This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: Ufb5u8bXuXOiLG8nige2X90xJ0OkA2ANfbh8z5cYMkU= Subject key identifier: 09:5D:A9:23:52:6C:6F:7C:B7:6D:31:08:9F:B8:51:D6:86:BF:13:EA Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0CB1 Signing time: Thu 18 Dec 2025 18:00:59 +0000 Manifest this update: Thu 18 Dec 2025 18:00:59 +0000 Manifest next update: Thu 25 Dec 2025 18:00:59 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: phVt7h9pqZWTlq6BOfxoPFGcXeGx70QUAxgtu+vno1o=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: liuK4GzoDV4Wyb2t40R5cZyZpCOcxyykm4qNE0iKYKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Dec 18 18:00:59 2025 GMT Not After : Dec 25 18:00:59 2025 GMT Subject: CN=6944415b-6951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:1b:af:aa:fa:93:5a:64:4f:c5:81:4e:af: b3:9b:aa:ae:4f:ee:2a:27:fd:c6:0f:fe:9d:c9:a3: fe:11:a5:35:6f:a5:11:10:80:c8:e4:c0:6b:50:02: 11:e4:d8:24:fa:bb:6b:97:d2:da:e9:5c:b6:75:5c: 2f:89:4c:09:f8:42:94:af:81:f6:d7:95:95:87:65: d1:8e:3e:21:2f:ae:94:07:1e:36:14:a9:72:07:3f: 9e:a9:51:80:07:32:28:12:bf:29:3a:28:0b:f4:23: 50:bc:f6:73:7e:7a:5c:80:de:8c:f0:85:3e:f1:e8: 92:bd:d0:39:43:87:44:8f:24:df:45:14:5e:31:53: f6:6d:db:14:81:ad:3b:73:5e:3c:c9:6a:46:f8:e9: a4:e4:0c:38:e0:d5:c3:66:2e:4d:c2:12:53:a4:d8: 41:f1:e9:2f:ef:0d:db:f3:2f:2d:76:1e:de:fd:e2: c3:09:20:58:35:f2:3f:49:ba:67:b7:38:fb:6d:11: d0:83:a3:34:53:09:99:ce:9d:57:16:85:07:c0:e3: 85:a2:d6:22:cd:b5:86:90:eb:c1:67:1f:44:30:cc: 42:fe:f6:06:f0:b2:41:35:49:55:0e:43:7a:5c:0d: c3:e8:6d:3c:32:14:74:e2:3e:62:93:1f:ec:f1:c1: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:A9:23:52:6C:6F:7C:B7:6D:31:08:9F:B8:51:D6:86:BF:13:EA X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5e:3f:9e:69:1c:51:c8:8e:cd:60:7e:05:ac:81:10:70:84: d9:d8:8e:cd:57:bc:e3:87:89:05:88:f5:ef:bd:9e:2e:25:7f: 15:10:3b:88:e7:55:58:ae:44:84:f2:60:1d:7f:8e:3e:5e:d6: 57:56:a3:11:b0:32:c4:16:00:6f:7c:49:d0:b5:cd:c4:ca:b7: 31:33:74:e0:21:4d:53:ea:5d:60:f7:75:75:d0:0a:dd:78:ff: 9d:0a:86:ca:cc:fd:e2:43:10:e1:78:47:b8:b3:57:f7:aa:31: c6:72:8d:db:87:47:1f:51:5e:42:65:d9:0b:6f:51:0c:9a:c0: e0:19:07:3d:30:30:aa:15:a5:06:a8:a9:ba:19:a1:27:ca:cc: e0:a4:bc:ad:42:c6:ea:47:34:ec:52:52:ce:b7:c2:cb:42:7b: be:5f:da:bb:d0:77:12:26:99:93:41:de:19:c7:6a:1f:f1:80: b6:8d:5f:4a:25:71:cd:91:5b:be:22:4f:68:3a:8d:15:14:92: 7c:72:95:4e:ba:5e:40:e3:62:25:06:2b:3a:ca:49:68:e6:b1: 62:e1:f2:49:9f:36:fa:04:cb:94:65:cb:39:d3:30:ca:eb:7b: 8c:7f:d5:41:6e:e1:ba:d3:b1:56:e0:56:86:36:3b:09:8e:32: 7b:37:b1:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMjE4MTgwMDU5WhcNMjUxMjI1MTgwMDU5WjAYMRYwFAYD VQQDDA02OTQ0NDE1Yi02OTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxUbr6r6k1pkT8WBTq+zm6quT+4qJ/3GD/6dyaP+EaU1b6UREIDI5MBrUAIR 5Ngk+rtrl9La6Vy2dVwviUwJ+EKUr4H215WVh2XRjj4hL66UBx42FKlyBz+eqVGA BzIoEr8pOigL9CNQvPZzfnpcgN6M8IU+8eiSvdA5Q4dEjyTfRRReMVP2bdsUga07 c148yWpG+Omk5Aw44NXDZi5NwhJTpNhB8ekv7w3b8y8tdh7e/eLDCSBYNfI/Sbpn tzj7bRHQg6M0UwmZzp1XFoUHwOOFotYizbWGkOvBZx9EMMxC/vYG8LJBNUlVDkN6 XA3D6G08MhR04j5ikx/s8cE8HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAldqSNS bG98t20xCJ+4UdaGvxPqMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDXj+eaRxRyI7NYH4FrIEQcITZ2I7NV7zjh4kFiPXvvZ4uJX8VEDuI 51VYrkSE8mAdf44+XtZXVqMRsDLEFgBvfEnQtc3EyrcxM3TgIU1T6l1g93V10Ard eP+dCobKzP3iQxDheEe4s1f3qjHGco3bh0cfUV5CZdkLb1EMmsDgGQc9MDCqFaUG qKm6GaEnyszgpLytQsbqRzTsUlLOt8LLQnu+X9q70HcSJpmTQd4Zx2of8YC2jV9K JXHNkVu+Ik9oOo0VFJJ8cpVOul5A42IlBis6yklo5rFi4fJJnzb6BMuUZcs50zDK 63uMf9VBbuG607FW4FaGNjsJjjJ7N7EB -----END CERTIFICATE-----Generated at Fri Dec 19 04:41:31 2025 by rpki-client