This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: 5PM7/V7zPVvhg6YtGsnUWlw5mOJP0/vffqT1al8nrZo= Subject key identifier: 54:F9:17:4A:CF:52:29:55:F0:63:33:A4:28:45:48:1F:BF:04:60:B9 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 06D0 Signing time: Thu 04 Dec 2025 20:55:45 +0000 Manifest this update: Thu 04 Dec 2025 20:55:45 +0000 Manifest next update: Thu 11 Dec 2025 20:55:45 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: sZSgzEdEY9/e1ehe4wMbbYxgTHqax8+zitdZ20Curvk=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Dec 4 20:55:45 2025 GMT Not After : Dec 11 20:55:45 2025 GMT Subject: CN=6931f551-7fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:32:0a:73:13:88:83:3b:11:a4:96:67:4a: eb:fd:4c:ab:70:37:6d:88:93:d4:52:25:a7:aa:df: 1c:8e:fc:99:0b:e4:47:98:8b:8d:bb:a3:18:9b:3f: 33:f1:5a:af:81:b1:76:5f:7a:c8:f1:37:ad:b1:2d: 6e:5b:42:42:dc:38:b1:13:54:1d:68:a0:20:30:2c: 6c:9c:1b:62:0c:81:67:cf:86:b7:91:44:76:e4:cd: 46:2c:a7:dc:cd:cc:1c:ff:44:ad:20:00:53:20:8a: 4e:2d:48:7e:d9:f8:88:5b:24:b9:3f:a9:60:0a:3f: 7b:a0:5e:f3:5a:8f:a9:d6:c9:1a:10:5f:36:21:7c: 21:a7:47:6f:09:7b:18:94:0f:2d:cf:2a:cf:90:ab: 0e:ac:2a:18:47:d8:fa:12:c7:57:06:a7:c1:1f:2f: 22:8d:70:d1:0b:9a:06:57:66:76:d9:cf:68:e9:e6: 3a:03:6a:b5:38:4c:43:11:e3:b0:1a:fe:30:44:e3: 3b:68:f8:7b:0f:6a:40:1c:e3:89:ed:21:01:86:84: 4a:30:d6:d5:8d:53:3c:3a:b5:1f:0c:35:05:55:f5: 75:ca:fa:40:47:4f:bd:e1:02:a5:4a:f4:8c:89:18: dc:12:6a:23:83:bf:03:4f:e8:95:7a:65:5a:cd:55: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F9:17:4A:CF:52:29:55:F0:63:33:A4:28:45:48:1F:BF:04:60:B9 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3d:52:e8:ef:51:1a:6a:f7:af:91:2e:95:9b:08:c5:bd:0f: 51:03:41:f2:74:3a:13:48:e8:bd:72:d4:b3:18:ca:a2:16:71: 0c:d2:40:8f:e4:d8:23:87:55:30:27:67:ef:22:38:f6:a8:c1: 9b:c4:4d:7c:8a:f8:4b:8b:0b:52:4c:79:2e:60:67:6d:8e:6a: 78:53:29:30:fc:2f:00:bd:6b:ea:18:14:4b:00:bb:d9:9b:9b: 3a:9f:55:c7:62:27:08:ae:7c:80:ec:5e:ad:be:64:07:11:be: 49:dc:3a:60:57:3f:93:06:69:2d:40:98:b5:90:9a:a8:06:61: fb:70:b5:62:f5:2a:a7:47:73:c0:50:d1:bb:f9:58:81:2b:a0: 63:0f:29:03:fb:d7:f6:b3:cf:38:66:79:84:47:04:94:48:72: f7:4f:33:33:00:d7:d0:2f:96:22:12:21:39:5e:cc:e9:14:e5: 4f:35:37:5a:6e:93:57:c5:e1:59:fe:96:f8:46:9a:b9:ff:60: 1c:0a:74:c0:4c:65:3d:ed:c5:97:e0:3c:3c:ac:72:0f:bf:a1: 95:5b:dd:4a:db:54:36:ae:79:b9:ad:59:2e:f7:a6:f2:ab:54: 7a:b2:0a:4d:6d:66:e4:bc:b6:c7:ae:9a:1b:02:35:02:13:27: b1:b2:14:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUxMjA0MjA1NTQ1WhcNMjUxMjExMjA1NTQ1WjAYMRYwFAYD VQQDEw02OTMxZjU1MS03ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldEyCnMTiIM7EaSWZ0rr/UyrcDdtiJPUUiWnqt8cjvyZC+RHmIuNu6MYmz8z 8VqvgbF2X3rI8TetsS1uW0JC3DixE1QdaKAgMCxsnBtiDIFnz4a3kUR25M1GLKfc zcwc/0StIABTIIpOLUh+2fiIWyS5P6lgCj97oF7zWo+p1skaEF82IXwhp0dvCXsY lA8tzyrPkKsOrCoYR9j6EsdXBqfBHy8ijXDRC5oGV2Z22c9o6eY6A2q1OExDEeOw Gv4wROM7aPh7D2pAHOOJ7SEBhoRKMNbVjVM8OrUfDDUFVfV1yvpAR0+94QKlSvSM iRjcEmojg78DT+iVemVazVXoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT5F0rP UilV8GMzpChFSB+/BGC5MB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOPVLo71EaavevkS6VmwjFvQ9RA0HydDoTSOi9ctSzGMqiFnEM0kCP 5Ngjh1UwJ2fvIjj2qMGbxE18ivhLiwtSTHkuYGdtjmp4Uykw/C8AvWvqGBRLALvZ m5s6n1XHYicIrnyA7F6tvmQHEb5J3DpgVz+TBmktQJi1kJqoBmH7cLVi9SqnR3PA UNG7+ViBK6BjDykD+9f2s884ZnmERwSUSHL3TzMzANfQL5YiEiE5XszpFOVPNTda bpNXxeFZ/pb4Rpq5/2AcCnTATGU97cWX4Dw8rHIPv6GVW91K21Q2rnm5rVku96by q1R6sgpNbWbkvLbHrpobAjUCEyexshRX -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:00 2025 by rpki-client