This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: nLGW+WGcv75Qs1itLLKUkdGbs1j3cifRJghIsXWQf7k= Subject key identifier: 4E:72:F1:26:E1:AE:34:CC:1B:35:F1:8E:D6:E4:4D:61:5C:47:68:79 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 01DA Signing time: Sun 25 Jan 2026 02:03:55 +0000 Manifest this update: Sun 25 Jan 2026 02:03:55 +0000 Manifest next update: Sun 01 Feb 2026 02:03:55 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: CmtD9rggxXnZZFpRbFcb/eG1EfUts6SnRdIYEGHvyNY=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Jan 25 02:03:55 2026 GMT Not After : Feb 1 02:03:55 2026 GMT Subject: CN=69757a0b-69d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:a9:34:18:dd:8f:e8:2b:23:20:6b:cf:ec: 25:71:d3:ab:29:95:52:4d:5a:6b:c9:c5:e7:d0:3d: 4c:77:e0:fc:44:c2:b3:bb:80:35:8f:46:9a:e0:82: 23:74:05:a2:02:05:14:45:8e:2b:08:1a:b5:77:01: 7b:02:fb:3b:50:9c:05:ce:4f:81:9f:cd:6f:60:20: 83:ea:42:b6:a6:8e:bc:56:e5:2b:d9:84:04:e4:6f: d1:c8:e3:64:49:da:a9:d3:8e:5d:a1:dc:a4:31:1f: 5a:92:98:b9:4b:97:39:c9:26:9e:44:89:ce:ca:84: 9a:ad:5b:d1:fd:25:55:a5:3c:f8:ab:cc:0f:e1:e9: 63:a4:c3:77:d0:38:db:6d:27:df:29:de:dd:cc:ae: 1c:a1:13:eb:03:1f:00:48:ff:55:2b:b7:56:6f:a8: 96:59:4b:56:82:1f:8d:50:b5:0c:f4:5b:8c:53:93: 02:5b:9f:97:83:24:ee:fc:5f:c5:f0:d6:b6:bd:01: a9:7b:7b:65:3a:a4:65:84:2a:f1:f7:23:47:e3:28: 9b:f6:c0:66:0b:8c:5a:5c:7e:8a:49:72:9e:3f:be: ed:b1:97:4d:71:67:88:be:d2:a7:f1:99:b8:5d:fa: d0:ab:3a:a3:a1:43:a4:d4:a5:ff:ea:d3:98:f0:fe: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:F1:26:E1:AE:34:CC:1B:35:F1:8E:D6:E4:4D:61:5C:47:68:79 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b4:b6:88:7f:2c:55:4f:71:05:2e:d6:95:96:80:52:86:c3: 99:ba:8a:a4:c3:67:e0:35:d4:0a:da:44:6f:f5:45:4d:57:40: 77:25:8c:bf:19:3e:44:d9:71:68:67:1c:15:c9:c1:42:92:98: cb:cd:71:1b:bb:ab:10:08:3a:f3:63:da:b4:44:ef:7a:63:74: 8f:3f:e6:da:2b:fe:5a:fa:de:f1:56:e0:a7:16:09:d2:09:f2: 25:1a:95:ad:b7:49:bb:95:5c:1c:27:3a:87:30:be:f9:c3:97: 45:77:7d:57:be:fb:f9:c7:6d:e0:1f:e9:d1:6b:26:36:68:4b: 76:43:c6:a0:fc:ee:ee:56:5e:d8:e3:4e:2b:55:bc:3f:d1:d8: 59:63:e2:8e:2f:2f:d2:57:63:4e:84:e1:1f:70:ed:85:3f:52: 73:a2:53:3f:9a:72:74:71:1b:45:d9:e6:6b:dd:f0:85:66:03: fd:89:88:17:69:71:d1:4d:59:78:ef:cf:1e:74:b1:d8:e2:5b: c1:7e:67:7d:1e:92:df:d6:5e:7e:7f:66:d1:0a:44:40:01:43: 7a:c0:af:3b:b2:d3:ba:74:ca:17:42:2c:0b:ba:ec:99:9b:71: 8c:9a:fb:a7:7d:7b:19:c2:5d:27:fd:cd:e0:5e:9b:e9:72:e8: 0c:f0:56:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjYwMTI1MDIwMzU1WhcNMjYwMjAxMDIwMzU1WjAYMRYwFAYD VQQDDA02OTc1N2EwYi02OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhGpNBjdj+grIyBrz+wlcdOrKZVSTVprycXn0D1Md+D8RMKzu4A1j0aa4IIj dAWiAgUURY4rCBq1dwF7Avs7UJwFzk+Bn81vYCCD6kK2po68VuUr2YQE5G/RyONk Sdqp045dodykMR9akpi5S5c5ySaeRInOyoSarVvR/SVVpTz4q8wP4eljpMN30Djb bSffKd7dzK4coRPrAx8ASP9VK7dWb6iWWUtWgh+NULUM9FuMU5MCW5+XgyTu/F/F 8Na2vQGpe3tlOqRlhCrx9yNH4yib9sBmC4xaXH6KSXKeP77tsZdNcWeIvtKn8Zm4 XfrQqzqjoUOk1KX/6tOY8P7NtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5y8Sbh rjTMGzXxjtbkTWFcR2h5MB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5tLaIfyxVT3EFLtaVloBShsOZuoqkw2fgNdQK2kRv9UVNV0B3JYy/ GT5E2XFoZxwVycFCkpjLzXEbu6sQCDrzY9q0RO96Y3SPP+baK/5a+t7xVuCnFgnS CfIlGpWtt0m7lVwcJzqHML75w5dFd31Xvvv5x23gH+nRayY2aEt2Q8ag/O7uVl7Y 404rVbw/0dhZY+KOLy/SV2NOhOEfcO2FP1JzolM/mnJ0cRtF2eZr3fCFZgP9iYgX aXHRTVl4788edLHY4lvBfmd9HpLf1l5+f2bRCkRAAUN6wK87stO6dMoXQiwLuuyZ m3GMmvunfXsZwl0n/c3gXpvpcugM8Fal -----END CERTIFICATE-----Generated at Sun Jan 25 06:10:12 2026 by rpki-client