This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: WMLRaSWM5GwxplErGwz8W6ptZaFM668+oZfuvg5Y4+g= Subject key identifier: 39:AF:8F:9A:B7:92:38:21:2B:71:DC:B9:4F:C2:7E:61:BE:86:C4:4E Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0C74 Signing time: Sat 06 Dec 2025 17:53:48 +0000 Manifest this update: Sat 06 Dec 2025 17:53:47 +0000 Manifest next update: Sat 13 Dec 2025 17:53:47 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: u0JVM4iRem5LEhrZPK5B/EY3R03H+QZx2Bl/Tafoi+I=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: 1qzItKWorYUUOmMK79qcFmJ05vCRXkNln617yx1hDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Dec 6 17:53:47 2025 GMT Not After : Dec 13 17:53:47 2025 GMT Subject: CN=69346dab-9119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:ee:6c:c0:22:ef:98:ca:0f:8a:77:62:95: 5a:f3:b2:58:73:01:f4:2e:7b:7e:10:cf:5b:3b:7b: 24:f3:42:eb:c3:74:91:1d:48:b2:33:20:b8:cd:e5: 1b:82:48:8f:c3:6d:56:50:3c:3f:01:51:db:1c:4d: cb:5b:cc:0a:da:0e:56:98:68:9c:6b:ce:79:38:bc: e3:58:ae:d6:3a:99:bb:20:5f:14:0e:07:c4:f8:56: 3d:8c:5a:65:6e:38:c9:0c:6e:bf:0c:3a:40:75:c5: 4f:19:85:3a:bf:18:ab:28:e3:e5:3f:6d:44:c4:e4: e9:a5:02:82:04:cb:46:86:26:96:55:ea:fc:ff:66: 7b:55:47:54:cb:a3:f2:70:7e:bc:e1:6b:2e:82:fb: 09:6d:82:e4:bd:af:2a:31:ab:63:80:ec:2e:07:4c: 5f:1a:bb:83:10:cc:bf:98:98:60:2e:70:21:c9:0a: 83:ff:07:da:71:e1:bd:2f:6a:37:11:62:33:ce:12: c4:02:b6:d4:81:62:5c:3a:af:1b:0d:60:63:7e:3e: 9a:a3:39:7e:e4:9f:07:ab:0c:60:bb:01:f1:b5:95: 48:71:fc:8d:75:fa:4f:9a:4f:70:05:aa:27:f5:75: b0:57:54:d3:bf:a6:3c:ee:dd:6f:26:c6:61:ca:22: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:8F:9A:B7:92:38:21:2B:71:DC:B9:4F:C2:7E:61:BE:86:C4:4E X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:65:51:4f:e4:af:7b:de:a6:48:05:3f:63:3e:43:50:47:28: 12:23:ce:91:8f:a4:cb:5c:67:f0:af:0b:c4:06:8c:8c:45:8e: 5e:37:b7:67:a1:67:e2:a6:a1:e0:86:a0:31:a4:dc:f5:1e:4c: 15:41:f9:e9:01:fb:a0:2d:77:89:08:a0:6d:6d:42:5c:2b:c2: 82:61:25:c1:ee:8b:74:89:1a:52:45:b5:0d:90:3e:34:95:98: 0e:24:a9:8f:7d:5f:e9:24:1f:cd:1c:8e:1e:10:d9:07:45:0e: d3:db:e5:44:e8:2d:29:ca:48:79:e0:48:d1:6f:93:fd:6d:71: 30:b0:34:70:b8:df:ca:20:75:dc:da:30:9b:62:8c:2d:e7:ef: fd:03:ed:73:df:fd:d4:58:4f:9a:ae:dc:1f:f1:cf:0d:90:0c: 41:3f:9b:2a:59:0b:cf:c6:e0:72:09:18:c9:f9:8a:ea:ed:38: 80:5c:46:cc:e8:06:1c:6a:d4:28:06:58:7a:0b:34:24:1c:65: d8:58:75:7d:f5:7d:0c:d5:e5:2b:b5:d0:d0:cd:e1:f6:b3:ae: 05:9f:fd:5a:55:6e:3c:27:cd:85:17:ee:be:22:ac:1b:89:4c: d6:00:39:7c:f7:aa:a6:ad:5c:d1:62:5b:ec:83:4c:40:38:e2: 11:a7:18:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjUxMjA2MTc1MzQ3WhcNMjUxMjEzMTc1MzQ3WjAYMRYwFAYD VQQDEw02OTM0NmRhYi05MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmTubMAi75jKD4p3YpVa87JYcwH0Lnt+EM9bO3sk80Lrw3SRHUiyMyC4zeUb gkiPw21WUDw/AVHbHE3LW8wK2g5WmGica855OLzjWK7WOpm7IF8UDgfE+FY9jFpl bjjJDG6/DDpAdcVPGYU6vxirKOPlP21ExOTppQKCBMtGhiaWVer8/2Z7VUdUy6Py cH684WsugvsJbYLkva8qMatjgOwuB0xfGruDEMy/mJhgLnAhyQqD/wfaceG9L2o3 EWIzzhLEArbUgWJcOq8bDWBjfj6aozl+5J8HqwxguwHxtZVIcfyNdfpPmk9wBaon 9XWwV1TTv6Y87t1vJsZhyiJdqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmvj5q3 kjghK3HcuU/CfmG+hsROMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ZVFP5K973qZIBT9jPkNQRygSI86Rj6TLXGfwrwvEBoyMRY5eN7dn oWfipqHghqAxpNz1HkwVQfnpAfugLXeJCKBtbUJcK8KCYSXB7ot0iRpSRbUNkD40 lZgOJKmPfV/pJB/NHI4eENkHRQ7T2+VE6C0pykh54EjRb5P9bXEwsDRwuN/KIHXc 2jCbYowt5+/9A+1z3/3UWE+artwf8c8NkAxBP5sqWQvPxuByCRjJ+Yrq7TiAXEbM 6AYcatQoBlh6CzQkHGXYWHV99X0M1eUrtdDQzeH2s64Fn/1aVW48J82FF+6+Iqwb iUzWADl896qmrVzRYlvsg0xAOOIRpxga -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:43 2025 by rpki-client