This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: bEa8SUDqLthiXPcC81UOUI0bKciKAiNlVasBiRGFMPw= Subject key identifier: 1C:1E:7B:C3:9B:8D:5E:A9:55:43:CD:E0:6E:A0:69:A4:F7:8A:32:9E Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: 4C Signing time: Fri 05 Dec 2025 05:09:20 +0000 Manifest this update: Fri 05 Dec 2025 05:09:20 +0000 Manifest next update: Fri 12 Dec 2025 05:09:20 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: z4x6GPoJVjrmYqlJNS70a3AXXyDT791hITSBxxLHmmA=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: p5eDJJHEh4Ku0YkaqmxVa+vpX9QHKpmMPC5rYwtTVzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Dec 5 05:09:20 2025 GMT Not After : Dec 12 05:09:20 2025 GMT Subject: CN=69326900-65af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ee:0c:05:c1:27:d7:8d:b5:7b:ef:75:af:b9: c5:2a:f1:5c:28:47:ff:a0:02:6a:36:3c:a0:f6:2d: 4a:37:57:0e:bb:e6:fe:b7:64:97:f0:60:0a:d3:52: ea:f3:93:92:10:0d:86:1d:72:9d:18:4b:be:09:1c: 53:f8:31:cf:38:c4:1e:85:dd:00:42:42:b8:f2:c5: 5d:2d:c1:86:d8:91:df:29:46:0b:c3:e0:87:7f:5b: 01:12:89:b6:ad:b3:f5:03:0a:76:ba:1c:10:d5:a5: 8f:d4:64:5b:a5:e6:2f:c8:8b:48:24:58:89:02:96: 1f:2b:4b:3c:27:6e:cb:d4:4c:4e:b8:b9:1c:e6:2f: 19:2e:32:19:80:8b:de:0e:1c:d7:60:6d:f2:61:d4: f5:8f:a1:58:d8:c6:21:e0:f2:db:5b:f3:30:f5:4e: 2c:9d:26:42:de:ed:08:4a:7b:c1:ae:f2:88:a5:ab: f6:ad:39:5e:86:a7:a0:f9:e2:1b:4b:0a:f7:b2:b1: 10:c2:33:53:04:49:7f:1d:06:79:a5:35:be:ee:6c: 8e:c1:1e:64:c5:3e:1d:a3:4c:27:19:2c:63:ea:09: 78:c8:d3:32:8a:88:01:38:0d:8a:c8:02:6d:57:9b: 18:ba:46:f2:cf:87:66:d3:bd:71:1d:6b:b5:e7:96: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1E:7B:C3:9B:8D:5E:A9:55:43:CD:E0:6E:A0:69:A4:F7:8A:32:9E X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d8:f8:8c:94:aa:51:a1:bf:fb:81:ce:f3:ba:72:f2:a9:c3: c8:76:f2:67:f0:c1:77:73:82:b8:6a:91:1f:07:1b:9c:d4:d7: 84:88:17:af:61:4f:e0:f0:b4:06:5c:69:d2:85:e9:f9:f6:83: 61:b4:e5:af:5c:f6:07:fe:5f:3c:25:9a:e4:7b:96:43:a5:03: ed:30:02:70:ce:d9:82:6c:4b:d8:3c:d4:58:89:cd:af:35:d8: bc:f4:37:19:4c:0e:91:37:2b:59:c4:c4:65:96:f8:3a:44:4c: 4c:84:ba:b4:88:7a:fd:ab:df:e3:1e:ca:6a:fb:d5:e1:f3:46: 51:c5:bf:14:37:72:86:e0:af:54:8b:76:db:ed:be:85:3a:a0: 14:b0:39:e1:6b:f2:16:ae:eb:b5:97:bc:f5:20:e3:6f:1c:d0: 49:4a:50:e0:d8:b1:a0:03:0d:a7:e4:b0:f8:7f:1b:f3:3c:31: fb:27:69:db:65:47:53:1b:94:bc:b0:e3:4e:2b:cf:5c:36:1c: b0:f5:ad:fe:41:f1:fa:45:80:5a:af:37:22:10:06:ba:27:5d: 7c:63:f1:1e:c6:dd:50:82:8e:60:53:52:fe:14:4d:22:c3:ce: 26:97:6f:b5:24:d6:29:3f:e9:f6:96:02:dd:95:1c:37:e0:a4: 79:c7:af:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoRkI3QjA1ODc4MzY1MUU5M0ZBMzBERDk2RDYyNjVFNkUy RjM1MjU1NDAeFw0yNTEyMDUwNTA5MjBaFw0yNTEyMTIwNTA5MjBaMBgxFjAUBgNV BAMTDTY5MzI2OTAwLTY1YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD67gwFwSfXjbV773WvucUq8VwoR/+gAmo2PKD2LUo3Vw675v63ZJfwYArTUurz k5IQDYYdcp0YS74JHFP4Mc84xB6F3QBCQrjyxV0twYbYkd8pRgvD4Id/WwESibat s/UDCna6HBDVpY/UZFul5i/Ii0gkWIkClh8rSzwnbsvUTE64uRzmLxkuMhmAi94O HNdgbfJh1PWPoVjYxiHg8ttb8zD1TiydJkLe7QhKe8Gu8oilq/atOV6Gp6D54htL CveysRDCM1MESX8dBnmlNb7ubI7BHmTFPh2jTCcZLGPqCXjI0zKKiAE4DYrIAm1X mxi6RvLPh2bTvXEda7Xnloj1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHB57w5uN XqlVQ83gbqBppPeKMp4wHwYDVR0jBBgwFoAU+3sFh4NlHpP6MN2W1iZebi81JVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0ZFQUUxMkEyNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTNzRmg0TmxIcFA2TU4yVzFpWmViaTgxSlZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0ZFQUUxMkEyNURERjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQ Nk1OMlcxaVplYmk4MUpWUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/Y+IyUqlGhv/uBzvO6cvKpw8h28mfwwXdzgrhqkR8HG5zU14SIF69h T+DwtAZcadKF6fn2g2G05a9c9gf+XzwlmuR7lkOlA+0wAnDO2YJsS9g81FiJza81 2Lz0NxlMDpE3K1nExGWW+DpETEyEurSIev2r3+Meymr71eHzRlHFvxQ3cobgr1SL dtvtvoU6oBSwOeFr8hau67WXvPUg428c0ElKUODYsaADDafksPh/G/M8Mfsnadtl R1MblLyw404rz1w2HLD1rf5B8fpFgFqvNyIQBronXXxj8R7G3VCCjmBTUv4UTSLD ziaXb7Uk1ik/6faWAt2VHDfgpHnHr9Y= -----END CERTIFICATE-----Generated at Sun Dec 7 05:38:27 2025 by rpki-client