtJtoDMZwTEkrzDYuw/NnqjiI8u14TpzfNIMR2yZDGAenFUwxh NXqBbzvIjFnY0UNL2ZlFvJ3HQ7P2MKa+eJk50gCc+BvJkQ3h1/Re0LgNye2OoHYY nyjYHEKMwnjGlwPGDMmscZDjWWjCp43Z -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:04 2025 by rpki-client