This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: P8M3TA7zznls4NNssyDNZICpyER+tGGtuIpg9bjf+tM= Subject key identifier: 8A:05:61:98:BF:3C:56:A0:23:C6:0E:CA:F6:4B:52:A8:31:BF:8A:01 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 03C7 Signing time: Mon 22 Dec 2025 23:40:22 +0000 Manifest this update: Mon 22 Dec 2025 23:40:22 +0000 Manifest next update: Mon 29 Dec 2025 23:40:22 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: 2vShJYY8UYtce1gin5nbbdgeTBmK2y0En+K//DoEetc=) 2: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) 3: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Dec 22 23:40:22 2025 GMT Not After : Dec 29 23:40:22 2025 GMT Subject: CN=6949d6e6-7ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:1c:ba:5b:18:b3:23:e3:64:a8:2c:08:23: 45:71:69:98:5a:74:9f:87:94:ca:7c:b6:e9:0c:24: 7a:53:54:b9:f1:6a:8e:62:37:db:d9:1f:91:08:46: b3:3d:a2:2b:3e:ae:ea:02:66:ee:63:15:f3:4b:cc: 98:2a:63:c6:9b:b6:16:4c:e2:93:60:3e:8c:83:db: b9:55:de:8c:70:60:25:d3:d0:5d:b8:21:d4:bf:2e: 88:44:98:96:11:cd:03:01:ab:3c:ff:19:08:26:eb: 88:c3:bc:93:8a:5c:03:ed:36:1f:f1:c0:08:54:be: 06:16:0a:ed:12:55:43:66:29:5c:a9:41:6a:d9:10: 2b:4b:29:1a:8e:e9:64:3b:7c:3c:38:a8:4a:2b:40: be:c0:6a:d7:74:37:35:ce:98:04:75:f5:84:4f:65: ef:8e:5d:df:bf:32:1d:47:e3:83:7f:fb:e8:62:d7: 9e:a9:86:04:6b:70:2a:9b:5b:08:d4:c3:df:a8:89: a8:4f:cd:7b:82:10:fd:60:83:37:72:b0:17:f1:f6: bc:c0:22:47:17:2e:87:d2:c0:b2:21:93:f8:60:eb: a2:e7:39:f5:f4:9f:ed:db:ce:18:4f:53:5f:69:e2: a7:9a:81:28:88:63:69:3f:5c:7d:43:71:76:65:2f: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:05:61:98:BF:3C:56:A0:23:C6:0E:CA:F6:4B:52:A8:31:BF:8A:01 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:4e:c4:d4:f0:2c:a0:1c:f6:32:90:2d:4f:06:eb:c0:0d: 70:5e:f7:3a:e5:14:5c:90:b1:f1:12:8e:5a:2a:1a:65:1e:f0: 58:89:9b:9d:e9:6c:f7:df:6c:76:53:6e:90:59:63:16:c0:0f: b7:61:3e:28:3e:73:3e:6b:ae:ad:62:45:a0:c6:da:f4:4f:cb: a7:9a:f7:bb:f4:43:ce:bc:16:dc:f6:39:12:59:45:e1:e8:c8: 66:fe:f7:3c:4d:a4:9a:fc:3a:16:07:1f:ac:d5:e5:8c:10:c1: bb:82:fd:67:1f:5d:1b:3d:5e:a2:5e:b9:a3:b5:da:b0:6d:a1: 6b:59:1f:c4:c7:1e:18:ac:5b:ae:84:ae:32:b2:2f:3e:d2:d2: 25:fa:00:a0:47:47:d6:36:32:1c:56:a3:73:75:fd:8f:80:54: bc:48:7a:75:42:66:e6:28:25:b0:f9:31:28:74:b1:b2:13:35: eb:00:bb:13:a5:20:06:f0:86:0b:44:3d:98:a0:c9:46:10:08: 61:26:b1:af:68:1f:cb:1d:a2:43:d4:36:88:05:42:0d:e0:a4: a9:4b:0f:f4:4c:83:82:60:9c:44:79:28:c4:d4:9e:5d:f7:99: 11:29:5d:f4:8f:ab:8c:15:69:cc:50:9a:25:6a:27:ea:15:92: 9b:15:8a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUxMjIyMjM0MDIyWhcNMjUxMjI5MjM0MDIyWjAYMRYwFAYD VQQDDA02OTQ5ZDZlNi03YWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9oculsYsyPjZKgsCCNFcWmYWnSfh5TKfLbpDCR6U1S58WqOYjfb2R+RCEaz PaIrPq7qAmbuYxXzS8yYKmPGm7YWTOKTYD6Mg9u5Vd6McGAl09BduCHUvy6IRJiW Ec0DAas8/xkIJuuIw7yTilwD7TYf8cAIVL4GFgrtElVDZilcqUFq2RArSykajulk O3w8OKhKK0C+wGrXdDc1zpgEdfWET2Xvjl3fvzIdR+ODf/voYteeqYYEa3Aqm1sI 1MPfqImoT817ghD9YIM3crAX8fa8wCJHFy6H0sCyIZP4YOui5zn19J/t284YT1Nf aeKnmoEoiGNpP1x9Q3F2ZS/b8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoFYZi/ PFagI8YOyvZLUqgxv4oBMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlSk7E1PAsoBz2MpAtTwbrwA1wXvc65RRckLHxEo5aKhplHvBYiZud 6Wz332x2U26QWWMWwA+3YT4oPnM+a66tYkWgxtr0T8unmve79EPOvBbc9jkSWUXh 6Mhm/vc8TaSa/DoWBx+s1eWMEMG7gv1nH10bPV6iXrmjtdqwbaFrWR/Exx4YrFuu hK4ysi8+0tIl+gCgR0fWNjIcVqNzdf2PgFS8SHp1QmbmKCWw+TEodLGyEzXrALsT pSAG8IYLRD2YoMlGEAhhJrGvaB/LHaJD1DaIBUIN4KSpSw/0TIOCYJxEeSjE1J5d 95kRKV30j6uMFWnMUJolaifqFZKbFYrv -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:26 2025 by rpki-client