This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: hUED/GdgjlJtHsgTnm1bxSnJanw9/BMdNUPMWQD5xTU= Subject key identifier: 99:62:33:2D:13:53:0C:04:F1:02:C1:53:19:AC:95:CB:1A:97:83:7B Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D13 Signing time: Thu 04 Dec 2025 17:34:00 +0000 Manifest this update: Thu 04 Dec 2025 17:33:59 +0000 Manifest next update: Thu 11 Dec 2025 17:33:59 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: 1S+cxZR8IHOJpGqExJ1J3YCATUZpJjm5FI5VhFyGLyQ=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: WfQhPmIZUh24j8d27BZmWadRYjUYQWfuUpvwsdxRVBY=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: /bUmZK3GNNVLfX/JC5Le5EvDW4qNPqhqfyqkqK8mIkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Dec 4 17:33:59 2025 GMT Not After : Dec 11 17:33:59 2025 GMT Subject: CN=6931c608-a914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:29:91:ba:7f:47:e0:c5:8f:8a:7d:91:50: 54:96:50:8b:2f:f1:4e:46:a8:4e:fd:40:67:57:d0: dc:e1:c8:e1:68:d7:aa:ad:b1:00:1a:bc:5a:2d:4b: a4:91:50:c6:2b:c7:1c:b4:01:b9:a0:1e:4b:54:6c: 23:48:1e:68:ec:b2:56:43:8a:f9:73:d7:36:60:7a: 10:cc:5b:c5:1c:08:8d:d9:eb:23:27:94:f2:a2:65: 62:70:7c:51:e6:c5:70:42:60:04:7c:d1:f9:ba:d5: aa:08:ff:31:48:48:c6:51:20:3d:fd:25:6d:30:df: 79:ac:00:df:f9:46:4a:cc:a7:2a:58:97:ca:1a:7a: 8e:6b:9b:84:f2:85:63:77:73:47:25:a2:9c:90:72: 66:59:6e:02:09:17:d4:fb:f0:70:9b:89:ef:8f:b5: 0f:26:19:05:fd:df:41:78:fc:3b:09:5a:b6:5d:fd: ba:bc:c8:84:6c:55:32:2d:d3:15:8d:9b:8c:3c:b6: 0e:0d:6a:77:d8:38:b2:48:5b:79:65:99:db:57:78: 4e:98:45:79:9e:ea:96:2e:fa:31:7c:c8:0a:48:27: 6c:53:d4:b1:63:ce:bc:15:62:bf:a9:7a:5b:4f:77: fe:9a:0b:72:c6:40:24:dc:82:e5:01:99:6f:19:aa: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:62:33:2D:13:53:0C:04:F1:02:C1:53:19:AC:95:CB:1A:97:83:7B X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bb:d7:0f:6f:28:31:79:62:cc:77:bf:5e:88:18:2f:f3:4c: f1:51:e6:6a:5e:05:60:cd:76:40:58:7a:10:c6:bc:84:4d:67: 54:83:1e:44:33:56:60:33:d4:c4:56:72:0d:f0:46:b7:6c:50: 3b:56:ad:24:99:39:40:9c:79:8b:e3:d6:a0:55:20:00:bc:94: b8:e5:03:12:05:2a:ed:02:91:c8:4b:00:cb:fd:84:15:8b:be: 96:81:ab:50:a3:94:42:0b:5a:70:9e:6d:87:c2:54:6d:7e:66: f3:7c:56:5c:e7:42:fd:e1:63:a9:76:9d:7c:15:92:ab:49:47: 0e:bf:ae:a3:9c:3a:0b:f1:64:8c:20:29:d3:07:a9:8a:d0:b1: 11:c2:d5:c4:d5:f9:08:24:3f:75:cf:dc:7a:15:ae:b3:eb:60: 27:14:3e:d6:70:9c:f5:eb:3a:0d:f5:98:b8:49:a3:d9:67:a7: 57:11:82:1c:15:76:e3:fb:23:81:c0:32:c3:fd:87:51:f1:58: 00:9c:ee:a4:15:6c:98:f7:51:21:dd:5a:ac:fc:c9:fc:26:3f: e7:3e:35:26:ee:d5:df:d3:a2:d7:03:1a:b5:4d:eb:bf:57:25: 15:85:d0:78:91:c9:ff:85:f7:cb:44:db:82:02:0a:e0:94:8c: 96:3b:e0:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUxMjA0MTczMzU5WhcNMjUxMjExMTczMzU5WjAYMRYwFAYD VQQDEw02OTMxYzYwOC1hOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptspkbp/R+DFj4p9kVBUllCLL/FORqhO/UBnV9Dc4cjhaNeqrbEAGrxaLUuk kVDGK8cctAG5oB5LVGwjSB5o7LJWQ4r5c9c2YHoQzFvFHAiN2esjJ5TyomVicHxR 5sVwQmAEfNH5utWqCP8xSEjGUSA9/SVtMN95rADf+UZKzKcqWJfKGnqOa5uE8oVj d3NHJaKckHJmWW4CCRfU+/Bwm4nvj7UPJhkF/d9BePw7CVq2Xf26vMiEbFUyLdMV jZuMPLYODWp32DiySFt5ZZnbV3hOmEV5nuqWLvoxfMgKSCdsU9SxY868FWK/qXpb T3f+mgtyxkAk3ILlAZlvGareIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJliMy0T UwwE8QLBUxmslcsal4N7MB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvu9cPbygxeWLMd79eiBgv80zxUeZqXgVgzXZAWHoQxryETWdUgx5E M1ZgM9TEVnIN8Ea3bFA7Vq0kmTlAnHmL49agVSAAvJS45QMSBSrtApHISwDL/YQV i76WgatQo5RCC1pwnm2HwlRtfmbzfFZc50L94WOpdp18FZKrSUcOv66jnDoL8WSM ICnTB6mK0LERwtXE1fkIJD91z9x6Fa6z62AnFD7WcJz16zoN9Zi4SaPZZ6dXEYIc FXbj+yOBwDLD/YdR8VgAnO6kFWyY91Eh3Vqs/Mn8Jj/nPjUm7tXf06LXAxq1Teu/ VyUVhdB4kcn/hffLRNuCAgrglIyWO+Bg -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:10 2025 by rpki-client