This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: U0eFhYldmmpxnk30RBj19YL5hsAjCgKgwABeljWBwzg= Subject key identifier: 84:BA:1E:E1:9A:E3:4F:1E:39:3F:F4:4E:B2:13:54:A0:6B:65:A1:7F Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 34F3 Signing time: Sat 20 Dec 2025 14:41:39 +0000 Manifest this update: Sat 20 Dec 2025 14:41:38 +0000 Manifest next update: Sat 27 Dec 2025 14:41:38 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: LT+rQWrtJgTPoGjivrKQNBuB/pZIcD721O3tb0CIZqE=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: 4eibZFZxCBojQ0XF3++/6D4cGjzEkC+cfaewXmXRSYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Dec 20 14:41:38 2025 GMT Not After : Dec 27 14:41:38 2025 GMT Subject: CN=6946b5a3-b26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:a2:d4:f7:85:89:20:5f:5f:56:17:12:4d: f4:0b:6b:9d:f1:18:f1:82:b6:c5:38:ab:e3:07:b9: 0e:57:73:11:1a:60:7f:3a:d1:1d:ac:97:e7:52:10: b1:7a:ed:7d:c1:dd:d3:20:e8:5a:06:ec:89:91:20: cf:d6:16:3b:2d:7e:6f:54:53:4c:2d:e8:44:f6:7b: c5:1a:1e:6f:39:5d:f2:79:ef:cf:b4:a4:3e:e4:02: ab:9e:c5:2b:5e:28:72:36:6a:56:e4:ec:0e:e7:80: 16:d9:a6:f5:bb:71:d6:fb:f9:74:3e:11:05:24:f3: bb:f3:58:69:cf:2a:27:26:07:21:e7:91:1d:ba:f7: e3:14:a3:b9:6d:ef:9f:23:28:57:84:d1:70:2e:cd: 84:14:c9:71:c8:0f:20:0d:19:dc:1a:ea:0a:bb:8d: e6:64:06:db:ff:fc:e3:41:0f:72:db:4e:4c:73:ff: 43:d5:02:4a:8f:80:fa:45:b6:52:2c:4e:5c:87:e9: 8a:26:b6:63:20:14:4e:c0:92:04:58:ab:1c:aa:71: c5:17:40:51:a3:d7:38:81:6f:f4:c9:32:e6:65:d0: 7c:3f:eb:80:62:e2:5d:b4:24:bf:eb:1d:f1:7f:55: a2:f1:fe:5e:cd:89:24:ad:81:29:46:5c:d3:ab:03: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:1E:E1:9A:E3:4F:1E:39:3F:F4:4E:B2:13:54:A0:6B:65:A1:7F X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7a:fc:83:77:e1:a5:fa:bf:e4:8a:d0:69:7c:7e:84:bd:a6: 6b:fb:20:48:11:8b:34:64:c3:03:aa:4a:32:09:45:98:6b:d5: 1c:59:16:28:b6:50:b6:d1:3d:a6:e4:94:73:6d:b8:4e:e0:7b: d3:3e:5f:85:62:8d:55:58:db:43:9c:5b:37:41:64:db:78:55: ef:11:9d:ae:fc:e4:9a:5f:22:ca:1b:18:15:e3:f1:20:9a:aa: 9d:fa:94:41:0a:ea:4e:b4:bc:c0:12:5f:bd:31:7d:e1:6d:52: bc:2d:26:b9:6a:17:54:75:c9:a1:79:95:03:f9:ab:0c:2d:c4: b6:58:52:87:5c:9e:a6:f4:4e:7f:e4:9a:07:a5:03:c3:ea:8b: 43:60:e5:bd:ef:e7:e2:12:37:36:39:1c:05:35:3f:cc:4f:12: da:a5:49:9a:ab:9a:57:c3:99:e9:02:04:46:3b:d9:fc:f4:9b: 92:a1:3b:ac:00:c7:05:ca:4a:51:51:b5:85:5e:3c:01:8f:77: 91:96:8f:a3:8d:7b:05:7d:01:f0:b6:1b:10:72:a5:01:75:f6: 60:30:d6:cf:b9:84:34:81:d0:e4:73:6a:13:2a:ed:f9:6b:83: 3b:79:0d:b6:1e:5a:ed:cb:4b:de:8e:ae:da:94:a5:ca:57:d2: af:8a:f6:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjUxMjIwMTQ0MTM4WhcNMjUxMjI3MTQ0MTM4WjAYMRYwFAYD VQQDDA02OTQ2YjVhMy1iMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Wii1PeFiSBfX1YXEk30C2ud8RjxgrbFOKvjB7kOV3MRGmB/OtEdrJfnUhCx eu19wd3TIOhaBuyJkSDP1hY7LX5vVFNMLehE9nvFGh5vOV3yee/PtKQ+5AKrnsUr XihyNmpW5OwO54AW2ab1u3HW+/l0PhEFJPO781hpzyonJgch55EduvfjFKO5be+f IyhXhNFwLs2EFMlxyA8gDRncGuoKu43mZAbb//zjQQ9y205Mc/9D1QJKj4D6RbZS LE5ch+mKJrZjIBROwJIEWKscqnHFF0BRo9c4gW/0yTLmZdB8P+uAYuJdtCS/6x3x f1Wi8f5ezYkkrYEpRlzTqwNkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS6HuGa 408eOT/0TrITVKBrZaF/MB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkevyDd+Gl+r/kitBpfH6EvaZr+yBIEYs0ZMMDqkoyCUWYa9UcWRYo tlC20T2m5JRzbbhO4HvTPl+FYo1VWNtDnFs3QWTbeFXvEZ2u/OSaXyLKGxgV4/Eg mqqd+pRBCupOtLzAEl+9MX3hbVK8LSa5ahdUdcmheZUD+asMLcS2WFKHXJ6m9E5/ 5JoHpQPD6otDYOW97+fiEjc2ORwFNT/MTxLapUmaq5pXw5npAgRGO9n89JuSoTus AMcFykpRUbWFXjwBj3eRlo+jjXsFfQHwthsQcqUBdfZgMNbPuYQ0gdDkc2oTKu35 a4M7eQ22Hlrty0vejq7alKXKV9KvivY7 -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:16 2025 by rpki-client