This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: HARxqp617hPvaFuGF4cuCJBug7P7XnQR3qMdn01x2tc= Subject key identifier: 82:64:3F:E8:7E:EF:DD:69:89:5C:47:4A:E7:01:29:67:ED:80:02:48 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 036B Signing time: Fri 26 Dec 2025 23:55:53 +0000 Manifest this update: Fri 26 Dec 2025 23:55:53 +0000 Manifest next update: Fri 02 Jan 2026 23:55:53 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: MjTofPbgZKvdwI0/NxvUbOgwN1BBp5bORkUKl1oMDIs=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: BkyDK7N8MqPzb7yz7N5nQ1LHqHZV+xDxLFOlL/0hv/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Dec 26 23:55:53 2025 GMT Not After : Jan 2 23:55:53 2026 GMT Subject: CN=694f2089-9d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:90:ca:5b:c5:09:f0:0d:04:70:f7:6c:f0: 41:55:eb:db:c3:1e:b4:f8:fb:3c:8c:6d:fb:c8:12: aa:56:81:e9:06:54:09:f4:53:18:11:9c:0c:1f:3d: 57:e6:3a:af:c7:b3:ef:7b:e6:74:47:43:fe:82:16: e1:1b:99:03:f7:0b:db:bd:68:21:7d:bd:26:3d:f7: 30:e7:a6:27:f2:cc:e9:73:2a:12:b5:b2:c3:b8:1f: e6:42:89:e4:4b:3d:44:6f:88:ae:55:48:ff:2a:7b: 90:38:0b:4c:25:b5:d5:c8:98:66:ca:0c:0c:75:98: 3e:0e:21:bf:7b:d1:92:34:86:d6:42:54:97:c4:dd: ff:8c:2e:d2:80:e9:2c:4b:f0:f5:9f:d0:8a:3b:7e: 65:86:53:9f:0a:a9:2c:8c:e2:85:91:8b:9b:14:f6: 83:8a:c0:85:39:42:1e:96:bb:d8:6b:bb:8e:86:63: 99:d0:24:e4:c4:0d:1f:d6:ad:98:34:ab:e4:03:65: f9:d7:47:85:ab:43:4d:4b:ad:d4:ec:12:65:5b:e1: b8:b4:8c:7c:c6:da:b9:87:dd:be:38:c6:71:81:89: 98:70:90:7b:67:84:41:25:e6:8e:c3:6e:0f:ad:21: 0f:5d:f7:be:62:41:81:97:5a:41:64:65:a3:be:4c: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:3F:E8:7E:EF:DD:69:89:5C:47:4A:E7:01:29:67:ED:80:02:48 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:9b:84:06:ed:9f:24:9c:c0:5e:71:41:95:71:cd:09:31:5d: 21:55:d9:6f:a2:8e:bf:61:97:67:4e:01:c3:09:bb:2b:8d:19: 33:9a:11:0d:c5:84:0d:c3:96:83:32:2f:51:9f:22:c2:3f:2d: 9e:7d:6e:68:a8:c2:ba:fa:39:1e:e2:5e:e1:66:6c:5c:50:2b: 18:b1:4e:ea:f7:28:ec:75:cf:46:40:5b:8d:2e:5b:21:01:20: e1:f6:5f:e8:f8:53:51:3f:91:a6:51:99:d8:80:65:05:70:27: f2:62:49:a0:5d:9b:8b:f3:4a:81:4f:7c:35:31:fd:ec:43:54: 4c:4e:f1:f1:82:a8:c6:1f:9d:2a:55:31:22:60:19:42:9f:44: 1c:56:f8:33:b9:9b:3e:a3:f1:45:44:93:ef:1b:a4:79:ea:35: 6e:5d:b0:70:ed:60:72:06:92:4f:d9:91:81:f6:a0:76:3f:47: e5:59:1d:d1:ee:4d:3b:0b:26:03:bd:c4:35:df:41:6e:ea:91: ee:7b:cf:3b:be:8c:1b:27:ab:12:08:2f:d2:06:19:1b:5d:41: 6f:e2:e6:27:7d:8c:63:a7:d9:42:91:99:bd:ce:b4:e6:cc:ac: 90:8a:05:af:43:ab:8a:32:49:f9:3c:74:33:56:cb:c9:47:37: 67:c0:bd:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjUxMjI2MjM1NTUzWhcNMjYwMTAyMjM1NTUzWjAYMRYwFAYD VQQDDA02OTRmMjA4OS05ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR+QylvFCfANBHD3bPBBVevbwx60+Ps8jG37yBKqVoHpBlQJ9FMYEZwMHz1X 5jqvx7Pve+Z0R0P+ghbhG5kD9wvbvWghfb0mPfcw56Yn8szpcyoStbLDuB/mQonk Sz1Eb4iuVUj/KnuQOAtMJbXVyJhmygwMdZg+DiG/e9GSNIbWQlSXxN3/jC7SgOks S/D1n9CKO35lhlOfCqksjOKFkYubFPaDisCFOUIelrvYa7uOhmOZ0CTkxA0f1q2Y NKvkA2X510eFq0NNS63U7BJlW+G4tIx8xtq5h92+OMZxgYmYcJB7Z4RBJeaOw24P rSEPXfe+YkGBl1pBZGWjvkxzNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJkP+h+ 791piVxHSucBKWftgAJIMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEm4QG7Z8knMBecUGVcc0JMV0hVdlvoo6/YZdnTgHDCbsrjRkzmhEN xYQNw5aDMi9RnyLCPy2efW5oqMK6+jke4l7hZmxcUCsYsU7q9yjsdc9GQFuNLlsh ASDh9l/o+FNRP5GmUZnYgGUFcCfyYkmgXZuL80qBT3w1Mf3sQ1RMTvHxgqjGH50q VTEiYBlCn0QcVvgzuZs+o/FFRJPvG6R56jVuXbBw7WByBpJP2ZGB9qB2P0flWR3R 7k07CyYDvcQ130Fu6pHue887vowbJ6sSCC/SBhkbXUFv4uYnfYxjp9lCkZm9zrTm zKyQigWvQ6uKMkn5PHQzVsvJRzdnwL2E -----END CERTIFICATE-----Generated at Sat Dec 27 05:29:34 2025 by rpki-client