This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: suHTo6DSBisy62OqOgNp0W7RZjD8R9fdYSu8w9buM/o= Subject key identifier: 8A:E1:4A:C8:F3:20:FA:13:5B:16:23:D7:D5:DC:E0:E2:DE:A8:C7:EA Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: D8 Signing time: Fri 05 Dec 2025 03:41:53 +0000 Manifest this update: Fri 05 Dec 2025 03:41:52 +0000 Manifest next update: Fri 12 Dec 2025 03:41:52 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: m+pnOqRfTDLHopAZF0nafWDmhztMW0J25tGN1ixzM8w=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Dec 5 03:41:52 2025 GMT Not After : Dec 12 03:41:52 2025 GMT Subject: CN=69325480-adde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:75:4a:cb:08:9e:81:5f:f6:78:f4:45:27: cd:89:c7:b4:11:b4:78:f3:77:90:d0:9c:b6:d8:73: 57:37:41:50:ec:8f:66:b8:12:21:64:92:a6:e9:b5: e9:c9:07:0c:50:dd:6c:77:7d:0b:3a:0c:ef:24:ba: 8b:27:41:b4:42:67:a2:30:5b:52:5e:ca:dd:2d:42: db:ab:40:fa:c8:c0:b7:50:58:0f:1b:d3:98:0f:0a: 14:f2:1a:2c:89:14:10:41:c7:75:f6:84:06:d5:96: cb:9a:05:90:22:80:8f:fd:c9:b6:09:3c:78:ca:92: d3:fe:98:68:67:44:39:c2:bc:65:06:a3:0f:75:24: 93:87:9f:a0:25:cc:5d:37:fe:92:2c:57:34:50:44: db:66:06:03:b9:fe:d8:19:df:eb:b1:58:22:ce:25: 7e:df:4b:8f:7e:85:87:46:f6:9b:13:b4:ff:61:5d: cc:c0:33:05:17:19:f2:8b:48:a7:91:6b:59:40:57: d1:20:51:a5:a3:e1:e9:ed:27:61:c4:eb:ee:9a:1b: 10:78:85:c2:28:3a:d7:5e:8f:11:6b:8a:a0:5b:c2: f6:d5:82:21:fe:95:8e:6f:c2:6a:62:fd:f1:2a:69: 1d:4d:3b:09:77:64:7d:dc:a1:75:d5:4c:f9:32:c1: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:4A:C8:F3:20:FA:13:5B:16:23:D7:D5:DC:E0:E2:DE:A8:C7:EA X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:c5:20:67:e9:70:fb:4c:10:0c:b6:60:fa:52:91:2e:99: 72:47:6a:9b:9d:97:6f:7e:b4:9a:53:33:95:3b:7b:f0:e3:75: bc:74:76:52:d1:29:a0:be:3c:13:02:b8:c9:d5:d2:9d:ff:bf: 53:4e:96:75:c3:ca:3d:c2:e6:e8:0c:4f:2a:87:f2:f0:f3:d1: 0b:b4:50:16:c5:2e:f5:bd:7c:6b:74:a5:7e:5b:ad:58:70:65: fd:b6:bc:64:72:2f:ab:50:03:f8:92:9a:37:0a:0a:e9:1d:c7: 6c:c8:31:e3:4a:c5:c7:4e:3f:b8:5f:63:50:b2:5e:00:8f:f8: f5:f9:c4:27:c4:f9:4d:f5:b5:7b:08:cc:e2:b5:3f:be:f8:5e: 9f:df:e4:fb:cd:06:5c:32:43:c2:32:7c:d6:fc:2a:ab:a3:19: d8:cf:17:fe:37:19:4b:86:ff:30:d5:46:d4:c1:70:d4:e5:1d: 22:a2:08:85:28:0f:8e:34:53:92:6d:65:d0:20:0a:ec:cb:a5: 59:e7:db:b7:33:62:75:b4:05:55:60:82:5c:fb:ad:7b:b6:8f: fc:09:f8:8d:48:65:32:c6:27:4a:b8:37:dc:e8:f8:71:b3:8e: 59:3e:27:8f:40:1f:35:03:d2:2f:29:67:7e:8e:4d:cc:ef:61: 43:1d:09:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjUxMjA1MDM0MTUyWhcNMjUxMjEyMDM0MTUyWjAYMRYwFAYD VQQDEw02OTMyNTQ4MC1hZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJZ1SssInoFf9nj0RSfNice0EbR483eQ0Jy22HNXN0FQ7I9muBIhZJKm6bXp yQcMUN1sd30LOgzvJLqLJ0G0QmeiMFtSXsrdLULbq0D6yMC3UFgPG9OYDwoU8hos iRQQQcd19oQG1ZbLmgWQIoCP/cm2CTx4ypLT/phoZ0Q5wrxlBqMPdSSTh5+gJcxd N/6SLFc0UETbZgYDuf7YGd/rsVgiziV+30uPfoWHRvabE7T/YV3MwDMFFxnyi0in kWtZQFfRIFGlo+Hp7SdhxOvumhsQeIXCKDrXXo8Ra4qgW8L21YIh/pWOb8JqYv3x KmkdTTsJd2R93KF11Uz5MsHznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrhSsjz IPoTWxYj19Xc4OLeqMfqMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmMUgZ+lw+0wQDLZg+lKRLplyR2qbnZdvfrSaUzOVO3vw43W8dHZS 0SmgvjwTArjJ1dKd/79TTpZ1w8o9wuboDE8qh/Lw89ELtFAWxS71vXxrdKV+W61Y cGX9trxkci+rUAP4kpo3CgrpHcdsyDHjSsXHTj+4X2NQsl4Aj/j1+cQnxPlN9bV7 CMzitT+++F6f3+T7zQZcMkPCMnzW/CqroxnYzxf+NxlLhv8w1UbUwXDU5R0iogiF KA+ONFOSbWXQIArsy6VZ59u3M2J1tAVVYIJc+617to/8CfiNSGUyxidKuDfc6Phx s45ZPiePQB81A9IvKWd+jk3M72FDHQn3 -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:49 2025 by rpki-client