This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: p4YEMG5No0YGf0x36igRN6xuok/g6faMbaB7wQso08g= Subject key identifier: 3F:12:6C:A5:C7:0E:5B:6D:1F:F5:72:23:E3:43:D3:F7:52:DE:A7:83 Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: BE Signing time: Fri 05 Dec 2025 04:02:55 +0000 Manifest this update: Fri 05 Dec 2025 04:02:55 +0000 Manifest next update: Fri 12 Dec 2025 04:02:55 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: qCAwc+rHethWTQL2v9WKAlc+/e+z0Xe5kiKqSWnvkaU=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: VWuV3WTDHbFhKXSmycUNk+HMKCNIe035E4JGd1F1GZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Dec 5 04:02:55 2025 GMT Not After : Dec 12 04:02:55 2025 GMT Subject: CN=6932596f-633a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:e9:7f:8f:00:20:4e:b7:ac:c4:d0:52:df: 78:bc:d5:2a:6d:c7:50:82:fb:50:59:28:df:3f:80: e8:08:99:da:ce:36:b5:19:5b:51:32:d6:98:f2:48: a8:48:d8:bb:21:cc:8b:27:54:cd:66:f2:5e:6e:8b: 93:a1:90:73:e8:e9:85:1d:b9:0e:99:c3:82:ad:02: c6:14:78:b3:9e:33:19:1e:c8:af:b3:6d:0a:f5:b2: a6:db:bd:b7:69:1f:77:b0:1c:07:59:35:d5:f5:34: 6a:f5:24:43:7a:25:77:c3:85:65:d1:60:9e:36:d2: c6:d1:46:9a:17:ad:42:85:ca:1a:f6:50:a7:f4:89: 31:df:38:64:cd:31:36:68:d3:15:a3:2c:1a:23:42: 87:e1:c8:82:43:f5:12:88:30:a7:40:f5:18:87:01: 67:51:e8:a2:97:08:2d:9e:d0:1c:cd:fa:74:79:5b: 32:3a:62:be:63:97:4e:f3:66:f3:cd:63:a8:9d:d2: 4a:9a:8d:2d:d3:64:57:4f:2e:70:38:77:f2:69:02: dd:bc:1d:93:2a:f7:9c:33:0e:9e:80:0b:3b:e5:12: 2f:4e:f7:0f:8f:12:a3:18:dd:0d:da:fc:38:89:10: 41:90:fc:af:37:96:de:c6:36:12:6e:23:83:6e:8f: 98:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:6C:A5:C7:0E:5B:6D:1F:F5:72:23:E3:43:D3:F7:52:DE:A7:83 X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1a:8d:ed:ea:df:ff:95:d2:0f:47:28:8f:1e:3e:5e:10:e0: c4:1a:10:e6:2f:22:e3:30:31:aa:09:8e:e0:b6:ed:00:de:45: b6:06:4b:ab:6b:41:21:a1:37:ab:43:00:0a:b5:03:c7:a2:46: 64:52:25:a8:33:3a:ff:d3:44:ad:08:4c:1a:ad:d0:dd:bf:d4: 8b:2c:dc:23:a2:8c:83:c1:56:09:cf:93:b2:9f:0a:13:dd:82: 06:3a:c3:27:e3:5f:dc:9c:83:4b:9d:c9:19:ab:f8:5c:0f:5a: 25:4b:57:34:10:c7:2c:eb:19:30:ec:16:5f:ee:1d:01:67:13: 52:13:65:5d:d8:28:8c:18:4c:a5:69:4d:d8:b8:94:73:d2:0e: e9:8f:f0:de:f8:b4:74:8a:c1:c6:15:07:76:62:ff:79:60:87: 80:52:a2:5a:7f:de:5d:02:ec:a0:2a:38:f7:fa:b8:fd:3f:14: f6:b6:75:55:d2:92:5b:97:ba:1c:c2:2e:f7:c3:f0:63:1b:11: f2:90:3b:48:b1:ad:2f:88:0f:1a:1b:f2:8b:9f:3c:b8:32:db: 90:12:64:82:df:50:4f:bf:97:97:52:11:59:6d:96:1f:73:ea: 41:7b:3e:0e:11:5e:1d:a9:82:2e:91:30:94:24:0c:24:17:72: 65:7c:b4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5 NzQwMkNERDcwHhcNMjUxMjA1MDQwMjU1WhcNMjUxMjEyMDQwMjU1WjAYMRYwFAYD VQQDEw02OTMyNTk2Zi02MzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0E7pf48AIE63rMTQUt94vNUqbcdQgvtQWSjfP4DoCJnazja1GVtRMtaY8kio SNi7IcyLJ1TNZvJebouToZBz6OmFHbkOmcOCrQLGFHiznjMZHsivs20K9bKm2723 aR93sBwHWTXV9TRq9SRDeiV3w4Vl0WCeNtLG0UaaF61Chcoa9lCn9Ikx3zhkzTE2 aNMVoywaI0KH4ciCQ/USiDCnQPUYhwFnUeiilwgtntAczfp0eVsyOmK+Y5dO82bz zWOondJKmo0t02RXTy5wOHfyaQLdvB2TKvecMw6egAs75RIvTvcPjxKjGN0N2vw4 iRBBkPyvN5bexjYSbiODbo+Y6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8SbKXH DlttH/VyI+ND0/dS3qeDMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4 MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI dmxidTJCMmN5dzZYUUN6ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBGo3t6t//ldIPRyiPHj5eEODEGhDmLyLjMDGqCY7gtu0A3kW2Bkur a0EhoTerQwAKtQPHokZkUiWoMzr/00StCEwardDdv9SLLNwjooyDwVYJz5OynwoT 3YIGOsMn41/cnINLnckZq/hcD1olS1c0EMcs6xkw7BZf7h0BZxNSE2Vd2CiMGEyl aU3YuJRz0g7pj/De+LR0isHGFQd2Yv95YIeAUqJaf95dAuygKjj3+rj9PxT2tnVV 0pJbl7ocwi73w/BjGxHykDtIsa0viA8aG/KLnzy4MtuQEmSC31BPv5eXUhFZbZYf c+pBez4OEV4dqYIukTCUJAwkF3JlfLRZ -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:12 2025 by rpki-client