This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json) Hash identifier: winzU0hD5k+dGQyf1BGvpI+tRgV3TbSycfe4rnHnhnU= Subject key identifier: 4C:DE:0E:A1:B9:7D:4D:D0:EE:21:BB:84:5C:80:92:67:1B:32:12:CC Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft Manifest number: 2D Signing time: Fri 05 Dec 2025 05:27:20 +0000 Manifest this update: Fri 05 Dec 2025 05:27:20 +0000 Manifest next update: Fri 12 Dec 2025 05:27:20 +0000 Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: nSxFPpP58q/1BbhCFkND4pU9F9BiUjHCtKTkDnp7f14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Validity Not Before: Dec 5 05:27:20 2025 GMT Not After : Dec 12 05:27:20 2025 GMT Subject: CN=69326d38-a9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:10:e7:88:4e:00:c7:e4:46:c4:29:97:d2: 82:0d:12:c6:44:59:74:af:b7:01:6e:6b:82:d2:a7: be:5f:cb:d4:43:da:e4:68:75:cf:6e:e7:10:0d:b3: 08:25:9c:c4:3e:7e:4a:52:82:a3:f4:62:c3:aa:aa: 7b:46:f2:6c:c9:e9:e0:60:be:3a:f4:2c:7e:31:0a: 4b:9c:77:8d:3c:78:62:1e:18:0d:ba:90:51:93:6c: 16:e7:9a:51:54:ae:bd:a5:62:e5:57:0b:3a:3b:b6: fd:f5:0b:f9:f7:66:e6:63:c2:95:9d:6d:ce:6d:6d: 60:a5:58:99:6e:ac:99:eb:99:68:f3:6c:f1:41:92: a1:c1:a1:ec:82:d0:24:18:ae:17:18:1c:a8:eb:77: 10:71:6e:1a:9c:c7:b4:92:83:8f:53:a0:49:06:7c: e1:d6:48:05:d6:ad:bb:8b:24:40:ce:6b:4f:96:5c: e4:b1:20:47:e5:44:b6:9d:fd:bd:94:e8:ab:82:d5: 61:0e:d6:9c:1c:b3:27:11:d2:4a:69:1a:58:91:08: f9:c6:02:f6:5c:11:db:1c:1e:fc:91:1d:0d:24:11: 4a:48:23:5a:81:e4:37:55:6e:c2:ed:5b:00:f7:ae: 69:78:3f:f8:a3:d4:65:25:36:68:3e:68:10:22:fb: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DE:0E:A1:B9:7D:4D:D0:EE:21:BB:84:5C:80:92:67:1B:32:12:CC X509v3 Authority Key Identifier: keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b3:87:95:74:9d:dc:f3:d5:e2:b0:05:b8:87:c5:ee:6e:52: e5:24:27:85:64:0d:5f:a4:3f:8a:b0:1b:5e:da:d3:d6:f5:1d: d7:82:8e:bf:65:64:98:b8:83:ae:2a:f8:83:09:df:36:9b:72: 40:21:d6:64:18:1c:07:42:f8:45:47:c1:12:04:6c:c4:03:c4: d6:4f:de:46:ef:45:56:59:ca:e1:64:3b:83:ef:e5:86:2a:6a: fb:95:aa:44:4a:5e:32:b8:8c:51:b5:81:53:6b:77:42:c7:19: 1f:47:74:f2:b3:96:1e:16:45:3b:f3:d8:61:6e:22:fb:b9:b0: 20:af:98:cc:b7:a6:ec:f6:e7:94:b9:ca:e8:46:86:1b:1d:b0: 69:43:bf:a0:e4:2a:fa:7d:1a:ea:39:ab:9c:b3:83:ad:71:0c: 58:30:c2:3c:aa:ef:dd:08:b6:9b:28:89:ba:70:d0:1f:ac:00: 30:b6:6c:a2:fd:37:95:6b:ce:72:90:00:83:88:81:6e:ee:36: e6:1c:9a:e6:d3:9d:f6:3e:db:d0:5b:0a:6e:f4:ee:75:24:fc: 33:5c:5b:03:f4:ba:8e:90:95:43:dd:63:91:1b:80:1d:6a:46: 21:fb:73:2a:fd:21:a6:f1:18:75:fa:ed:08:33:02:d5:7a:b5: 45:a7:9b:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF MDBEMkZBMTAeFw0yNTEyMDUwNTI3MjBaFw0yNTEyMTIwNTI3MjBaMBgxFjAUBgNV BAMTDTY5MzI2ZDM4LWE5YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsnhDniE4Ax+RGxCmX0oINEsZEWXSvtwFua4LSp75fy9RD2uRodc9u5xANswgl nMQ+fkpSgqP0YsOqqntG8mzJ6eBgvjr0LH4xCkucd408eGIeGA26kFGTbBbnmlFU rr2lYuVXCzo7tv31C/n3ZuZjwpWdbc5tbWClWJlurJnrmWjzbPFBkqHBoeyC0CQY rhcYHKjrdxBxbhqcx7SSg49ToEkGfOHWSAXWrbuLJEDOa0+WXOSxIEflRLad/b2U 6KuC1WEO1pwcsycR0kppGliRCPnGAvZcEdscHvyRHQ0kEUpII1qB5DdVbsLtWwD3 rml4P/ij1GUlNmg+aBAi++wTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTN4Oobl9 TdDuIbuEXICSZxsyEswwHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj MUFrTjFLeUlKSWVBTkw2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKzh5V0ndzz1eKwBbiHxe5uUuUkJ4VkDV+kP4qwG17a09b1HdeCjr9l ZJi4g64q+IMJ3zabckAh1mQYHAdC+EVHwRIEbMQDxNZP3kbvRVZZyuFkO4Pv5YYq avuVqkRKXjK4jFG1gVNrd0LHGR9HdPKzlh4WRTvz2GFuIvu5sCCvmMy3puz255S5 yuhGhhsdsGlDv6DkKvp9Guo5q5yzg61xDFgwwjyq790Itpsoibpw0B+sADC2bKL9 N5VrznKQAIOIgW7uNuYcmubTnfY+29BbCm707nUk/DNcWwP0uo6QlUPdY5EbgB1q RiH7cyr9IabxGHX67QgzAtV6tUWnm1U= -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:39 2025 by rpki-client