This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: bOtXII9BbnKCRFOEwFlmd1ar0sq8SL7dSJpvj33juRg= Subject key identifier: B0:7A:5A:05:74:25:D9:2D:53:F3:34:66:39:6B:D3:41:B6:76:61:2D Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0CAC Signing time: Mon 08 Dec 2025 17:47:22 +0000 Manifest this update: Mon 08 Dec 2025 17:47:21 +0000 Manifest next update: Mon 15 Dec 2025 17:47:21 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: dwG3Z55ht7I4TnEsQhLb6JCkFfCQdLYz+28Vt3jBcf8=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: liuK4GzoDV4Wyb2t40R5cZyZpCOcxyykm4qNE0iKYKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 17:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Dec 8 17:47:21 2025 GMT Not After : Dec 15 17:47:21 2025 GMT Subject: CN=69370f2a-6df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:6d:8e:72:3d:20:fb:24:57:07:f1:c5:fd: 32:ff:d4:da:1e:53:b9:1a:b4:1c:63:15:4c:f5:cb: 11:27:5e:67:66:c4:d0:b5:d8:64:4b:b3:8e:97:8a: 90:be:2f:6b:89:93:0b:f4:22:f1:a5:76:60:32:f2: 25:f1:b7:b8:83:6b:71:01:03:ff:6f:ae:67:45:a2: 8a:dc:93:74:c8:ae:c0:12:7b:11:30:40:ba:8a:7a: 78:6c:19:cf:50:f3:1c:64:49:87:b9:7a:32:af:77: 36:6e:06:e3:ed:a4:1a:89:68:71:bc:c2:f2:58:0c: bc:93:c4:b5:4d:83:dd:98:3f:1f:38:ad:da:83:53: 58:3e:9f:2b:b0:65:ea:11:39:2c:63:e4:fd:a5:c7: 5e:11:b8:5a:b8:9c:b6:06:ed:3e:e1:c2:b0:66:76: bf:98:2e:99:0d:1d:00:96:81:4e:bb:b8:d2:44:33: b6:45:d5:17:c8:44:2c:14:05:59:dc:26:3b:02:5d: d4:fd:df:a6:64:fc:91:d6:00:98:df:2f:0e:77:8a: a1:83:ac:15:b6:05:f3:5c:d4:e8:82:99:e2:66:64: 5c:ad:41:6c:cd:e1:fc:96:7b:69:1c:68:70:17:5c: 5a:af:35:e0:c7:37:27:f2:93:29:ea:ad:f4:78:aa: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:5A:05:74:25:D9:2D:53:F3:34:66:39:6B:D3:41:B6:76:61:2D X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:39:54:f3:b0:43:a8:59:4c:7f:bc:89:d1:cb:0a:ee:7a:61: 5d:36:8e:a2:a9:1b:e3:dd:4e:f2:cf:46:04:36:0b:8d:05:4d: 18:9c:18:7d:90:ef:14:3f:c7:44:18:7b:ea:b6:46:b5:15:23: fe:57:1e:88:1a:7b:7e:c9:64:c8:96:a4:8d:88:d7:da:cc:34: 90:c8:31:fa:93:66:be:ab:e7:e7:d3:ac:76:83:7c:7b:a7:cd: f1:b2:68:a5:bf:e6:1b:e6:0a:7b:e2:02:eb:e0:a3:42:9f:00: ff:73:49:4f:0a:0c:3a:3b:b3:42:05:b0:96:d5:49:b6:88:72: cf:4e:04:e0:e5:0c:61:50:01:62:8d:56:4f:76:b1:7e:dd:88: ae:9f:64:0b:8a:c6:d0:98:89:d0:db:ef:5a:d3:ea:e7:b2:d3: e0:4d:11:a1:ed:87:45:73:91:4f:1f:f0:90:23:4f:0a:a4:df: 44:f9:60:05:69:c8:9b:94:4e:e1:51:20:98:10:06:31:ad:2f: a5:b2:c9:59:df:37:c3:70:ab:7f:83:f5:6d:d5:c2:dc:58:12: b0:f2:0b:93:db:f6:04:3d:b7:38:01:7d:b4:06:f6:aa:c2:03: 37:f0:9a:1c:48:0f:8f:9b:ed:cd:be:51:ae:8b:d0:1c:43:8c: e9:cc:38:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMjA4MTc0NzIxWhcNMjUxMjE1MTc0NzIxWjAYMRYwFAYD VQQDEw02OTM3MGYyYS02ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5ZtjnI9IPskVwfxxf0y/9TaHlO5GrQcYxVM9csRJ15nZsTQtdhkS7OOl4qQ vi9riZML9CLxpXZgMvIl8be4g2txAQP/b65nRaKK3JN0yK7AEnsRMEC6inp4bBnP UPMcZEmHuXoyr3c2bgbj7aQaiWhxvMLyWAy8k8S1TYPdmD8fOK3ag1NYPp8rsGXq ETksY+T9pcdeEbhauJy2Bu0+4cKwZna/mC6ZDR0AloFOu7jSRDO2RdUXyEQsFAVZ 3CY7Al3U/d+mZPyR1gCY3y8Od4qhg6wVtgXzXNTogpniZmRcrUFszeH8lntpHGhw F1xarzXgxzcn8pMp6q30eKplTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB6WgV0 JdktU/M0Zjlr00G2dmEtMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPOVTzsEOoWUx/vInRywruemFdNo6iqRvj3U7yz0YENguNBU0YnBh9 kO8UP8dEGHvqtka1FSP+Vx6IGnt+yWTIlqSNiNfazDSQyDH6k2a+q+fn06x2g3x7 p83xsmilv+Yb5gp74gLr4KNCnwD/c0lPCgw6O7NCBbCW1Um2iHLPTgTg5QxhUAFi jVZPdrF+3Yiun2QLisbQmInQ2+9a0+rnstPgTRGh7YdFc5FPH/CQI08KpN9E+WAF aciblE7hUSCYEAYxrS+lsslZ3zfDcKt/g/Vt1cLcWBKw8guT2/YEPbc4AX20Bvaq wgM38JocSA+Pm+3NvlGui9AcQ4zpzDgY -----END CERTIFICATE-----Generated at Wed Dec 10 15:02:49 2025 by rpki-client