This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: fB6nNbFPa+eL6K+ty9ESOhhtfvkLGieSf4s7JIXieJE= Subject key identifier: 17:84:DD:79:DD:AB:2F:A1:B4:A7:65:A3:7D:37:63:DF:18:49:B2:3B Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0CB2 Signing time: Sat 20 Dec 2025 17:53:59 +0000 Manifest this update: Sat 20 Dec 2025 17:53:58 +0000 Manifest next update: Sat 27 Dec 2025 17:53:58 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: BJsE7hXFgVI4QNuQx0j+0b3fMk7wqR1k6zsBNWDTAb0=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: liuK4GzoDV4Wyb2t40R5cZyZpCOcxyykm4qNE0iKYKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Dec 20 17:53:58 2025 GMT Not After : Dec 27 17:53:58 2025 GMT Subject: CN=6946e2b7-d2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:9e:eb:d1:9b:dd:6a:0f:74:a8:6c:48:d6: 35:48:dd:cb:14:33:c0:04:25:3f:97:91:d9:c3:4e: cb:07:60:c7:1b:e1:b8:8d:77:af:eb:6c:9a:2a:92: 5c:ae:2e:08:4d:5b:7c:e5:dc:61:e0:e9:55:4d:a3: eb:b7:5a:48:f2:d0:fe:e8:52:98:15:c9:a9:8d:ab: a9:2c:4b:5f:7c:f4:92:b5:2b:22:a3:90:06:31:ee: 8c:72:60:95:b4:32:30:da:6c:e4:6b:c7:87:17:01: e4:2f:3f:26:2f:28:de:2a:1a:b7:b1:00:50:fd:ca: 8a:67:89:0b:45:49:7c:76:aa:62:a1:cb:21:1a:e9: f8:a9:e4:4c:16:b6:08:82:3a:8e:ff:b7:8e:65:27: 23:90:e3:ae:23:e1:fa:9d:ff:b0:17:95:e0:2e:8b: 91:1a:26:8a:4c:83:40:18:ab:37:7f:a4:39:19:ca: 92:8e:98:84:b1:cd:99:80:bd:bf:2c:88:08:c4:25: 99:a2:07:54:8b:f7:92:10:c1:0e:f1:1d:30:73:0b: 0d:17:0f:2f:e2:a0:ee:f3:63:c9:68:27:39:28:e1: e6:65:53:8e:bd:ae:8a:a4:3e:91:94:a6:7b:d0:29: 6b:e4:a8:eb:ea:0d:43:5c:b9:5d:05:0c:75:31:b7: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:84:DD:79:DD:AB:2F:A1:B4:A7:65:A3:7D:37:63:DF:18:49:B2:3B X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d1:4d:b4:67:1d:4e:90:ca:99:31:4d:b4:e8:b6:f0:6f:73: 5d:7c:9a:d1:ea:b1:f1:24:a5:52:25:30:a6:b6:5d:0d:50:f1: a2:e1:03:54:03:d0:c1:d7:d4:e9:72:8a:de:d6:e7:49:e7:a8: 6f:0d:81:f1:5b:7c:79:6d:ca:83:3d:f4:f1:fb:10:f0:f8:18: 3d:e1:a3:cd:f0:ae:fc:32:fe:f3:4f:db:21:71:b5:3f:c4:70: d8:e1:08:ed:df:29:76:b9:ea:41:cb:8b:6e:80:38:4f:67:d2: d0:3a:b0:90:22:ac:f2:13:58:2e:b6:9b:a0:e6:63:74:9c:88: c2:5c:7d:d6:97:29:6c:fc:2d:93:c5:d2:4e:a9:87:da:83:1e: 79:fb:fa:57:50:4c:1b:63:73:2e:e9:4c:5f:c4:83:cf:94:29: d9:15:15:3f:96:29:d1:c8:88:3b:06:5d:99:4b:07:8a:7d:c9: c4:be:bc:9b:e3:57:bb:7e:2e:6d:3b:67:5f:01:a5:8f:4f:ba: 5b:81:bb:1e:79:ec:14:08:41:97:1d:43:ab:96:3f:f3:ab:6c: d2:0f:b0:62:0f:da:c5:e9:11:05:72:c4:de:74:ba:11:d4:58: 3a:33:3a:22:2f:08:55:39:4c:a7:27:af:7c:9b:78:12:8d:ba: 24:2c:c7:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMjIwMTc1MzU4WhcNMjUxMjI3MTc1MzU4WjAYMRYwFAYD VQQDDA02OTQ2ZTJiNy1kMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6ye69Gb3WoPdKhsSNY1SN3LFDPABCU/l5HZw07LB2DHG+G4jXev62yaKpJc ri4ITVt85dxh4OlVTaPrt1pI8tD+6FKYFcmpjaupLEtffPSStSsio5AGMe6McmCV tDIw2mzka8eHFwHkLz8mLyjeKhq3sQBQ/cqKZ4kLRUl8dqpiocshGun4qeRMFrYI gjqO/7eOZScjkOOuI+H6nf+wF5XgLouRGiaKTINAGKs3f6Q5GcqSjpiEsc2ZgL2/ LIgIxCWZogdUi/eSEMEO8R0wcwsNFw8v4qDu82PJaCc5KOHmZVOOva6KpD6RlKZ7 0Clr5Kjr6g1DXLldBQx1MbdOYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeE3Xnd qy+htKdlo303Y98YSbI7MB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO0U20Zx1OkMqZMU206Lbwb3NdfJrR6rHxJKVSJTCmtl0NUPGi4QNU A9DB19Tpcore1udJ56hvDYHxW3x5bcqDPfTx+xDw+Bg94aPN8K78Mv7zT9shcbU/ xHDY4Qjt3yl2uepBy4tugDhPZ9LQOrCQIqzyE1gutpug5mN0nIjCXH3Wlyls/C2T xdJOqYfagx55+/pXUEwbY3Mu6UxfxIPPlCnZFRU/linRyIg7Bl2ZSweKfcnEvryb 41e7fi5tO2dfAaWPT7pbgbseeewUCEGXHUOrlj/zq2zSD7BiD9rF6REFcsTedLoR 1Fg6MzoiLwhVOUynJ698m3gSjbokLMfX -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:56 2025 by rpki-client