This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: Hd16EoJwA/rCGvLvl4QpkM5BgLp2KxtHJapT3XQEDbY= Subject key identifier: 49:6D:B9:99:53:11:90:C9:6C:02:E4:A2:16:10:1E:35:C3:6D:FD:28 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0CA6 Signing time: Sat 06 Dec 2025 17:44:49 +0000 Manifest this update: Sat 06 Dec 2025 17:44:48 +0000 Manifest next update: Sat 13 Dec 2025 17:44:48 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: 36XtarXOte0tCuyMDHL4VqjF2l5AsxMkwlK0ZKneDnY=) 2: A473C9A008F311EE98719810C4F9AE02.roa (hash: I+dyDrUC3DvMgCPW4jStqejUHX8a7vo0aXHEIsgKIwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Dec 6 17:44:48 2025 GMT Not After : Dec 13 17:44:48 2025 GMT Subject: CN=69346b90-f509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:c7:e0:90:cb:70:c7:d4:be:17:b0:b1:09: 4a:7a:d0:eb:c4:ff:43:d4:64:36:79:e0:66:c2:22: dc:8d:68:11:6b:17:d7:7e:d7:24:81:d5:9f:53:e4: af:a1:25:76:e7:67:7c:7e:bf:10:fe:69:d3:ab:35: c7:c0:00:03:f5:78:b0:91:2f:ee:e9:b8:ab:cb:6f: 6b:1c:86:81:51:9c:56:48:03:98:6b:66:f2:43:36: b4:28:e1:b8:97:b2:de:bc:5b:d5:55:3a:57:91:d7: a9:8e:d9:ee:76:e9:39:de:0b:45:a6:02:a6:65:c7: 97:98:7f:5d:f2:b6:c7:8c:d4:0b:da:a0:61:c3:f4: 5d:2b:fa:8e:a3:a5:f8:5f:c4:36:2f:e2:78:b4:b3: e8:9b:c2:83:5c:73:49:a8:1b:ee:2f:78:ba:52:cf: 13:9c:87:9b:5e:40:49:23:74:33:f7:39:10:40:c3: 3d:d3:65:1f:37:3f:4b:dd:20:3d:61:b7:d4:fd:cf: 30:55:a6:1a:e4:f4:ec:99:41:5a:4d:9b:59:8f:d9: 3d:b1:2a:26:c1:11:f7:df:3a:4a:c9:bc:a4:89:fc: 85:cc:15:69:95:92:ca:ea:87:8b:90:73:43:00:37: 93:5d:6b:9d:05:cc:2c:8e:72:bf:05:da:90:48:83: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6D:B9:99:53:11:90:C9:6C:02:E4:A2:16:10:1E:35:C3:6D:FD:28 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2b:f2:59:20:7b:27:5c:86:c4:52:38:85:69:45:a7:19:8d: cb:1d:84:45:ce:68:a8:81:de:5c:25:f3:26:cd:22:de:a4:3c: fc:ec:73:57:19:7d:00:5f:de:9f:fe:d8:35:c8:35:32:c2:2a: 93:b1:6f:d0:30:67:d2:b3:5a:80:8b:38:55:98:ff:73:b1:cb: cb:6a:61:76:8c:c3:9a:13:78:86:58:bd:0e:03:d4:31:11:5e: 26:6b:11:8e:1f:52:4c:7b:1a:6f:c2:45:59:df:04:8d:93:53: 5a:c3:80:f7:fb:99:ee:25:bb:d3:1d:16:42:14:83:96:9f:e9: 52:fd:86:dd:84:4c:ca:3c:53:8c:1b:c7:44:4d:90:a5:cb:0f: cb:a3:de:4d:32:82:51:9c:ad:47:63:e9:2a:11:cc:01:30:e6: e3:ca:8f:cd:3b:42:f4:66:5d:6c:d7:2d:73:a2:9b:ab:ec:b2: 0f:4b:fd:a4:0a:8e:b1:cb:90:30:9c:86:9b:45:d4:70:e2:89: 48:ad:50:04:74:2b:d4:1e:b4:40:47:64:3f:bf:bc:41:df:6b: 03:70:f0:93:fe:07:d7:28:30:62:d6:ab:ee:80:82:6e:77:df: b7:3d:2f:5c:86:d9:43:6d:07:82:04:43:f6:a1:aa:da:94:51: a1:61:50:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjUxMjA2MTc0NDQ4WhcNMjUxMjEzMTc0NDQ4WjAYMRYwFAYD VQQDEw02OTM0NmI5MC1mNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdfH4JDLcMfUvhewsQlKetDrxP9D1GQ2eeBmwiLcjWgRaxfXftckgdWfU+Sv oSV252d8fr8Q/mnTqzXHwAAD9XiwkS/u6biry29rHIaBUZxWSAOYa2byQza0KOG4 l7LevFvVVTpXkdepjtnuduk53gtFpgKmZceXmH9d8rbHjNQL2qBhw/RdK/qOo6X4 X8Q2L+J4tLPom8KDXHNJqBvuL3i6Us8TnIebXkBJI3Qz9zkQQMM902UfNz9L3SA9 YbfU/c8wVaYa5PTsmUFaTZtZj9k9sSomwRH33zpKybykifyFzBVplZLK6oeLkHND ADeTXWudBcwsjnK/BdqQSINoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEltuZlT EZDJbALkohYQHjXDbf0oMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZK/JZIHsnXIbEUjiFaUWnGY3LHYRFzmiogd5cJfMmzSLepDz87HNX GX0AX96f/tg1yDUywiqTsW/QMGfSs1qAizhVmP9zscvLamF2jMOaE3iGWL0OA9Qx EV4maxGOH1JMexpvwkVZ3wSNk1Naw4D3+5nuJbvTHRZCFIOWn+lS/YbdhEzKPFOM G8dETZClyw/Lo95NMoJRnK1HY+kqEcwBMObjyo/NO0L0Zl1s1y1zopur7LIPS/2k Co6xy5AwnIabRdRw4olIrVAEdCvUHrRAR2Q/v7xB32sDcPCT/gfXKDBi1qvugIJu d9+3PS9chtlDbQeCBEP2oaralFGhYVAz -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:50 2025 by rpki-client