This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: ayIuqVhb2VDTWFLJ7tLtgmuW8/ZSStpxkkMYWWZ4xB0= Subject key identifier: E3:3A:6A:BE:63:BE:79:AB:F5:7B:1B:B3:1B:FD:B6:AE:06:0F:81:65 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 168E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1678 Signing time: Sat 06 Dec 2025 16:18:48 +0000 Manifest this update: Sat 06 Dec 2025 16:18:47 +0000 Manifest next update: Sat 13 Dec 2025 16:18:47 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: HGSBL2m7L+3SNAqMMtoIWDnjJRiklCp4MN7u0SFLBtA=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5774 (0x168e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Dec 6 16:18:47 2025 GMT Not After : Dec 13 16:18:47 2025 GMT Subject: CN=69345768-47ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:4e:94:3c:39:54:21:e3:07:82:96:35:e0: 44:34:39:b9:46:22:ce:36:15:6c:da:03:b4:1b:d4: 35:48:2b:4b:41:91:78:be:3d:01:7f:0b:95:f8:1d: 86:0f:76:1b:6d:5d:bc:1e:e1:ac:bf:b6:dc:5b:54: a7:02:e5:59:1a:9c:f6:b8:9e:e1:43:19:92:90:43: 88:f5:20:67:e7:0c:b8:d1:d8:6d:70:bd:d6:3c:d8: bf:b0:48:99:38:7e:a9:4e:90:f9:9d:49:39:e2:a2: 27:2a:ff:3c:e8:7c:cd:47:0e:03:1d:1a:77:f0:81: ac:50:27:57:65:cd:8e:39:42:09:ad:d5:10:a7:7f: 11:ed:fb:95:6a:f3:2a:dc:93:a5:83:64:6f:7f:3c: 38:ee:4e:f0:5f:95:8a:75:07:92:ab:05:42:71:9a: c5:4e:b3:a3:9a:f6:3c:7c:7e:d2:b1:b8:e3:4e:9c: 75:3e:a8:74:8a:34:c1:ab:fa:eb:fc:09:60:0f:92: b2:4e:64:49:05:06:54:50:41:0c:67:eb:71:5f:e0: 93:10:ad:e1:bf:6a:64:8e:18:0c:c4:fc:34:80:8a: bd:df:ce:34:38:c2:2e:31:aa:b5:6c:10:da:4d:5c: 8a:ff:b5:a0:45:f8:8c:16:b6:32:1b:b5:77:21:e8: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3A:6A:BE:63:BE:79:AB:F5:7B:1B:B3:1B:FD:B6:AE:06:0F:81:65 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ef:97:dd:5f:7e:32:5b:9b:da:76:8c:fa:5c:ff:e4:e9:2b: 8d:8c:60:80:24:d4:f6:84:9b:ef:54:01:5f:ea:6f:35:ce:0a: c7:f9:8b:d2:53:b7:60:b0:f0:ab:b8:bf:86:60:fc:b2:a6:c2: 52:7c:18:7b:b1:7e:b6:e9:f4:52:37:16:dc:d2:95:f6:55:61: 0f:5c:cd:eb:ae:e8:3f:a7:6a:af:c3:b0:95:91:42:5f:b8:f0: 46:e4:44:47:87:7d:19:e6:dd:20:11:40:10:97:bb:83:11:29: fb:e3:fb:64:49:21:fe:c8:0c:46:e9:10:28:91:d3:28:e0:42: 77:b9:25:58:d6:96:b9:cc:84:4f:d1:a3:d3:da:e1:d6:73:ae: ee:5c:26:dd:d5:40:67:12:38:c5:e0:2f:03:ca:47:23:95:91: b7:b9:60:ac:3a:7f:05:d0:05:59:b9:78:f4:97:7f:8d:b4:ac: 8d:de:47:80:47:95:24:04:b9:06:c9:01:1a:e6:79:dd:81:77: ca:59:d0:88:13:bf:ad:1e:4e:0e:64:4e:d5:77:a3:33:8c:e6: d8:da:11:be:e5:56:11:d3:2e:3e:6b:9e:69:f8:24:9e:2d:de: a7:bd:45:54:cd:65:51:34:14:12:6e:d6:68:e2:33:6e:6c:06: 4a:e3:a3:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUxMjA2MTYxODQ3WhcNMjUxMjEzMTYxODQ3WjAYMRYwFAYD VQQDEw02OTM0NTc2OC00N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bhOlDw5VCHjB4KWNeBENDm5RiLONhVs2gO0G9Q1SCtLQZF4vj0BfwuV+B2G D3YbbV28HuGsv7bcW1SnAuVZGpz2uJ7hQxmSkEOI9SBn5wy40dhtcL3WPNi/sEiZ OH6pTpD5nUk54qInKv886HzNRw4DHRp38IGsUCdXZc2OOUIJrdUQp38R7fuVavMq 3JOlg2Rvfzw47k7wX5WKdQeSqwVCcZrFTrOjmvY8fH7SsbjjTpx1Pqh0ijTBq/rr /AlgD5KyTmRJBQZUUEEMZ+txX+CTEK3hv2pkjhgMxPw0gIq93840OMIuMaq1bBDa TVyK/7WgRfiMFrYyG7V3IejZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM6ar5j vnmr9Xsbsxv9tq4GD4FlMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi75fdX34yW5vadoz6XP/k6SuNjGCAJNT2hJvvVAFf6m81zgrH+YvS U7dgsPCruL+GYPyypsJSfBh7sX626fRSNxbc0pX2VWEPXM3rrug/p2qvw7CVkUJf uPBG5ERHh30Z5t0gEUAQl7uDESn74/tkSSH+yAxG6RAokdMo4EJ3uSVY1pa5zIRP 0aPT2uHWc67uXCbd1UBnEjjF4C8DykcjlZG3uWCsOn8F0AVZuXj0l3+NtKyN3keA R5UkBLkGyQEa5nndgXfKWdCIE7+tHk4OZE7Vd6MzjObY2hG+5VYR0y4+a55p+CSe Ld6nvUVUzWVRNBQSbtZo4jNubAZK46Nv -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:51 2025 by rpki-client