This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: 7il6h7kGPw6ubDmGoSgM6hUm1VCMdRoJ0VWlnW/w9sI= Subject key identifier: 7D:9A:55:89:E6:88:58:39:54:1E:2A:01:06:E6:D2:F2:E7:C7:4C:69 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 03BF Signing time: Sat 06 Dec 2025 23:17:25 +0000 Manifest this update: Sat 06 Dec 2025 23:17:25 +0000 Manifest next update: Sat 13 Dec 2025 23:17:25 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: TG51gsQwBdcbKh+X/87LM/8Jps+ildz+SHFi3ZGpDBE=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Dec 6 23:17:25 2025 GMT Not After : Dec 13 23:17:25 2025 GMT Subject: CN=6934b985-6f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:eb:f1:fb:f2:8f:30:c7:16:cd:71:7e:d8: ef:81:77:00:90:2e:33:94:64:11:d3:c6:18:2a:d5: ab:96:b6:64:6d:ed:ab:58:34:5c:9f:5f:7f:67:eb: c7:cd:53:1f:81:a3:2a:7f:5c:ce:a3:31:c4:03:e7: e2:9a:fb:b3:73:13:f8:ea:d3:e4:18:15:1f:10:56: 5d:83:fb:16:21:ad:fc:fa:b5:1a:61:7f:62:c5:1b: 68:ce:4b:fb:e0:35:3c:d8:7e:be:4d:14:4c:9c:a2: 28:2c:4c:e2:f2:72:bc:92:47:d0:cc:db:c8:94:1d: e1:f3:8c:c8:bc:fe:93:12:21:9b:9d:f5:24:ea:f2: 10:c9:66:6b:33:c4:a7:31:29:5f:97:56:ea:0f:9a: a0:70:75:0d:71:f1:96:bd:95:db:33:08:c8:50:2c: e6:2f:3b:0d:96:4c:0a:4d:e3:80:23:cd:63:09:54: 88:2f:ec:22:93:bd:9b:35:9a:62:8d:53:93:d2:6c: 0d:8e:9e:7a:27:a5:24:f5:e7:3a:a9:44:26:bc:52: c9:78:56:fa:7c:49:dc:5d:d6:74:a6:24:7a:7a:30: 80:e3:c4:b3:06:50:a3:72:9e:14:74:cb:0d:4a:16: 8e:7a:bc:c5:1b:ea:8c:eb:75:fe:7f:c6:8a:c0:52: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:55:89:E6:88:58:39:54:1E:2A:01:06:E6:D2:F2:E7:C7:4C:69 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:ec:b9:6e:d2:b2:5f:d5:f1:36:8a:c7:47:95:dd:0c:8f: 7e:45:72:37:39:88:f0:bb:74:73:ab:42:57:56:eb:28:41:5c: 96:c2:6c:8d:d8:21:26:ca:ff:e0:4f:fc:00:bd:ec:a3:bb:fb: 4b:d5:21:c5:12:2b:85:c6:68:8c:d6:1e:ab:68:7e:a8:ea:93: fc:06:50:e6:b6:4c:c2:0b:5c:e0:7d:6f:e7:b3:53:d3:e6:01: 22:19:c5:52:38:0c:ed:4a:25:44:a2:7c:a2:ab:d7:64:6c:f4: 9d:5a:54:a4:38:c0:a6:cf:74:28:08:f5:e3:d2:f3:e2:8c:b5: 16:ce:e0:bb:50:8c:65:34:47:64:6a:21:6c:bc:aa:33:ff:25: 05:a9:ba:ec:99:eb:19:0a:75:37:13:a9:85:04:77:9a:15:bf: 0b:93:fa:a7:0b:86:02:49:17:c1:f3:64:57:2b:6f:82:e6:e7: ac:e8:4c:d3:f3:81:71:4e:e5:bc:ed:2c:98:13:cd:e7:8c:dc: 4d:f7:54:99:a9:23:44:fc:d0:dd:df:d1:fe:5b:29:0f:3e:f7: a5:e7:22:36:53:6e:53:d7:64:ce:55:b1:d2:72:5b:a9:73:9a: b9:c6:18:13:66:f9:4c:5a:b7:d0:13:7a:9b:14:74:21:68:44: 9c:6e:8e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUxMjA2MjMxNzI1WhcNMjUxMjEzMjMxNzI1WjAYMRYwFAYD VQQDEw02OTM0Yjk4NS02ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22Dr8fvyjzDHFs1xftjvgXcAkC4zlGQR08YYKtWrlrZkbe2rWDRcn19/Z+vH zVMfgaMqf1zOozHEA+fimvuzcxP46tPkGBUfEFZdg/sWIa38+rUaYX9ixRtozkv7 4DU82H6+TRRMnKIoLEzi8nK8kkfQzNvIlB3h84zIvP6TEiGbnfUk6vIQyWZrM8Sn MSlfl1bqD5qgcHUNcfGWvZXbMwjIUCzmLzsNlkwKTeOAI81jCVSIL+wik72bNZpi jVOT0mwNjp56J6Uk9ec6qUQmvFLJeFb6fEncXdZ0piR6ejCA48SzBlCjcp4UdMsN ShaOerzFG+qM63X+f8aKwFJ3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2aVYnm iFg5VB4qAQbm0vLnx0xpMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV+uy5btKyX9XxNorHR5XdDI9+RXI3OYjwu3Rzq0JXVusoQVyWwmyN 2CEmyv/gT/wAveyju/tL1SHFEiuFxmiM1h6raH6o6pP8BlDmtkzCC1zgfW/ns1PT 5gEiGcVSOAztSiVEonyiq9dkbPSdWlSkOMCmz3QoCPXj0vPijLUWzuC7UIxlNEdk aiFsvKoz/yUFqbrsmesZCnU3E6mFBHeaFb8Lk/qnC4YCSRfB82RXK2+C5ues6EzT 84FxTuW87SyYE83njNxN91SZqSNE/NDd39H+WykPPvel5yI2U25T12TOVbHSclup c5q5xhgTZvlMWrfQE3qbFHQhaEScbo4q -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:41 2025 by rpki-client