This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: u+xA3hheETl/FbMpKDya7Ou4tv0jkuH3LYF7oJLoGRo= Subject key identifier: 3C:96:E7:89:8A:47:B8:94:26:CE:CB:0B:05:81:E4:36:17:27:91:87 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 016D Signing time: Fri 05 Dec 2025 02:04:16 +0000 Manifest this update: Fri 05 Dec 2025 02:04:16 +0000 Manifest next update: Fri 12 Dec 2025 02:04:16 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: 0YQXPbNJkN6YOLHOg1OitND12QPzrLxLsD8wb6Eyf7Q=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: f4bAe1+5wb0cwDVNLjPL2QNz/OBAZDY7LyZRiQiFweU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Dec 5 02:04:16 2025 GMT Not After : Dec 12 02:04:16 2025 GMT Subject: CN=69323da0-5bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:41:bd:db:c5:49:17:a4:1e:59:7d:19:bd: cd:04:3d:9a:9f:b7:22:dd:c7:89:a7:91:ce:11:38: 44:65:ec:f9:df:3b:17:96:0c:83:bf:da:4d:b8:b5: d5:76:27:f9:04:70:3a:7c:09:f8:84:2e:eb:c1:b5: 23:26:3d:c8:6f:c0:e4:4a:ce:70:a4:d2:4c:b2:b6: 71:e6:35:00:4c:41:1c:c0:b2:0e:4c:72:8b:fa:c3: 94:6b:48:1d:9f:1d:9a:9d:e9:7c:e6:46:85:52:a3: 81:35:f5:c5:36:9f:6d:28:53:b6:0c:15:b4:86:9d: bd:fb:d6:bd:06:35:00:a4:fd:bc:85:46:22:36:34: a8:07:37:2d:c5:00:aa:71:08:4f:19:ce:86:40:5e: 6a:ee:43:64:35:5c:a5:4e:32:91:80:81:04:67:9c: b1:14:98:e5:16:e2:ed:4b:52:17:4b:d8:da:7f:72: 7f:a1:60:e7:f5:96:38:c7:7f:22:91:a2:7e:d1:f3: b0:a4:ff:8f:42:f8:53:f0:7f:e1:72:30:99:6c:58: 49:a1:84:51:5f:34:60:f5:91:28:42:b8:d1:3a:e7: 15:99:7c:36:3a:e7:14:b0:c0:f4:db:a0:d2:06:90: 0d:c8:d4:9d:0b:25:6e:4c:47:74:d9:35:1c:9e:62: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:E7:89:8A:47:B8:94:26:CE:CB:0B:05:81:E4:36:17:27:91:87 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e9:c3:75:17:ce:6b:98:6b:e2:01:bf:52:c3:20:1b:47:d0: f2:ff:4e:43:6e:5b:44:28:12:0f:60:23:f2:13:11:af:7f:01: 5c:09:4f:03:12:96:71:21:9f:a2:f7:57:1f:14:d7:8e:e3:8c: 28:7c:64:21:53:0b:c1:2e:33:e0:9a:c9:3d:b2:d8:0b:11:cb: 32:f3:d7:d9:92:86:c5:dd:46:bb:87:43:79:12:63:ad:34:a6: 02:9f:c9:56:31:68:fc:c6:ef:23:c4:d1:d3:39:9e:c7:f0:67: ab:9a:53:52:04:d3:aa:c3:d8:32:6a:87:b8:d6:3f:26:e9:a3: 93:c4:c5:99:f6:03:eb:e0:5a:1c:fc:5a:ad:88:63:c5:a3:d1: 19:42:38:f9:47:57:eb:6e:a8:0e:0a:16:04:8f:76:d6:db:bd: ec:ad:93:42:fa:7c:ad:d3:af:89:92:d8:43:12:d1:0e:21:59: a7:91:d0:92:f2:3b:49:2b:0d:31:19:a6:21:ba:b3:2f:83:98: 2b:42:cb:da:13:eb:40:69:48:d3:15:69:65:82:53:49:0e:e0: 97:bb:e9:0d:b8:0e:77:77:b0:47:e6:65:76:f9:3a:8c:15:c9: 18:7d:02:3e:6a:b0:a0:3f:a1:1c:c7:e8:6b:07:04:b9:b5:50: d2:01:eb:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUxMjA1MDIwNDE2WhcNMjUxMjEyMDIwNDE2WjAYMRYwFAYD VQQDEw02OTMyM2RhMC01YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjdBvdvFSRekHll9Gb3NBD2an7ci3ceJp5HOEThEZez53zsXlgyDv9pNuLXV dif5BHA6fAn4hC7rwbUjJj3Ib8DkSs5wpNJMsrZx5jUATEEcwLIOTHKL+sOUa0gd nx2anel85kaFUqOBNfXFNp9tKFO2DBW0hp29+9a9BjUApP28hUYiNjSoBzctxQCq cQhPGc6GQF5q7kNkNVylTjKRgIEEZ5yxFJjlFuLtS1IXS9jaf3J/oWDn9ZY4x38i kaJ+0fOwpP+PQvhT8H/hcjCZbFhJoYRRXzRg9ZEoQrjROucVmXw2OucUsMD026DS BpANyNSdCyVuTEd02TUcnmL8EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyW54mK R7iUJs7LCwWB5DYXJ5GHMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb6cN1F85rmGviAb9SwyAbR9Dy/05DbltEKBIPYCPyExGvfwFcCU8D EpZxIZ+i91cfFNeO44wofGQhUwvBLjPgmsk9stgLEcsy89fZkobF3Ua7h0N5EmOt NKYCn8lWMWj8xu8jxNHTOZ7H8GermlNSBNOqw9gyaoe41j8m6aOTxMWZ9gPr4Foc /FqtiGPFo9EZQjj5R1frbqgOChYEj3bW273srZNC+nyt06+JkthDEtEOIVmnkdCS 8jtJKw0xGaYhurMvg5grQsvaE+tAaUjTFWllglNJDuCXu+kNuA53d7BH5mV2+TqM FckYfQI+arCgP6Ecx+hrBwS5tVDSAet6 -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:04 2025 by rpki-client