This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: rRZLAMVxtUyZpm2LxCedVpAt81Do0lbbnYTl3TiiDqs= Subject key identifier: 10:AA:64:1A:F0:17:85:34:20:0D:F1:E0:61:12:22:CD:3B:30:C8:E3 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 03D1 Signing time: Sat 10 Jan 2026 23:48:14 +0000 Manifest this update: Sat 10 Jan 2026 23:48:14 +0000 Manifest next update: Sat 17 Jan 2026 23:48:14 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: Vz5WaryiwpmZTLVV+T+Of+6Wp8GENNhZEtE6rHJCbqY=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 23:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Jan 10 23:48:14 2026 GMT Not After : Jan 17 23:48:14 2026 GMT Subject: CN=6962e53e-dbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:fd:3f:a1:16:05:a6:41:1a:61:0e:c8:2f: 81:a3:b1:5f:d8:32:e5:89:cc:4a:6a:35:76:04:4e: e9:10:c7:a1:35:fe:4b:41:bb:53:2a:11:b9:84:e5: c6:3a:6a:d0:8e:7f:fa:68:17:ae:2c:99:68:02:2d: 1b:f5:39:ed:6d:a3:cf:ab:af:63:5a:e2:86:c9:38: fe:ff:f3:a8:1f:dd:96:f7:20:f7:39:fb:99:a6:ec: 0e:88:eb:8c:d8:ae:99:c5:79:6b:79:90:50:8e:60: 15:06:72:e7:d0:80:e3:f4:fe:80:2d:91:4f:96:40: 16:00:da:d9:a2:b1:44:98:60:f4:4c:82:0f:a9:41: 89:38:d6:40:82:e3:91:53:63:bb:9e:80:fc:0e:ac: bc:aa:bb:e1:8b:c6:51:99:65:74:73:f2:a6:59:7e: d0:02:68:66:4d:9e:25:d2:55:5f:67:f7:92:24:71: bb:d8:44:a4:41:eb:4c:13:33:6b:10:de:ed:d2:7b: 4f:7f:b8:f3:3c:11:24:07:1c:b2:9e:1c:59:f9:fe: 75:83:2b:eb:b9:5a:78:09:8e:cb:fa:a6:61:44:90: d3:31:1a:22:16:94:3c:f9:82:00:91:51:3b:5b:f2: dc:cb:74:66:ff:35:75:b3:a0:e0:0f:59:a3:44:ea: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:64:1A:F0:17:85:34:20:0D:F1:E0:61:12:22:CD:3B:30:C8:E3 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:e2:01:cb:72:2d:73:ce:35:b7:d3:aa:6f:a3:d5:cd:08: 32:66:fe:88:e7:3d:6e:9d:95:3e:1b:ff:fb:ef:8b:75:10:2a: a1:5e:55:19:e2:b5:10:c3:19:13:79:f5:67:f3:b2:be:ae:c7: 74:42:da:e5:ff:13:54:e3:c2:58:3f:10:50:92:50:59:4d:a8: 18:43:b7:b8:d2:18:4a:ae:b9:5d:8c:b9:93:fa:e8:f9:12:1f: cc:7f:5b:d6:63:54:a6:11:3e:73:f2:24:67:85:02:5b:7e:8d: 03:12:a2:60:f2:45:62:52:9c:ae:16:d2:32:9b:ce:58:1d:e9: ff:cb:b2:6b:9b:d8:58:1e:4d:bc:ad:f5:dc:7e:1f:22:33:0c: 90:8d:37:e0:fa:e9:50:cc:37:67:e5:4d:a2:8a:2f:aa:cb:56: 6d:b8:2f:c1:0d:06:de:74:a4:89:8a:ea:03:1e:09:c6:d4:cd: 67:62:ce:17:1a:57:a1:32:19:24:46:e9:67:8b:15:ad:7a:07: 52:e4:4e:c9:50:a6:7e:8a:e3:91:f5:f3:39:79:c6:f0:78:eb: fb:e5:45:38:18:04:c4:54:ba:0d:9a:5c:02:cd:80:17:ee:7b: 59:c4:8d:1f:f4:5d:e9:5e:50:49:e4:7d:ca:76:00:b4:1d:1c: dc:00:e9:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYwMTEwMjM0ODE0WhcNMjYwMTE3MjM0ODE0WjAYMRYwFAYD VQQDDA02OTYyZTUzZS1kYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp339P6EWBaZBGmEOyC+Bo7Ff2DLlicxKajV2BE7pEMehNf5LQbtTKhG5hOXG OmrQjn/6aBeuLJloAi0b9TntbaPPq69jWuKGyTj+//OoH92W9yD3OfuZpuwOiOuM 2K6ZxXlreZBQjmAVBnLn0IDj9P6ALZFPlkAWANrZorFEmGD0TIIPqUGJONZAguOR U2O7noD8Dqy8qrvhi8ZRmWV0c/KmWX7QAmhmTZ4l0lVfZ/eSJHG72ESkQetMEzNr EN7t0ntPf7jzPBEkBxyynhxZ+f51gyvruVp4CY7L+qZhRJDTMRoiFpQ8+YIAkVE7 W/Lcy3Rm/zV1s6DgD1mjROrQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCqZBrw F4U0IA3x4GESIs07MMjjMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4yOIBy3Itc841t9Oqb6PVzQgyZv6I5z1unZU+G//774t1ECqhXlUZ 4rUQwxkTefVn87K+rsd0Qtrl/xNU48JYPxBQklBZTagYQ7e40hhKrrldjLmT+uj5 Eh/Mf1vWY1SmET5z8iRnhQJbfo0DEqJg8kViUpyuFtIym85YHen/y7Jrm9hYHk28 rfXcfh8iMwyQjTfg+ulQzDdn5U2iii+qy1ZtuC/BDQbedKSJiuoDHgnG1M1nYs4X GlehMhkkRulnixWtegdS5E7JUKZ+iuOR9fM5ecbweOv75UU4GATEVLoNmlwCzYAX 7ntZxI0f9F3pXlBJ5H3KdgC0HRzcAOk2 -----END CERTIFICATE-----Generated at Mon Jan 12 06:00:03 2026 by rpki-client