This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: Ut8PrMP76OQBm3Ujr4qqAJHprZc0ARKdeaOR7VyjWRs= Subject key identifier: 40:71:8A:2F:05:5B:39:BA:4F:13:8B:D0:87:1C:B5:C8:A1:46:34:39 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 08F2 Signing time: Sat 06 Dec 2025 19:48:22 +0000 Manifest this update: Sat 06 Dec 2025 19:48:22 +0000 Manifest next update: Sat 13 Dec 2025 19:48:22 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: Annvc+iyLsKM+r5hhtQzF7IbjuQqolGMiqWvIL+cBRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Dec 6 19:48:22 2025 GMT Not After : Dec 13 19:48:22 2025 GMT Subject: CN=69348886-d9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:d5:81:14:1d:3c:67:b2:51:ad:63:c7:b7: 01:e1:8e:d8:3b:f1:00:cf:4b:5b:7e:38:31:a2:11: d9:0b:e7:0d:65:f1:53:cf:29:e5:06:10:4e:ca:2f: af:10:4c:48:c5:d8:ae:5e:fc:e8:73:ef:f5:c2:c5: 80:94:71:50:84:aa:64:06:d0:bf:89:90:0b:8d:d6: a5:65:fd:ad:97:da:1a:6c:23:bd:2b:b4:a1:43:76: fa:85:2c:fc:7b:0a:95:aa:df:e8:5b:35:fc:4f:a9: ec:15:84:82:c9:17:45:99:17:62:97:a5:91:cb:fc: ba:e3:90:70:b6:f6:f3:6a:e0:2f:a5:f2:96:36:01: 2e:b1:c7:9a:1a:22:c2:94:17:f2:97:bd:86:e0:0f: d3:33:be:e1:ec:4f:81:8f:ff:13:89:0e:84:ce:2d: 2a:64:a3:35:ba:46:8c:cb:54:55:5a:ab:52:1d:f8: 89:94:6f:ae:15:92:e2:aa:14:dd:cd:56:8f:60:d4: 6c:69:c0:68:2f:dc:aa:1b:f3:ce:fe:f8:3f:0e:a1: b5:6d:33:ff:c9:2d:2d:f6:7a:2f:9b:04:8d:65:19: ac:2f:87:40:77:20:dd:69:f3:d2:eb:d4:13:0a:b2: 43:cf:77:02:ca:f9:94:39:a0:6c:5f:02:2f:af:5f: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:71:8A:2F:05:5B:39:BA:4F:13:8B:D0:87:1C:B5:C8:A1:46:34:39 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e9:7b:c8:fa:07:f4:d9:a4:39:b7:82:f3:a1:fc:1d:38:42: de:d2:2a:dd:fc:4f:cb:c7:07:dc:51:1f:40:f9:4c:cc:fb:1c: b3:cc:83:d2:f8:c6:d8:c1:2b:af:19:2d:4b:85:76:67:4e:30: bb:71:dd:bb:95:7d:51:cd:9b:55:2e:6d:42:d4:82:39:61:51: a4:cf:61:6b:cf:d9:ad:94:93:c5:9c:f1:98:3f:ab:39:b0:25: ce:42:8b:41:2a:18:b1:9e:51:dd:fb:42:29:f8:e9:d4:b8:65: 60:82:f1:d1:d2:59:c0:32:5b:db:82:68:d4:e4:61:ac:5f:9d: 42:c2:4c:97:89:89:41:6b:f9:93:cf:88:d5:ea:1f:25:47:ff: 89:58:80:73:55:e8:a6:d1:a9:61:29:62:14:11:96:92:de:0d: a6:53:35:78:0a:01:df:3e:3f:06:0d:e4:27:c4:e3:35:48:8b: a0:77:ba:e4:0e:f7:87:13:a7:9e:4e:2e:27:f4:d0:9d:46:aa: 64:63:49:ec:2e:e6:a3:b4:c2:b7:08:96:81:40:63:20:e5:c6: 7a:ca:12:93:08:fe:bc:df:2e:9c:35:c8:0d:8e:81:27:33:3f: 0c:64:52:33:93:20:74:7a:dc:3e:8d:2a:bb:16:92:38:67:3d: d3:8a:48:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUxMjA2MTk0ODIyWhcNMjUxMjEzMTk0ODIyWjAYMRYwFAYD VQQDEw02OTM0ODg4Ni1kOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuvVgRQdPGeyUa1jx7cB4Y7YO/EAz0tbfjgxohHZC+cNZfFTzynlBhBOyi+v EExIxdiuXvzoc+/1wsWAlHFQhKpkBtC/iZALjdalZf2tl9oabCO9K7ShQ3b6hSz8 ewqVqt/oWzX8T6nsFYSCyRdFmRdil6WRy/y645BwtvbzauAvpfKWNgEusceaGiLC lBfyl72G4A/TM77h7E+Bj/8TiQ6Ezi0qZKM1ukaMy1RVWqtSHfiJlG+uFZLiqhTd zVaPYNRsacBoL9yqG/PO/vg/DqG1bTP/yS0t9novmwSNZRmsL4dAdyDdafPS69QT CrJDz3cCyvmUOaBsXwIvr19h7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBxii8F Wzm6TxOL0IcctcihRjQ5MB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/6XvI+gf02aQ5t4LzofwdOELe0ird/E/LxwfcUR9A+UzM+xyzzIPS +MbYwSuvGS1LhXZnTjC7cd27lX1RzZtVLm1C1II5YVGkz2Frz9mtlJPFnPGYP6s5 sCXOQotBKhixnlHd+0Ip+OnUuGVggvHR0lnAMlvbgmjU5GGsX51CwkyXiYlBa/mT z4jV6h8lR/+JWIBzVeim0alhKWIUEZaS3g2mUzV4CgHfPj8GDeQnxOM1SIugd7rk DveHE6eeTi4n9NCdRqpkY0nsLuajtMK3CJaBQGMg5cZ6yhKTCP683y6cNcgNjoEn Mz8MZFIzkyB0etw+jSq7FpI4Zz3Tikjy -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:37 2025 by rpki-client