This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json) Hash identifier: 7+WksEEQnJ+20zKuvaMPu0bcwkAps989byaHxYD9wY4= Subject key identifier: 5D:BB:E0:A9:58:A9:4F:E0:C5:4E:8A:23:A7:EF:75:5E:C3:06:0F:7B Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft Manifest number: 34 Signing time: Fri 05 Dec 2025 05:28:49 +0000 Manifest this update: Fri 05 Dec 2025 05:28:49 +0000 Manifest next update: Fri 12 Dec 2025 05:28:49 +0000 Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: 78rkSuw7S7+g8l70jyQXIVKch8fRbcgVNmiUImLpZYY=) 2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: vQDu9wcINkcPzWdSO/DWuCCS5k2RLBjzO/0TA4C/YFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Validity Not Before: Dec 5 05:28:49 2025 GMT Not After : Dec 12 05:28:49 2025 GMT Subject: CN=69326d91-bbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:5e:67:d2:4e:1e:6d:27:ed:38:17:68:4e: 74:d0:4c:6c:29:7c:4e:3e:db:b8:ee:a0:09:9c:94: 46:e5:60:4e:de:a1:48:e6:dc:d5:54:f9:fe:b0:e1: 34:52:16:1d:2a:59:32:b1:19:72:44:29:5e:8e:3d: c9:cb:79:66:fb:88:44:18:d8:66:26:4b:37:92:43: ab:68:5f:66:46:63:32:79:5c:86:16:9f:e1:62:c3: 56:01:ae:19:d6:3a:06:5a:72:05:36:88:4f:ff:ad: d1:ee:5f:99:9e:db:be:fa:db:1f:27:24:a1:ae:2b: 07:09:06:cd:2e:94:e4:88:96:de:eb:a5:6f:6e:09: 1b:61:9b:ef:a4:b6:31:df:3a:14:35:42:51:f1:d1: 2e:25:1c:94:01:c7:e6:9b:ac:d1:e3:ce:a7:fc:83: 21:08:85:78:ed:bb:25:79:29:98:eb:76:b6:3e:be: be:21:c9:06:ed:e0:e3:7e:01:96:65:6f:f1:e7:fc: 5c:51:f8:da:3b:f2:18:34:d1:8f:69:17:1f:aa:48: 0b:d0:ca:e0:81:96:f2:77:cd:68:14:a2:dd:15:f6: e1:7f:29:1a:c9:b0:f4:21:e4:c2:03:29:56:5d:7d: 0a:eb:b1:ce:18:da:28:f9:9d:7e:2c:4e:b7:e3:38: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BB:E0:A9:58:A9:4F:E0:C5:4E:8A:23:A7:EF:75:5E:C3:06:0F:7B X509v3 Authority Key Identifier: keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:eb:12:95:cf:94:c7:d6:57:65:e3:28:a2:11:fc:29:2c:5e: 04:90:0d:eb:07:1d:66:67:e7:20:65:7f:55:7e:69:84:6a:a4: e0:f4:f9:b2:68:9f:fe:95:47:47:d3:a6:dc:e4:ba:ba:f1:91: 51:2b:db:9d:95:35:73:a7:b8:27:f4:15:f6:4d:5b:28:45:bc: 59:61:81:b6:42:65:f7:2f:f7:76:da:e7:f2:92:1e:64:65:29: 2b:34:ef:62:65:17:8c:15:99:47:8e:ce:e3:4b:3a:e7:1b:0e: 80:4f:70:4e:9e:06:5e:ad:ea:e1:19:5a:77:a4:70:48:5e:1c: 7a:26:ca:ab:34:76:2d:17:7b:44:39:41:ce:1c:3d:dc:86:dc: 42:92:a8:d7:b8:8f:42:2a:d1:27:54:c7:11:3a:c8:ef:0d:6b: 0e:3c:3b:5b:3d:2b:21:50:17:01:1e:b7:17:8b:b3:53:a7:34: 5c:01:13:fa:63:9b:a2:09:81:01:4e:43:ed:ef:85:25:19:b6: b7:e1:eb:9a:4f:20:c1:b0:83:86:78:bc:29:51:fd:73:04:21: ea:54:e2:6e:03:af:3c:c4:64:cc:61:57:b5:dc:04:71:c2:e4: 7e:c9:ce:fb:a1:a7:b5:78:36:4e:ec:2b:e8:f1:37:3d:16:06: 67:fa:20:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoRERGQ0E5RDAzNDk0NUE1OTI0MTE2MTM3RDYyODc3RjBD RTUyQkYxQjAeFw0yNTEyMDUwNTI4NDlaFw0yNTEyMTIwNTI4NDlaMBgxFjAUBgNV BAMTDTY5MzI2ZDkxLWJiYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH3F5n0k4ebSftOBdoTnTQTGwpfE4+27juoAmclEblYE7eoUjm3NVU+f6w4TRS Fh0qWTKxGXJEKV6OPcnLeWb7iEQY2GYmSzeSQ6toX2ZGYzJ5XIYWn+Fiw1YBrhnW OgZacgU2iE//rdHuX5me27762x8nJKGuKwcJBs0ulOSIlt7rpW9uCRthm++ktjHf OhQ1QlHx0S4lHJQBx+abrNHjzqf8gyEIhXjtuyV5KZjrdrY+vr4hyQbt4ON+AZZl b/Hn/FxR+No78hg00Y9pFx+qSAvQyuCBlvJ3zWgUot0V9uF/KRrJsPQh5MIDKVZd fQrrsc4Y2ij5nX4sTrfjOFhfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXbvgqVip T+DFToojp+91XsMGD3swHwYDVR0jBBgwFoAU3fyp0DSUWlkkEWE31ih38M5Svxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzc4RDU5MzE4OEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyLzNmeXAwRFNVV2xra0VXRTMxaWgzOE01U3Z4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2Z5cDBEU1VXbGtrRVdFMzFpaDM4TTVTdnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzc4RDU5MzE4OEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyLzNmeXAwRFNVV2xr a0VXRTMxaWgzOE01U3Z4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGDrEpXPlMfWV2XjKKIR/CksXgSQDesHHWZn5yBlf1V+aYRqpOD0+bJo n/6VR0fTptzkurrxkVEr252VNXOnuCf0FfZNWyhFvFlhgbZCZfcv93ba5/KSHmRl KSs072JlF4wVmUeOzuNLOucbDoBPcE6eBl6t6uEZWnekcEheHHomyqs0di0Xe0Q5 Qc4cPdyG3EKSqNe4j0Iq0SdUxxE6yO8Naw48O1s9KyFQFwEetxeLs1OnNFwBE/pj m6IJgQFOQ+3vhSUZtrfh65pPIMGwg4Z4vClR/XMEIepU4m4DrzzEZMxhV7XcBHHC 5H7Jzvuhp7V4Nk7sK+jxNz0WBmf6ICM= -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:38 2025 by rpki-client