This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: ifk8kD7kFcdxBWNy9B8/26o5f4wo0XMKXAG4fxns52k= Subject key identifier: E3:87:51:6D:D1:3B:D5:6B:AF:58:BE:1B:38:1B:36:1C:BD:9A:8E:42 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 06E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 06D4 Signing time: Fri 12 Dec 2025 21:19:51 +0000 Manifest this update: Fri 12 Dec 2025 21:19:51 +0000 Manifest next update: Fri 19 Dec 2025 21:19:51 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: K60e8b+s6QYX5m8sWt2yjtBTdDkzXuiMeWvTyJrn02k=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1760 (0x6e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Dec 12 21:19:51 2025 GMT Not After : Dec 19 21:19:51 2025 GMT Subject: CN=693c86f7-af7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:7a:0d:e7:6f:d2:0c:54:d4:11:a4:67:50: 82:11:7e:5e:c6:54:e3:70:35:85:a1:f8:c2:52:13: 06:74:1d:e9:50:79:03:25:62:49:aa:25:fc:3b:72: 83:48:84:52:c9:ae:4c:3f:f0:fc:e6:03:22:25:53: 8a:50:c4:13:13:e0:1d:b0:1b:11:67:9d:44:85:79: e7:5d:c8:37:fd:ec:78:fb:be:75:cb:f7:1e:4f:2f: 21:ab:f6:14:b5:92:be:94:b1:53:bd:b0:76:ec:86: e3:b5:2b:b0:49:26:ae:e6:9f:55:70:0b:fe:ff:cd: 47:23:81:9f:c2:38:3c:9b:5e:7f:a5:59:fe:09:71: 92:aa:31:0b:ed:a1:84:5f:a7:13:6e:a7:47:67:5c: dc:a0:ac:12:9a:11:21:34:f2:1a:77:88:84:18:12: ee:37:aa:63:09:9e:16:e2:0d:5b:5a:eb:60:31:25: d6:dd:ad:43:bb:30:d5:63:31:89:35:35:af:c4:57: 47:cd:65:b4:59:11:04:bd:9f:a6:45:56:c4:37:d7: 89:c3:bd:e8:bb:e9:05:1f:f6:c5:61:4c:ca:e3:bb: 08:b1:12:64:c3:a2:98:3a:70:13:1b:02:45:dd:4c: 53:58:f5:c1:cb:30:c1:97:b8:bd:62:df:01:72:5b: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:87:51:6D:D1:3B:D5:6B:AF:58:BE:1B:38:1B:36:1C:BD:9A:8E:42 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f2:87:84:ee:1c:c9:8a:71:7a:cc:17:88:54:0c:bc:fd:a9: 3b:1b:41:f6:70:87:d2:65:d8:13:02:e8:35:f4:59:16:0d:76: 5d:64:e9:8c:35:cc:66:c7:e8:61:07:af:55:5f:b8:4f:34:88: c1:fb:92:7e:9b:be:07:73:1a:91:f6:53:a6:a5:d0:8a:70:cc: d8:da:a3:68:45:a4:d7:a6:00:cf:17:a3:0b:7a:1a:dd:55:af: f4:1b:77:91:6c:d3:70:be:4f:9a:29:11:bf:be:66:bf:3f:16: 36:0b:11:9c:b7:40:ac:0e:d7:c0:4d:4d:66:23:38:0d:24:0c: 35:8f:4d:7b:c2:2c:3e:e0:35:87:00:e9:33:be:78:5f:3a:19: 97:5d:a4:c9:b6:a4:eb:af:23:db:50:3a:44:8a:0b:1c:5d:d9: 71:c3:a9:4d:38:50:b2:13:c3:ae:2f:e0:b6:35:a9:10:93:da: 38:7e:cc:13:6c:b1:94:39:1f:fa:22:65:96:9c:1f:7b:c8:e3: 4d:55:4c:5e:e7:e7:9b:49:75:ee:70:2a:01:3e:06:07:f7:ea: 14:a0:a8:ee:9f:3e:16:23:aa:5f:a4:8e:cc:ef:ea:c2:50:d5: 2d:d8:69:f2:c2:b9:b2:fe:cf:96:9a:ba:05:c2:a3:13:e0:06: f5:56:2a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUxMjEyMjExOTUxWhcNMjUxMjE5MjExOTUxWjAYMRYwFAYD VQQDDA02OTNjODZmNy1hZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZZ6Dedv0gxU1BGkZ1CCEX5exlTjcDWFofjCUhMGdB3pUHkDJWJJqiX8O3KD SIRSya5MP/D85gMiJVOKUMQTE+AdsBsRZ51EhXnnXcg3/ex4+751y/ceTy8hq/YU tZK+lLFTvbB27IbjtSuwSSau5p9VcAv+/81HI4Gfwjg8m15/pVn+CXGSqjEL7aGE X6cTbqdHZ1zcoKwSmhEhNPIad4iEGBLuN6pjCZ4W4g1bWutgMSXW3a1DuzDVYzGJ NTWvxFdHzWW0WREEvZ+mRVbEN9eJw73ou+kFH/bFYUzK47sIsRJkw6KYOnATGwJF 3UxTWPXByzDBl7i9Yt8BclttYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOHUW3R O9Vrr1i+GzgbNhy9mo5CMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE8oeE7hzJinF6zBeIVAy8/ak7G0H2cIfSZdgTAug19FkWDXZdZOmM Ncxmx+hhB69VX7hPNIjB+5J+m74HcxqR9lOmpdCKcMzY2qNoRaTXpgDPF6MLehrd Va/0G3eRbNNwvk+aKRG/vma/PxY2CxGct0CsDtfATU1mIzgNJAw1j017wiw+4DWH AOkzvnhfOhmXXaTJtqTrryPbUDpEigscXdlxw6lNOFCyE8OuL+C2NakQk9o4fswT bLGUOR/6ImWWnB97yONNVUxe5+ebSXXucCoBPgYH9+oUoKjunz4WI6pfpI7M7+rC UNUt2Gnywrmy/s+WmroFwqMT4Ab1Vipy -----END CERTIFICATE-----Generated at Sun Dec 14 14:44:00 2025 by rpki-client