This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: YlG2Wpcg1JBft2A+W8aZayzjXEhtZPTNUIeLkqLTokE= Subject key identifier: CB:50:33:35:8B:CB:F8:62:8A:A8:41:2D:E1:DA:EC:E5:3D:B6:BC:48 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 0988 Signing time: Sun 14 Dec 2025 19:32:57 +0000 Manifest this update: Sun 14 Dec 2025 19:32:56 +0000 Manifest next update: Sun 21 Dec 2025 19:32:56 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: GyB95V1uHiVaYxzFUwRhlIYW6IYr9RK2Uj6vrRN60N0=) 2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: uH7ttnhZsZog6yCfdvOftohsxkCDqtwT+V+qQFjoPac=) 3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: jIPkDEf13TMiFg2C0rBtFKVkCQXwsHcdNzopb74LLvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Dec 14 19:32:56 2025 GMT Not After : Dec 21 19:32:56 2025 GMT Subject: CN=693f10e8-42e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:65:81:26:86:a3:ff:32:9b:47:2c:ce:a0: fd:57:3e:51:23:0f:e0:27:75:8a:5f:b8:7e:e6:d2: 18:e7:13:ae:0a:cf:6f:06:2e:4c:d7:98:43:2c:a8: bd:1c:b1:2b:5f:f5:81:fb:0c:e7:95:b9:1f:77:86: 1f:10:78:af:0a:2c:64:c3:51:bc:99:db:ec:3f:0d: 22:b7:2c:cd:63:39:84:c3:75:c2:58:c9:22:21:30: 13:0c:18:23:89:f2:94:46:61:75:0b:d5:10:de:50: 5a:8e:b5:40:a6:96:57:87:fe:9f:a6:f9:bb:5c:f6: 1f:55:f2:a1:51:54:2d:f3:58:c0:23:bb:21:be:96: de:ad:26:72:54:4b:0e:40:08:b3:de:dc:6a:73:a7: 43:0f:b5:ae:ac:66:68:6f:6a:a2:0d:0c:5d:df:9e: c3:a6:67:32:97:92:88:dc:55:0f:f6:6e:79:ab:ad: 32:08:64:62:e9:22:a8:a9:1a:b8:91:e2:8f:cf:26: d3:d0:cd:13:6c:09:ba:e9:fb:73:e3:e1:16:cf:dc: 9e:6b:90:36:1f:ee:54:a8:81:19:b3:d4:25:6c:af: 1a:c1:03:0c:e2:3d:62:d7:0c:ac:b5:a0:75:c9:93: 25:a4:48:83:93:e1:f7:bf:95:18:d0:07:98:fa:61: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:50:33:35:8B:CB:F8:62:8A:A8:41:2D:E1:DA:EC:E5:3D:B6:BC:48 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1f:fb:53:00:e8:b4:0e:99:04:09:ed:a0:72:39:07:09:94: d8:aa:af:4a:b7:0e:32:bb:fb:b8:d2:06:68:89:0b:3a:aa:13: d9:1b:90:f8:4e:d1:b0:85:fb:4a:6e:47:4d:0b:ff:32:a1:94: cb:e8:7f:81:bf:ac:8f:2f:be:db:78:67:0a:25:5c:74:6e:25: c6:2c:c5:81:87:f8:40:59:77:9c:dd:57:b2:2a:3d:56:ab:56: fb:c2:ab:76:98:30:8c:45:cb:5f:25:c3:1e:10:d1:c2:fc:93: 27:f2:0b:4f:26:1d:1a:f6:25:02:d0:81:8c:04:46:fe:90:30: 85:6d:c9:09:34:a1:24:8a:1a:78:c0:64:aa:62:34:c2:80:47: 97:88:3b:44:20:21:5f:aa:d2:db:6f:71:b2:09:27:a1:07:8e: ea:33:e6:b9:b6:fb:4e:8a:eb:1e:91:17:7d:e5:9a:b5:f2:94: 67:2c:26:86:ff:d5:c4:32:cc:b0:61:81:7d:98:04:43:ec:4a: de:e0:48:b7:d7:bb:e7:13:ae:37:dd:1e:4d:3e:85:5f:8d:d7: 18:9c:9f:f5:39:01:30:c5:af:32:f6:ab:12:55:56:4f:b1:e2: cf:7c:30:ec:cf:5f:4a:0d:43:65:99:1c:ca:63:64:8d:59:cc: 73:be:9b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjUxMjE0MTkzMjU2WhcNMjUxMjIxMTkzMjU2WjAYMRYwFAYD VQQDDA02OTNmMTBlOC00MmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnodlgSaGo/8ym0cszqD9Vz5RIw/gJ3WKX7h+5tIY5xOuCs9vBi5M15hDLKi9 HLErX/WB+wznlbkfd4YfEHivCixkw1G8mdvsPw0ityzNYzmEw3XCWMkiITATDBgj ifKURmF1C9UQ3lBajrVAppZXh/6fpvm7XPYfVfKhUVQt81jAI7shvpberSZyVEsO QAiz3txqc6dDD7WurGZob2qiDQxd357Dpmcyl5KI3FUP9m55q60yCGRi6SKoqRq4 keKPzybT0M0TbAm66ftz4+EWz9yea5A2H+5UqIEZs9QlbK8awQMM4j1i1wystaB1 yZMlpEiDk+H3v5UY0AeY+mGCRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtQMzWL y/hiiqhBLeHa7OU9trxIMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMH/tTAOi0DpkECe2gcjkHCZTYqq9Ktw4yu/u40gZoiQs6qhPZG5D4 TtGwhftKbkdNC/8yoZTL6H+Bv6yPL77beGcKJVx0biXGLMWBh/hAWXec3VeyKj1W q1b7wqt2mDCMRctfJcMeENHC/JMn8gtPJh0a9iUC0IGMBEb+kDCFbckJNKEkihp4 wGSqYjTCgEeXiDtEICFfqtLbb3GyCSehB47qM+a5tvtOiusekRd95Zq18pRnLCaG /9XEMsywYYF9mARD7Ere4Ei317vnE6433R5NPoVfjdcYnJ/1OQEwxa8y9qsSVVZP seLPfDDsz19KDUNlmRzKY2SNWcxzvpvI -----END CERTIFICATE-----Generated at Tue Dec 16 10:42:58 2025 by rpki-client