This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: jC+mk627mdgayiWvwtIh0VCW4V4zrhntL9kpPU6hzus= Subject key identifier: 36:C8:EC:15:CE:51:D8:78:22:2E:24:C9:8B:9B:86:A8:40:43:83:BE Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 013D Signing time: Fri 05 Dec 2025 02:30:07 +0000 Manifest this update: Fri 05 Dec 2025 02:30:07 +0000 Manifest next update: Fri 12 Dec 2025 02:30:07 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: Tk0XUXyGxnYwaOIkJ3mKgbwt6BrIXp1UkH+I3OlPol4=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Dec 5 02:30:07 2025 GMT Not After : Dec 12 02:30:07 2025 GMT Subject: CN=693243af-7d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:8d:a1:d7:e5:9a:f0:6b:d0:04:07:89:5c: bc:1d:86:e9:7e:1a:1d:5d:5d:da:6c:d9:7e:3a:0a: 95:1f:25:74:06:f0:82:4a:5c:dd:0f:d6:30:ab:8e: 97:46:9f:e6:c3:8d:05:64:dc:66:55:f7:9a:7f:33: 3b:59:bc:9b:9f:34:53:dd:d4:48:be:70:a6:7c:c5: a6:c3:1d:b8:1c:4b:7c:63:ea:fe:dc:fa:ff:c1:16: 05:a3:ec:15:b0:13:b5:b1:f5:25:13:04:db:af:39: 69:ff:04:ae:0b:c9:5c:e2:0e:fe:bd:90:51:8e:0b: f4:e6:4e:72:00:28:38:96:18:e8:5f:15:54:82:87: 10:71:e1:26:7c:2f:41:e0:ce:99:18:48:0a:81:50: 41:b6:22:c1:1d:28:be:e0:19:27:b6:bf:b0:f1:98: c8:4a:39:fd:d3:ae:cf:c6:ee:e6:d2:ca:98:40:e8: f2:d5:f9:48:02:d9:8f:95:dd:95:c7:ff:97:2c:65: 41:b8:a2:54:b5:be:31:c0:05:af:42:ee:d4:4c:c5: ba:c3:50:83:ba:8c:4b:d0:be:fc:34:81:01:cc:e0: 9f:cd:d0:b1:bf:94:9e:4f:29:76:5b:32:4c:b0:ba: f1:67:d8:c1:be:ff:83:3b:06:e0:d0:42:df:eb:63: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:EC:15:CE:51:D8:78:22:2E:24:C9:8B:9B:86:A8:40:43:83:BE X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1e:f4:d7:43:e0:5f:c1:a7:f8:61:71:89:b6:0a:f4:c9:72: 26:38:d8:32:dd:fc:03:b7:d2:bb:02:dd:a1:27:76:35:66:7e: b4:e9:3d:83:50:28:e5:6f:3f:3a:76:61:53:f8:cc:cc:19:18: af:9e:14:a6:e8:ce:7d:04:b8:21:18:da:b3:b1:ed:46:8c:5e: a1:15:13:37:5d:d9:47:67:87:93:cb:b5:0c:a2:ed:4e:c6:fc: 7f:93:f1:38:8f:4f:c1:dd:cd:d5:b3:15:f2:cb:37:4e:1b:39: 8c:43:71:cc:86:3e:84:18:63:3c:ef:1d:00:79:d1:e1:00:b9: 03:f7:36:d4:9a:66:1e:99:45:34:69:64:99:26:ed:ef:c4:e7: a2:7c:28:b1:ac:02:89:ca:b0:75:15:a4:41:9c:50:90:be:ea: 1b:db:3e:a6:97:3e:3f:6e:05:cb:3d:4d:ae:10:78:c3:c2:2f: ef:72:44:ae:f2:7e:25:b5:cc:ed:cc:b4:5b:b3:ba:5b:f1:2a: 29:c5:89:f9:d6:2e:53:b3:cf:31:f9:6f:d3:98:3e:9c:70:6f: b2:18:3a:53:f2:7d:e0:da:dd:1c:76:d2:96:8f:69:b2:2c:de: ef:a9:9e:c6:4f:2d:06:1d:63:11:17:29:0c:ec:29:a7:61:93: 23:bd:16:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUxMjA1MDIzMDA3WhcNMjUxMjEyMDIzMDA3WjAYMRYwFAYD VQQDEw02OTMyNDNhZi03ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdWNodflmvBr0AQHiVy8HYbpfhodXV3abNl+OgqVHyV0BvCCSlzdD9Ywq46X Rp/mw40FZNxmVfeafzM7WbybnzRT3dRIvnCmfMWmwx24HEt8Y+r+3Pr/wRYFo+wV sBO1sfUlEwTbrzlp/wSuC8lc4g7+vZBRjgv05k5yACg4lhjoXxVUgocQceEmfC9B 4M6ZGEgKgVBBtiLBHSi+4Bkntr+w8ZjISjn9067Pxu7m0sqYQOjy1flIAtmPld2V x/+XLGVBuKJUtb4xwAWvQu7UTMW6w1CDuoxL0L78NIEBzOCfzdCxv5SeTyl2WzJM sLrxZ9jBvv+DOwbg0ELf62O+cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbI7BXO Udh4Ii4kyYubhqhAQ4O+MB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/HvTXQ+Bfwaf4YXGJtgr0yXImONgy3fwDt9K7At2hJ3Y1Zn606T2D UCjlbz86dmFT+MzMGRivnhSm6M59BLghGNqzse1GjF6hFRM3XdlHZ4eTy7UMou1O xvx/k/E4j0/B3c3VsxXyyzdOGzmMQ3HMhj6EGGM87x0AedHhALkD9zbUmmYemUU0 aWSZJu3vxOeifCixrAKJyrB1FaRBnFCQvuob2z6mlz4/bgXLPU2uEHjDwi/vckSu 8n4ltcztzLRbs7pb8SopxYn51i5Ts88x+W/TmD6ccG+yGDpT8n3g2t0cdtKWj2my LN7vqZ7GTy0GHWMRFykM7CmnYZMjvRZm -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:16 2025 by rpki-client