This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: JZxlLs0tg1PrRegdoPz6KWPXZRXvkphv42Z0YuSySl0= Subject key identifier: 65:1C:CB:FF:DB:F5:D4:74:91:9B:8D:DD:93:A1:B0:CC:EC:0C:9B:05 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 037A Signing time: Sun 25 Jan 2026 00:02:37 +0000 Manifest this update: Sun 25 Jan 2026 00:02:36 +0000 Manifest next update: Sun 01 Feb 2026 00:02:36 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: h/03A0eFtgpgXD2qSGCicU0dWQkZlZNfHxwxNgTfYUo=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: BkyDK7N8MqPzb7yz7N5nQ1LHqHZV+xDxLFOlL/0hv/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Jan 25 00:02:36 2026 GMT Not After : Feb 1 00:02:36 2026 GMT Subject: CN=69755d9d-3697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:4a:ed:da:fb:38:53:79:91:5e:a4:f7:6b: 76:8e:84:29:88:15:d2:cb:db:e5:57:04:09:cf:d9: 66:93:73:bb:64:f1:ce:d4:d2:f7:cd:50:2e:12:51: 7a:dc:b7:d5:d7:e0:23:69:4b:7e:85:ca:e4:5f:ca: 6c:98:5d:5e:b6:a8:7c:74:96:fb:dd:50:95:dd:af: 53:09:70:07:c0:de:4e:0c:2b:de:2c:d5:2a:34:0a: e4:4f:af:94:d4:9a:b3:e9:09:8e:74:f6:03:2c:39: a3:9d:c7:f1:1c:41:e4:7e:0d:f6:0b:c8:ff:84:ba: 2c:ed:23:ab:0a:f5:27:ff:eb:88:01:3d:44:6e:fa: 46:1b:60:c6:82:8f:db:42:5d:b2:20:47:48:2a:b6: 03:34:54:3e:aa:64:08:63:65:2c:e2:51:2b:94:92: ab:a1:c6:3a:8c:17:d2:ba:6f:ce:e4:12:a1:3d:fc: 8c:50:9a:ed:6b:9f:99:28:34:be:87:04:a5:c1:d3: af:8c:6d:32:39:22:ec:dc:42:c2:97:d6:93:30:d9: cf:6c:57:fc:8e:1c:0b:e2:e6:c3:53:c4:0b:53:28: 97:35:62:de:7b:11:59:d0:f9:63:da:91:0a:f6:6b: 97:ba:85:de:44:07:c9:2a:d9:84:92:74:48:6f:1e: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:CB:FF:DB:F5:D4:74:91:9B:8D:DD:93:A1:B0:CC:EC:0C:9B:05 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f7:1f:0a:2a:6c:87:c3:c5:48:71:9e:6f:f1:f6:db:a0:3b: 49:12:b6:fb:ba:31:5a:06:bd:28:aa:bf:37:e6:4a:80:8c:d3: b5:e0:a8:c5:af:60:7b:84:4a:db:ed:5e:11:66:7a:16:e2:72: 13:19:f6:d5:af:b0:d0:15:6f:9e:7f:be:dc:51:07:35:42:77: d0:b1:e8:fa:9e:29:d0:39:07:99:ed:4d:3d:c5:de:b0:59:a3: 52:13:83:d3:06:39:17:87:bc:33:5b:9f:de:91:37:80:0a:ff: d9:97:19:37:fa:71:30:74:9b:08:68:db:f2:20:53:cf:ae:87: 70:c7:31:b2:c0:42:90:51:fc:19:01:65:81:c8:c6:a5:a9:d0: da:e7:81:7c:45:ce:8a:bd:a1:5a:af:75:ae:b8:b3:6a:52:e2: f6:14:97:99:1e:d1:c4:0e:fe:21:b3:6b:74:38:78:45:19:94: e7:6b:31:ef:b4:37:64:3a:7f:30:f1:34:f9:d1:5c:7f:02:9e: 14:ac:57:a4:d5:81:4c:53:41:72:a1:ee:2d:87:e9:fb:65:70: 6c:a5:58:1a:7b:33:94:d2:5d:ff:0f:d9:9b:13:d0:bd:5a:f7: 37:d1:fb:44:00:16:ed:bd:92:15:58:3a:d7:4e:cd:26:b1:65: 5d:b5:88:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwMTI1MDAwMjM2WhcNMjYwMjAxMDAwMjM2WjAYMRYwFAYD VQQDDA02OTc1NWQ5ZC0zNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SJK7dr7OFN5kV6k92t2joQpiBXSy9vlVwQJz9lmk3O7ZPHO1NL3zVAuElF6 3LfV1+AjaUt+hcrkX8psmF1etqh8dJb73VCV3a9TCXAHwN5ODCveLNUqNArkT6+U 1Jqz6QmOdPYDLDmjncfxHEHkfg32C8j/hLos7SOrCvUn/+uIAT1EbvpGG2DGgo/b Ql2yIEdIKrYDNFQ+qmQIY2Us4lErlJKrocY6jBfSum/O5BKhPfyMUJrta5+ZKDS+ hwSlwdOvjG0yOSLs3ELCl9aTMNnPbFf8jhwL4ubDU8QLUyiXNWLeexFZ0Plj2pEK 9muXuoXeRAfJKtmEknRIbx4NrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUcy//b 9dR0kZuN3ZOhsMzsDJsFMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC49x8KKmyHw8VIcZ5v8fbboDtJErb7ujFaBr0oqr835kqAjNO14KjF r2B7hErb7V4RZnoW4nITGfbVr7DQFW+ef77cUQc1QnfQsej6ninQOQeZ7U09xd6w WaNSE4PTBjkXh7wzW5/ekTeACv/Zlxk3+nEwdJsIaNvyIFPProdwxzGywEKQUfwZ AWWByMalqdDa54F8Rc6KvaFar3WuuLNqUuL2FJeZHtHEDv4hs2t0OHhFGZTnazHv tDdkOn8w8TT50Vx/Ap4UrFek1YFMU0Fyoe4th+n7ZXBspVgaezOU0l3/D9mbE9C9 Wvc30ftEABbtvZIVWDrXTs0msWVdtYgc -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:17 2026 by rpki-client