This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: kFVo3iKzdwo4U6jUQGy/vEmtm50iGPycsbWBsSi7qvk= Subject key identifier: 89:8F:FF:72:C3:DF:17:35:F1:DE:32:6C:EC:B4:62:C8:C4:4C:24:19 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: 87 Signing time: Fri 23 Jan 2026 05:50:31 +0000 Manifest this update: Fri 23 Jan 2026 05:50:30 +0000 Manifest next update: Fri 30 Jan 2026 05:50:30 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: pl6lOm2HQFpPYY2wS9eHJkHC7DYUGDk1Ny8I/ExO6OI=) 2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: AwII9RDgUNte9KKbs2S59qK6HMN8L+pjlEIiZqATsVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Jan 23 05:50:30 2026 GMT Not After : Jan 30 05:50:30 2026 GMT Subject: CN=69730c27-27dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:70:97:5d:d9:b4:8e:2d:1c:3d:ce:36:81: 2c:04:ac:06:b8:c3:09:1f:82:9d:4e:b3:ea:52:99: f8:b3:f8:f6:8b:60:e5:cd:ed:a3:75:00:20:95:80: 21:58:8e:9e:31:5f:7a:f1:dd:d7:51:98:d9:77:5b: 4e:71:62:78:21:af:02:08:e1:e5:ce:17:5f:d2:c8: 11:fd:a2:d6:62:21:d0:5d:6c:86:ea:e8:a6:ef:f3: ed:2b:88:7c:74:2d:c8:b0:39:9e:49:be:cd:2a:27: b0:05:26:65:dc:b5:7f:9f:da:98:4e:c2:58:f3:fc: 08:52:4f:4d:10:31:38:3e:96:87:e1:96:6a:dc:18: 65:32:d7:0e:6a:7c:97:58:7e:0c:26:71:d4:cc:e6: 6c:61:ed:c5:32:77:b4:2d:02:d9:be:b1:53:13:22: f6:e6:ec:7c:85:55:0e:72:e6:d0:94:28:b2:61:d1: 13:a1:ac:97:e4:df:c1:32:8f:b4:39:90:0a:51:91: a8:48:71:3b:f7:7f:0e:7b:66:6d:8f:94:8d:6c:f1: d4:08:2f:33:11:1a:0d:06:4f:e4:b1:bd:04:06:97: e0:5f:95:9a:cc:69:6d:5d:4a:11:5d:d5:92:19:b1: 16:2d:2a:10:2b:13:82:bc:da:c6:c4:9f:2a:3b:75: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8F:FF:72:C3:DF:17:35:F1:DE:32:6C:EC:B4:62:C8:C4:4C:24:19 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d1:79:f6:34:4b:6f:13:32:13:69:12:30:30:6a:91:56:84: 16:44:e6:dc:60:ab:8c:3f:ae:4d:38:85:7e:0d:0d:f1:a8:06: 42:df:1a:37:cf:36:fd:73:4d:82:23:43:73:8b:6f:be:27:b2: 62:07:b7:89:2c:0d:a2:2e:64:24:12:6f:01:8f:78:42:b2:43: 19:cf:c6:93:a9:8f:d3:af:fc:df:97:97:60:e6:bf:b9:e7:2c: de:22:f1:90:11:e3:d2:a9:c7:2c:be:9a:1e:07:b5:ca:0e:99: 31:e3:86:02:46:3b:fc:b6:6e:cb:4c:6f:33:b7:40:7a:a6:98: bf:15:1b:13:97:1e:e5:ae:46:a3:32:62:df:cb:8e:47:0c:6c: 60:15:8a:9f:48:b2:a9:43:97:4e:89:62:1d:7e:e3:20:61:ac: aa:2e:6d:4e:5c:c9:0e:96:7a:bf:c9:01:9d:f5:d1:12:09:a7: 81:9a:46:09:39:25:c0:6c:fe:91:8e:cd:52:1c:3e:a8:3e:98: 42:78:9d:0e:89:3c:6b:f8:e3:38:cc:4b:75:10:c4:c3:58:7a: c9:43:21:86:2b:f0:25:4e:ef:c1:51:03:0d:51:91:9b:ef:31: 1d:a9:1b:8f:12:f1:61:45:73:cd:d8:18:6b:72:95:f3:98:82: 3a:c3:7e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwMTIzMDU1MDMwWhcNMjYwMTMwMDU1MDMwWjAYMRYwFAYD VQQDDA02OTczMGMyNy0yN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4Jwl13ZtI4tHD3ONoEsBKwGuMMJH4KdTrPqUpn4s/j2i2Dlze2jdQAglYAh WI6eMV968d3XUZjZd1tOcWJ4Ia8CCOHlzhdf0sgR/aLWYiHQXWyG6uim7/PtK4h8 dC3IsDmeSb7NKiewBSZl3LV/n9qYTsJY8/wIUk9NEDE4PpaH4ZZq3BhlMtcOanyX WH4MJnHUzOZsYe3FMne0LQLZvrFTEyL25ux8hVUOcubQlCiyYdEToayX5N/BMo+0 OZAKUZGoSHE7938Oe2Ztj5SNbPHUCC8zERoNBk/ksb0EBpfgX5WazGltXUoRXdWS GbEWLSoQKxOCvNrGxJ8qO3Wj4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImP/3LD 3xc18d4ybOy0YsjETCQZMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0Xn2NEtvEzITaRIwMGqRVoQWRObcYKuMP65NOIV+DQ3xqAZC3xo3 zzb9c02CI0Nzi2++J7JiB7eJLA2iLmQkEm8Bj3hCskMZz8aTqY/Tr/zfl5dg5r+5 5yzeIvGQEePSqccsvpoeB7XKDpkx44YCRjv8tm7LTG8zt0B6ppi/FRsTlx7lrkaj MmLfy45HDGxgFYqfSLKpQ5dOiWIdfuMgYayqLm1OXMkOlnq/yQGd9dESCaeBmkYJ OSXAbP6Rjs1SHD6oPphCeJ0OiTxr+OM4zEt1EMTDWHrJQyGGK/AlTu/BUQMNUZGb 7zEdqRuPEvFhRXPN2BhrcpXzmII6w34T -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:11 2026 by rpki-client