This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: IQ/3CVq66qsIJwyfVDcxHq4dbrX7jhGeGDMRpOWtVLU= Subject key identifier: 3F:CD:CC:F1:C4:82:B4:DC:E3:23:8E:6C:57:2C:8A:2E:DD:29:39:9B Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: 6F Signing time: Tue 23 Dec 2025 05:50:57 +0000 Manifest this update: Tue 23 Dec 2025 05:50:56 +0000 Manifest next update: Tue 30 Dec 2025 05:50:56 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: Y0f6ryYSc8gJF7I8O5aGVpFbdB3kAXP6H+s1HuuyCT8=) 2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: 7kjdrAr3JENecZMo/7VdtHs1/mZn/AYpXt3718Nn38g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Dec 23 05:50:56 2025 GMT Not After : Dec 30 05:50:56 2025 GMT Subject: CN=694a2dc0-c75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:d2:b9:dd:3f:f0:2d:bf:bf:7d:18:5b:fd: 4a:7a:a2:ea:3c:fe:ef:f2:08:94:80:61:e1:fc:b8: d0:81:5c:a7:df:e5:3a:c2:18:58:9c:13:35:ed:22: 24:69:15:05:c5:45:7f:00:58:de:41:fd:ff:70:28: 5d:da:19:65:89:06:91:6d:55:a1:12:7d:70:67:c4: a3:95:06:81:93:3e:e0:b2:f5:1b:8f:c0:7d:4f:0c: 0a:58:76:73:8b:ca:e8:9d:c9:4c:b9:e9:48:ff:58: dc:f5:d1:c2:2a:7e:c4:0c:df:1b:fc:cd:4d:21:87: 8d:03:45:74:9e:ad:cc:70:31:7d:3c:37:d1:e0:33: bd:67:4a:bf:2c:63:b8:ad:28:9a:5a:45:68:23:5e: 66:ec:7a:a7:2d:c8:ca:6f:38:b9:dd:93:bd:b4:86: 71:ea:67:1d:f3:d5:e1:00:2e:41:45:da:e3:94:7d: f7:f5:34:74:b3:b9:1b:ef:02:01:44:00:47:3c:5b: bc:dd:fe:fb:a5:9e:73:7d:46:68:6c:71:5f:6b:83: 2c:3d:55:2a:db:c4:8a:6a:20:16:5a:5e:3d:6c:74: cb:70:6a:30:00:c8:7d:bb:d2:a6:f1:f8:dc:00:4d: bd:ad:dc:6e:4d:b5:00:c3:03:36:c0:a6:90:66:c0: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:CC:F1:C4:82:B4:DC:E3:23:8E:6C:57:2C:8A:2E:DD:29:39:9B X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:e6:17:d1:3f:30:07:ae:5e:60:0a:a3:a6:fa:76:d0:ff: 78:bc:48:6a:ca:67:03:9e:45:1b:99:00:d6:ef:26:6d:c8:0c: 78:85:06:6b:e8:d0:64:a0:d8:f5:96:8a:60:79:90:52:6c:a1: 91:15:c3:a4:aa:0d:c6:18:92:87:32:06:ed:95:2b:90:c3:d1: 5b:6e:b9:cf:40:f7:ce:03:25:df:75:d2:e3:97:fa:60:4a:f4: fa:b9:4b:e4:14:7f:8e:5f:ee:65:a8:ef:ad:ae:a2:fb:5e:89: 2d:13:0d:91:51:cd:f5:bd:bf:9c:63:4a:be:1a:71:bf:df:a2: 09:03:73:a2:56:ef:78:32:0c:f5:e5:b1:86:21:e9:3c:a0:15: 3d:15:b7:cc:98:ab:3e:aa:75:38:f9:65:2b:30:bd:10:10:56: 84:59:2b:d9:a4:16:8a:ab:75:a7:90:ed:7b:96:6a:a4:08:81: 0b:81:c5:0b:31:46:c2:6e:5c:65:32:3b:9b:4b:6f:12:3e:85: 4d:ec:84:56:87:74:05:e4:03:35:5d:44:58:ff:aa:f2:88:77: 9c:96:72:2d:d8:56:a6:0a:1f:d4:0c:c4:18:bd:bb:84:74:79: 4b:c8:c2:17:12:d2:59:ce:68:87:7d:10:b6:4f:cf:80:5a:e0: fe:36:b1:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoREVBNjNFMzEwMUJGMTU5OTAyMEE0MDgzRkExQzNEOTY0 QjIxMzBDMDAeFw0yNTEyMjMwNTUwNTZaFw0yNTEyMzAwNTUwNTZaMBgxFjAUBgNV BAMMDTY5NGEyZGMwLWM3NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPANK53T/wLb+/fRhb/Up6ouo8/u/yCJSAYeH8uNCBXKff5TrCGFicEzXtIiRp FQXFRX8AWN5B/f9wKF3aGWWJBpFtVaESfXBnxKOVBoGTPuCy9RuPwH1PDApYdnOL yuidyUy56Uj/WNz10cIqfsQM3xv8zU0hh40DRXSercxwMX08N9HgM71nSr8sY7it KJpaRWgjXmbseqctyMpvOLndk720hnHqZx3z1eEALkFF2uOUfff1NHSzuRvvAgFE AEc8W7zd/vulnnN9RmhscV9rgyw9VSrbxIpqIBZaXj1sdMtwajAAyH270qbx+NwA Tb2t3G5NtQDDAzbAppBmwJiXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP83M8cSC tNzjI45sVyyKLt0pOZswHwYDVR0jBBgwFoAU3qY+MQG/FZkCCkCD+hw9lkshMMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0NCMTRCRjI2M0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1N QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3FZLU1RR19GWmtDQ2tDRC1odzlsa3NoTU1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0NCMTRCRjI2M0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyLzNxWS1NUUdfRlpr Q0NrQ0QtaHc5bGtzaE1NQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIcz5hfRPzAHrl5gCqOm+nbQ/3i8SGrKZwOeRRuZANbvJm3IDHiFBmvo 0GSg2PWWimB5kFJsoZEVw6SqDcYYkocyBu2VK5DD0Vtuuc9A984DJd910uOX+mBK 9Pq5S+QUf45f7mWo762uovteiS0TDZFRzfW9v5xjSr4acb/fogkDc6JW73gyDPXl sYYh6TygFT0Vt8yYqz6qdTj5ZSswvRAQVoRZK9mkFoqrdaeQ7XuWaqQIgQuBxQsx RsJuXGUyO5tLbxI+hU3shFaHdAXkAzVdRFj/qvKId5yWci3YVqYKH9QMxBi9u4R0 eUvIwhcS0lnOaId9ELZPz4Ba4P42sQk= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:42 2025 by rpki-client