This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: fjuiey93978K3EIEOERRLtH6dO7oP0Joo800wcMhqas= Subject key identifier: 2A:AA:51:16:67:BB:DE:08:39:7E:0B:85:52:D7:7A:2D:71:0B:BC:D5 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 55 Signing time: Fri 05 Dec 2025 05:13:18 +0000 Manifest this update: Fri 05 Dec 2025 05:13:18 +0000 Manifest next update: Fri 12 Dec 2025 05:13:18 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: Z0Pqj+4kyjYenQN4NcMbhNLvweR6/DdpknmZ/FTQshg=) 2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Dec 5 05:13:18 2025 GMT Not After : Dec 12 05:13:18 2025 GMT Subject: CN=693269ee-eb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:74:cb:88:c5:cb:cd:56:9a:f9:a4:89:a1:2a: 09:20:d1:d6:8a:15:92:b3:fd:9f:b7:16:38:13:d4: 17:50:c9:4c:6c:db:57:fc:3e:50:61:5b:f6:0d:92: 6c:13:c6:2d:41:91:8a:5f:fe:89:7a:9e:a8:50:f8: f3:d6:56:61:1a:b8:31:8f:f9:2d:3b:1c:77:75:67: da:ba:84:f9:4c:b0:ef:b4:b9:e8:81:9b:53:48:ee: d8:a3:e9:89:e4:de:5c:fa:df:f8:e2:6e:66:37:a5: fa:14:d9:9f:26:46:2e:dd:f2:1e:7f:89:a5:b6:fe: c6:78:7d:d5:e9:ca:45:c4:d9:d4:5b:68:54:3f:e4: 91:c2:47:60:fb:cf:dc:fe:36:18:ad:7b:f7:f2:0b: 30:56:ca:79:36:b7:01:10:80:7b:74:94:cb:55:b2: af:44:7c:eb:2a:9f:22:ef:aa:a9:44:11:57:35:f1: ed:37:13:70:c5:9d:6e:cc:20:c0:5c:cd:4b:fa:62: 29:5c:5e:35:49:aa:d3:be:bf:e6:be:36:a2:e2:1f: 6b:0e:cc:3f:d1:2e:4c:80:b6:36:a9:77:40:75:6c: 22:ad:75:94:85:3e:ea:ba:af:ff:43:cb:d9:f0:03: f7:86:77:b1:1b:8f:a3:20:c0:b4:25:63:dd:fe:04: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AA:51:16:67:BB:DE:08:39:7E:0B:85:52:D7:7A:2D:71:0B:BC:D5 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f7:44:27:54:91:88:fc:d8:bb:54:4d:0f:e7:a6:64:34:52: 9e:7e:a7:9b:da:0d:ca:36:05:20:a1:ee:15:fa:e7:4c:80:7b: 1d:c2:49:22:c1:d8:45:f9:20:7b:e8:4a:47:01:b8:b8:d7:3b: cb:ad:22:02:2d:e0:43:ec:b8:bd:15:13:d1:c8:70:dc:73:ea: 2e:96:58:09:82:fb:23:2a:22:04:2b:c7:42:0d:bb:46:73:49: 11:e2:d0:a6:b6:b3:a2:56:97:f5:a5:2c:73:02:fd:94:13:6c: 85:b2:47:55:f7:b6:fc:b6:2f:db:df:4b:96:d6:a4:ad:62:ad: 57:68:64:86:8d:ff:30:57:f4:e0:a0:c2:14:be:77:5a:72:64: b0:d1:bf:9d:7b:7e:f9:da:74:7f:8d:de:a1:7c:26:db:b3:69: e1:41:c1:9f:9e:fc:79:9c:9e:9b:6d:99:04:5f:30:48:92:9a: e5:50:e7:0d:f8:2e:4f:c3:2f:f0:74:47:29:26:0c:b8:2a:dc: 57:b4:ce:62:5f:04:d7:e9:8d:31:db:0b:4d:ad:41:25:99:a6: 11:2c:bc:bb:8f:11:9c:88:b7:f4:82:1d:b4:2a:86:14:e3:8d: 87:20:88:a4:2b:36:65:5f:6d:17:0a:8f:04:91:b9:09:1a:a1: d5:c5:1e:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTEyMDUwNTEzMThaFw0yNTEyMTIwNTEzMThaMBgxFjAUBgNV BAMTDTY5MzI2OWVlLWViMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1dMuIxcvNVpr5pImhKgkg0daKFZKz/Z+3FjgT1BdQyUxs21f8PlBhW/YNkmwT xi1BkYpf/ol6nqhQ+PPWVmEauDGP+S07HHd1Z9q6hPlMsO+0ueiBm1NI7tij6Ynk 3lz63/jibmY3pfoU2Z8mRi7d8h5/iaW2/sZ4fdXpykXE2dRbaFQ/5JHCR2D7z9z+ Nhite/fyCzBWynk2twEQgHt0lMtVsq9EfOsqnyLvqqlEEVc18e03E3DFnW7MIMBc zUv6YilcXjVJqtO+v+a+NqLiH2sOzD/RLkyAtjapd0B1bCKtdZSFPuq6r/9Dy9nw A/eGd7Ebj6MgwLQlY93+BKcVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKqpRFme7 3gg5fguFUtd6LXELvNUwHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACT3RCdUkYj82LtUTQ/npmQ0Up5+p5vaDco2BSCh7hX650yAex3CSSLB 2EX5IHvoSkcBuLjXO8utIgIt4EPsuL0VE9HIcNxz6i6WWAmC+yMqIgQrx0INu0Zz SRHi0Ka2s6JWl/WlLHMC/ZQTbIWyR1X3tvy2L9vfS5bWpK1irVdoZIaN/zBX9OCg whS+d1pyZLDRv517fvnadH+N3qF8JtuzaeFBwZ+e/HmcnpttmQRfMEiSmuVQ5w34 Lk/DL/B0RykmDLgq3Fe0zmJfBNfpjTHbC02tQSWZphEsvLuPEZyIt/SCHbQqhhTj jYcgiKQrNmVfbRcKjwSRuQkaodXFHgE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:18 2025 by rpki-client