This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: 2VvESsDCJyMLixkNtFgyJkhFs7pWq46t5UjQSagJ9go= Subject key identifier: E3:E7:7B:3F:F0:B9:05:2B:88:A3:E8:84:C4:39:9D:89:E7:B5:A4:D3 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D6D Signing time: Thu 04 Dec 2025 15:53:30 +0000 Manifest this update: Thu 04 Dec 2025 15:53:29 +0000 Manifest next update: Thu 11 Dec 2025 15:53:29 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: YDF0PRIoG/1KOFpAgqpu/Qk5LHO9kkOIqZu+LPPbaKg=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: /prr9YJCzmst/EHhwq+RVn+bdS5HeKi3OTJCcnb49ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7554 (0x1d82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Dec 4 15:53:29 2025 GMT Not After : Dec 11 15:53:29 2025 GMT Subject: CN=6931ae7a-c890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:bf:fd:57:82:42:a5:be:82:aa:c1:1e:d6: 43:d6:9a:d7:3b:f7:01:b5:18:63:f6:fb:57:58:a4: 7c:dc:30:fb:95:00:ed:06:89:31:6f:ef:58:68:50: 56:8a:1b:26:cb:b8:ba:03:5b:12:5c:20:7f:c5:13: ca:a0:66:26:93:7c:47:62:b9:d6:af:52:a7:93:9e: af:0d:46:d5:91:da:65:29:07:2c:7b:00:3c:76:dc: 6f:eb:99:e0:42:29:40:96:44:b3:70:cd:63:c1:8d: 89:17:90:77:87:13:03:65:51:85:56:45:f5:33:a7: 6e:fe:ab:b4:ca:5c:48:b0:20:cd:da:fb:38:c8:3b: 17:40:ee:c6:c1:b7:c9:39:28:a4:59:46:9e:bd:9b: 8e:f5:fe:2e:6e:c6:15:ab:41:c0:a0:d9:7c:59:1d: 38:4a:62:ee:fa:8a:92:cf:5e:1b:4b:af:43:9c:2c: 0b:e8:46:0b:9f:a8:7e:db:18:fc:45:fe:4a:0a:25: 9d:10:cc:37:8c:43:75:93:70:c8:4b:17:b2:94:fb: 59:42:cf:97:ed:10:94:a8:7d:20:fd:fc:25:ba:26: f6:06:58:82:ad:27:45:54:2f:8f:5a:0c:fb:cf:2a: 62:9c:70:20:b0:93:38:31:43:81:30:79:46:8a:ce: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E7:7B:3F:F0:B9:05:2B:88:A3:E8:84:C4:39:9D:89:E7:B5:A4:D3 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3d:de:77:6d:9d:9b:1a:f6:aa:64:25:c0:89:c4:a6:9e:8f: e4:77:d1:ad:19:eb:4e:12:23:1c:a9:5a:21:67:4b:f9:49:7a: e5:8f:f5:f2:b1:74:36:a7:c4:1f:cc:82:7b:ad:29:7b:f3:1a: fb:40:a8:41:88:0a:6c:5e:eb:eb:1b:c3:69:5d:78:71:50:11: 38:07:35:58:4d:82:af:3b:99:66:9d:4f:e3:94:b2:f1:b9:f4: b5:23:d2:c6:59:c1:3d:5a:e4:e8:38:b5:b1:35:4f:c4:30:47: cb:77:68:10:f2:1c:05:df:95:9d:32:ec:d4:f4:70:27:85:bd: df:07:c7:ac:de:d9:6e:a7:64:02:bf:39:eb:06:07:7f:97:b8: 73:97:bd:72:20:b1:b7:58:e2:5a:d9:86:99:87:20:75:8e:3e: 9f:a5:54:12:95:7a:63:5e:23:d2:b6:39:f4:7c:af:b9:9e:b6: 5d:ea:10:c1:f6:b1:ab:d0:14:cf:a7:26:05:83:dd:e6:79:be: 12:33:3b:46:66:96:f4:bd:79:95:e8:37:88:1c:03:06:1a:40: 66:48:bc:12:f8:6e:f2:9d:cd:eb:8a:c1:da:c5:fa:3b:ad:81: 7f:bf:19:f4:b5:d3:f5:bc:ed:b3:6f:02:93:f0:94:fa:bc:16: 5b:dd:3d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUxMjA0MTU1MzI5WhcNMjUxMjExMTU1MzI5WjAYMRYwFAYD VQQDEw02OTMxYWU3YS1jODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryO//VeCQqW+gqrBHtZD1prXO/cBtRhj9vtXWKR83DD7lQDtBokxb+9YaFBW ihsmy7i6A1sSXCB/xRPKoGYmk3xHYrnWr1Knk56vDUbVkdplKQcsewA8dtxv65ng QilAlkSzcM1jwY2JF5B3hxMDZVGFVkX1M6du/qu0ylxIsCDN2vs4yDsXQO7GwbfJ OSikWUaevZuO9f4ubsYVq0HAoNl8WR04SmLu+oqSz14bS69DnCwL6EYLn6h+2xj8 Rf5KCiWdEMw3jEN1k3DISxeylPtZQs+X7RCUqH0g/fwluib2BliCrSdFVC+PWgz7 zypinHAgsJM4MUOBMHlGis6sjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPnez/w uQUriKPohMQ5nYnntaTTMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcPd53bZ2bGvaqZCXAicSmno/kd9GtGetOEiMcqVohZ0v5SXrlj/Xy sXQ2p8QfzIJ7rSl78xr7QKhBiApsXuvrG8NpXXhxUBE4BzVYTYKvO5lmnU/jlLLx ufS1I9LGWcE9WuToOLWxNU/EMEfLd2gQ8hwF35WdMuzU9HAnhb3fB8es3tlup2QC vznrBgd/l7hzl71yILG3WOJa2YaZhyB1jj6fpVQSlXpjXiPStjn0fK+5nrZd6hDB 9rGr0BTPpyYFg93meb4SMztGZpb0vXmV6DeIHAMGGkBmSLwS+G7ync3risHaxfo7 rYF/vxn0tdP1vO2zbwKT8JT6vBZb3T2u -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:16 2025 by rpki-client