This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: 1kHivCOOZ5JLk2x6v+oEsHtxAsxlMoQiJeGoxdvFmTg= Subject key identifier: 80:41:AA:C2:E2:1C:20:A9:C4:33:0D:28:5C:C8:ED:EE:EE:EC:C5:D1 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D14 Signing time: Sat 06 Dec 2025 17:27:42 +0000 Manifest this update: Sat 06 Dec 2025 17:27:41 +0000 Manifest next update: Sat 13 Dec 2025 17:27:41 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: 9Wh9c7efdfJaUFPKZras34N5+H9vRIXF1i/3q0zABlo=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: WfQhPmIZUh24j8d27BZmWadRYjUYQWfuUpvwsdxRVBY=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: /bUmZK3GNNVLfX/JC5Le5EvDW4qNPqhqfyqkqK8mIkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3364 (0xd24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Dec 6 17:27:41 2025 GMT Not After : Dec 13 17:27:41 2025 GMT Subject: CN=6934678d-0a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:11:76:1a:6c:d3:50:de:b0:eb:7c:38:fb: 2d:65:fb:b8:78:e0:ef:2a:40:44:76:cb:9f:55:49: d6:6f:ce:7f:ba:23:c9:cf:d0:0b:91:5e:4d:a3:c6: 1b:f2:17:d4:e2:e7:07:93:76:1a:95:1f:c5:bd:b2: f9:41:f7:67:18:ce:b9:0a:a3:0c:f3:fb:d2:65:23: 02:bc:08:91:5c:89:33:6f:5f:c1:3e:6d:66:50:07: f3:38:ae:ab:8d:9f:09:75:c1:67:be:2f:4f:dc:27: fc:c1:a8:59:c2:4a:5c:3d:a3:41:ea:74:a1:d8:67: 66:d5:66:ef:be:a5:dd:ff:de:7f:4a:51:bd:bf:5e: 37:b9:c0:74:e9:68:74:46:c9:dc:bb:36:72:0a:0f: ec:39:29:1f:74:63:7b:c9:c3:65:51:2d:d2:c8:d1: 2e:d9:68:b4:23:53:5b:04:ef:35:51:a7:1a:72:b8: 80:ab:82:a1:bf:64:40:7a:2c:1a:82:a9:2a:a3:3e: 00:bf:52:a1:31:69:e4:83:89:b6:15:88:90:2e:6a: 69:03:5c:62:e8:ff:f3:da:64:a2:c4:be:4e:47:79: 9c:ac:75:b0:90:13:35:4b:15:7d:cc:e2:df:6e:be: 4c:30:1f:80:e0:b4:c5:32:d4:51:93:5a:0c:27:79: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:AA:C2:E2:1C:20:A9:C4:33:0D:28:5C:C8:ED:EE:EE:EC:C5:D1 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:40:26:a7:85:96:91:80:c3:f2:d6:e0:7f:49:0a:0b:7d:0e: 20:c0:29:4d:e8:a2:e3:85:ba:d3:4b:d1:96:0e:ff:52:15:56: df:d1:6f:1a:51:19:53:82:95:92:a0:f2:f0:b9:aa:61:5d:4d: fc:14:9a:1f:9b:0f:dd:ba:18:5e:4d:fd:cd:3a:61:fb:59:bb: 7f:63:06:d5:9e:42:ab:df:93:21:09:49:54:89:ee:d4:42:c7: 85:16:c1:23:82:33:85:d1:ff:67:9f:c8:d1:b7:28:1e:0e:0c: 8e:5f:8c:03:41:9a:b8:35:66:34:5d:90:89:20:c3:51:c0:a3: 61:c0:22:dc:1a:bc:15:46:8a:77:79:fd:36:e8:a4:b3:da:25: 93:96:d7:7e:81:5f:45:02:60:d0:fa:85:fa:50:a8:43:37:e2: dc:14:f8:2c:d5:59:22:13:f3:d4:99:a5:8b:6d:3a:d4:b6:20: d6:5c:a8:2a:cd:3a:75:be:33:e2:9c:ec:ba:20:90:28:dc:b2: 54:f3:69:a7:81:ba:80:ab:b9:45:88:07:14:82:9a:2f:ab:c8: 8d:0b:26:40:c1:91:b2:76:f7:71:20:e2:a5:0f:33:70:df:ea: 18:8f:3a:4b:9d:f6:46:d5:a2:ad:84:bd:ee:e1:17:38:45:17: 0c:d7:c4:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUxMjA2MTcyNzQxWhcNMjUxMjEzMTcyNzQxWjAYMRYwFAYD VQQDEw02OTM0Njc4ZC0wYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNcRdhps01DesOt8OPstZfu4eODvKkBEdsufVUnWb85/uiPJz9ALkV5No8Yb 8hfU4ucHk3YalR/FvbL5QfdnGM65CqMM8/vSZSMCvAiRXIkzb1/BPm1mUAfzOK6r jZ8JdcFnvi9P3Cf8wahZwkpcPaNB6nSh2Gdm1WbvvqXd/95/SlG9v143ucB06Wh0 RsncuzZyCg/sOSkfdGN7ycNlUS3SyNEu2Wi0I1NbBO81UacacriAq4Khv2RAeiwa gqkqoz4Av1KhMWnkg4m2FYiQLmppA1xi6P/z2mSixL5OR3mcrHWwkBM1SxV9zOLf br5MMB+A4LTFMtRRk1oMJ3lGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBBqsLi HCCpxDMNKFzI7e7u7MXRMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+QCanhZaRgMPy1uB/SQoLfQ4gwClN6KLjhbrTS9GWDv9SFVbf0W8a URlTgpWSoPLwuaphXU38FJofmw/duhheTf3NOmH7Wbt/YwbVnkKr35MhCUlUie7U QseFFsEjgjOF0f9nn8jRtygeDgyOX4wDQZq4NWY0XZCJIMNRwKNhwCLcGrwVRop3 ef026KSz2iWTltd+gV9FAmDQ+oX6UKhDN+LcFPgs1VkiE/PUmaWLbTrUtiDWXKgq zTp1vjPinOy6IJAo3LJU82mngbqAq7lFiAcUgpovq8iNCyZAwZGydvdxIOKlDzNw 3+oYjzpLnfZG1aKthL3u4Rc4RRcM18T8 -----END CERTIFICATE-----Generated at Mon Dec 8 06:24:25 2025 by rpki-client