This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: /5d9Bd4vSp/T0AbVUxfEfTAF18bmpZ/GwEZAt0sfgpg= Subject key identifier: 57:EC:48:0B:F6:CF:8F:CE:2E:DC:85:E0:EF:02:D9:5D:5F:08:CE:6F Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 025A Signing time: Fri 05 Dec 2025 00:02:51 +0000 Manifest this update: Fri 05 Dec 2025 00:02:51 +0000 Manifest next update: Fri 12 Dec 2025 00:02:51 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: 3li4CWGR3YG37I0QvglF/cPH4ckj9SD5TqP4lDL9Va8=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: u8qVU4O+oPrDx2WYZ59AIDHT1nuPARIxT4cgXtBe6GY=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: M0oc9XetLztbsHYcH9r9JqV1HvBgRP44vMkf2i+UcSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Dec 5 00:02:51 2025 GMT Not After : Dec 12 00:02:51 2025 GMT Subject: CN=6932212b-4a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:aa:83:6e:8a:52:92:d3:c1:84:bd:3c:8a:ae: 02:e7:b7:04:8f:3e:57:a7:53:14:71:91:60:82:42: e0:56:18:88:23:d9:11:99:97:0f:b8:6f:61:75:e4: b5:a4:d7:c7:3a:e5:6a:0c:1f:cc:4d:44:d8:d1:7d: 36:54:10:89:04:81:d6:b7:ff:3b:3a:6e:a2:6f:38: 0a:58:65:82:97:59:8f:21:55:e6:90:2d:54:fe:48: 24:47:e6:60:4e:32:ef:a3:41:28:66:f6:4f:a5:c2: 11:99:bd:5d:b5:d3:fd:40:b2:18:e0:6d:1b:98:59: bd:07:bd:a2:0b:94:a4:cb:53:2b:4d:fe:4a:ea:03: de:79:34:b2:61:e1:de:5d:5c:df:34:bc:06:8c:80: fd:98:31:71:d9:6e:69:97:ff:21:12:42:e2:40:eb: a1:64:c7:55:c9:a4:59:e4:e9:ca:e0:7d:9d:fb:7b: b3:54:91:12:6d:3b:c1:40:a9:f5:c6:84:e1:f5:12: 81:53:59:29:7e:e4:62:e9:e7:8f:0d:dc:5d:ed:96: 38:b7:c8:cc:22:bb:1f:0c:f4:bb:2a:3b:3a:71:28: f1:eb:ef:22:f6:f5:08:f1:4a:0d:56:2b:e2:a7:8c: af:05:12:b3:da:65:ff:75:1f:9a:b4:2b:10:92:d9: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:48:0B:F6:CF:8F:CE:2E:DC:85:E0:EF:02:D9:5D:5F:08:CE:6F X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:23:6a:22:79:99:aa:da:44:56:de:de:2c:8f:41:23:9c:e7: 7c:6e:bc:5f:de:8f:bc:5b:66:da:3f:c6:b2:40:cf:12:9d:6c: a9:92:90:ee:80:c0:9f:19:7f:6f:ad:b5:24:be:18:c2:5b:5a: 4a:90:e2:43:39:1f:cb:dc:d9:5c:0e:da:15:c1:5b:85:d2:70: fd:c7:83:17:42:db:7b:4c:c8:17:4e:a1:64:1d:a3:d6:1c:0b: 2e:33:2d:98:51:33:32:da:7b:2c:35:49:7f:49:40:62:1b:b8: 94:a6:c3:cd:34:81:b8:ca:62:96:26:0f:16:aa:35:fa:7b:10: 96:fc:28:91:00:30:a3:2e:5b:17:b4:46:a8:1a:74:37:fd:bc: bd:52:70:19:be:61:ec:e3:0b:27:f3:d1:4c:53:64:41:bf:e8: 39:ab:66:72:2d:65:76:cc:c4:75:93:27:00:81:ed:d3:d4:a7: 09:4e:99:11:9e:93:a2:e7:f8:e6:b3:eb:f7:11:04:39:73:e2: 72:e0:c9:74:48:a4:06:c3:e8:8e:90:db:40:fc:7b:c8:44:78: 38:48:19:20:fa:fc:a3:03:a6:90:f8:8f:ab:4f:95:e8:76:49: 6d:71:d9:88:fb:af:5c:f1:67:be:42:27:0e:55:85:15:a3:58: 08:62:f5:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUxMjA1MDAwMjUxWhcNMjUxMjEyMDAwMjUxWjAYMRYwFAYD VQQDEw02OTMyMjEyYi00YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KqDbopSktPBhL08iq4C57cEjz5Xp1MUcZFggkLgVhiII9kRmZcPuG9hdeS1 pNfHOuVqDB/MTUTY0X02VBCJBIHWt/87Om6ibzgKWGWCl1mPIVXmkC1U/kgkR+Zg TjLvo0EoZvZPpcIRmb1dtdP9QLIY4G0bmFm9B72iC5Sky1MrTf5K6gPeeTSyYeHe XVzfNLwGjID9mDFx2W5pl/8hEkLiQOuhZMdVyaRZ5OnK4H2d+3uzVJESbTvBQKn1 xoTh9RKBU1kpfuRi6eePDdxd7ZY4t8jMIrsfDPS7Kjs6cSjx6+8i9vUI8UoNVivi p4yvBRKz2mX/dR+atCsQktmimQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfsSAv2 z4/OLtyF4O8C2V1fCM5vMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcI2oieZmq2kRW3t4sj0EjnOd8brxf3o+8W2baP8ayQM8SnWypkpDu gMCfGX9vrbUkvhjCW1pKkOJDOR/L3NlcDtoVwVuF0nD9x4MXQtt7TMgXTqFkHaPW HAsuMy2YUTMy2nssNUl/SUBiG7iUpsPNNIG4ymKWJg8WqjX6exCW/CiRADCjLlsX tEaoGnQ3/by9UnAZvmHs4wsn89FMU2RBv+g5q2ZyLWV2zMR1kycAge3T1KcJTpkR npOi5/jms+v3EQQ5c+Jy4Ml0SKQGw+iOkNtA/HvIRHg4SBkg+vyjA6aQ+I+rT5Xo dkltcdmI+69c8We+QicOVYUVo1gIYvXJ -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:45 2025 by rpki-client