This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: nkI3vFGMGlBXyXeCv5hrKed4wjNOX1hu6dlr/Mw/oh4= Subject key identifier: B0:91:A1:F4:78:DA:AF:5F:75:D1:54:3D:D3:05:43:35:EB:6C:C2:A7 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 09AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 098C Signing time: Mon 22 Dec 2025 19:28:30 +0000 Manifest this update: Mon 22 Dec 2025 19:28:29 +0000 Manifest next update: Mon 29 Dec 2025 19:28:29 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: RoBhv/e/3CIe9D2BbKZ3h3lDmnodX802YxI6oU3r0do=) 2: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: jIPkDEf13TMiFg2C0rBtFKVkCQXwsHcdNzopb74LLvA=) 3: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: uH7ttnhZsZog6yCfdvOftohsxkCDqtwT+V+qQFjoPac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Dec 22 19:28:29 2025 GMT Not After : Dec 29 19:28:29 2025 GMT Subject: CN=69499bde-0a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:d1:44:ce:2f:18:64:9a:fb:39:0e:2b:2f: d5:3f:8f:82:16:65:f9:19:18:5e:53:e5:9a:f5:1c: 89:ed:ae:64:01:47:23:e9:40:e3:39:2e:b9:c1:00: 49:eb:b3:82:3c:65:d8:cf:3d:11:d1:f8:85:b6:55: b3:93:16:a7:5b:4c:b2:9b:8f:b5:9d:46:67:dc:20: 7b:6f:6f:37:4f:a9:63:cf:0d:1d:ca:7d:2b:d2:ce: 48:62:f7:2e:5b:07:d8:ea:ab:7f:57:76:7a:2b:32: d1:39:a4:19:04:d7:ee:ad:33:0f:97:29:d5:d7:05: 92:64:bd:c8:44:b5:a6:6f:34:70:e0:24:84:e1:9b: 75:95:8c:f1:5f:d8:39:0b:6b:93:5b:39:81:fc:a4: 77:4a:8f:d3:c4:58:77:8d:cf:b6:a1:e5:75:9d:20: 78:ae:67:b3:5a:f9:a9:1e:c6:83:f8:e4:5e:85:19: 79:66:f3:c7:03:4b:76:62:e6:59:e3:4f:cd:3c:df: 47:7f:79:8d:8c:44:12:93:41:40:74:32:9d:38:63: 9e:51:c7:f2:f2:42:9a:c4:43:89:47:5e:6a:24:00: d8:ca:05:36:ca:a5:14:33:c0:cf:60:74:41:b9:dc: 19:dc:a5:2c:ad:67:b9:94:23:84:3a:8c:d4:2a:52: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:A1:F4:78:DA:AF:5F:75:D1:54:3D:D3:05:43:35:EB:6C:C2:A7 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:33:92:62:40:b2:32:09:fa:51:88:91:22:12:d0:a0:87:96: 85:71:f7:68:67:33:e8:f5:b2:ea:0b:92:32:fc:f2:d8:4b:3a: 6f:19:1f:c4:28:2d:ef:bc:5e:97:ff:12:86:11:54:f0:9c:2f: bf:ec:a6:7c:c2:10:e2:96:43:c6:7b:4c:8e:6d:8c:8c:38:96: 4e:01:e3:69:ed:16:15:f8:da:6b:b6:86:d9:48:07:82:78:68: ef:11:04:e0:fc:c4:3b:d8:a6:2c:4e:2a:95:f9:2a:f0:45:a7: ff:74:ac:f7:94:42:6d:26:12:1b:43:f5:8d:a7:76:2e:8a:86: 20:62:f0:92:5f:3f:f3:1b:66:69:2d:41:64:95:35:15:65:d2: ba:94:ba:d7:e7:a1:0c:0d:9f:ea:e5:84:8f:2f:c6:f5:32:9c: 85:3e:ec:30:5a:1b:93:eb:93:71:95:4f:1b:fc:5b:a8:c0:23: 9e:3a:af:bf:86:b3:3f:27:08:65:81:9a:ce:3f:40:3f:0d:ab: 2b:8f:12:2b:4c:b9:2e:81:8b:51:78:58:35:6e:43:6c:40:75: e9:d5:af:32:3f:9e:12:e4:d8:62:59:e1:88:30:53:5f:2b:10: f4:4f:20:af:c9:5f:84:55:39:bd:c5:42:de:04:50:16:9b:26: 83:19:08:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjUxMjIyMTkyODI5WhcNMjUxMjI5MTkyODI5WjAYMRYwFAYD VQQDDA02OTQ5OWJkZS0wYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr77RRM4vGGSa+zkOKy/VP4+CFmX5GRheU+Wa9RyJ7a5kAUcj6UDjOS65wQBJ 67OCPGXYzz0R0fiFtlWzkxanW0yym4+1nUZn3CB7b283T6ljzw0dyn0r0s5IYvcu WwfY6qt/V3Z6KzLROaQZBNfurTMPlynV1wWSZL3IRLWmbzRw4CSE4Zt1lYzxX9g5 C2uTWzmB/KR3So/TxFh3jc+2oeV1nSB4rmezWvmpHsaD+ORehRl5ZvPHA0t2YuZZ 40/NPN9Hf3mNjEQSk0FAdDKdOGOeUcfy8kKaxEOJR15qJADYygU2yqUUM8DPYHRB udwZ3KUsrWe5lCOEOozUKlLLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCRofR4 2q9fddFUPdMFQzXrbMKnMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKM5JiQLIyCfpRiJEiEtCgh5aFcfdoZzPo9bLqC5Iy/PLYSzpvGR/E KC3vvF6X/xKGEVTwnC+/7KZ8whDilkPGe0yObYyMOJZOAeNp7RYV+NprtobZSAeC eGjvEQTg/MQ72KYsTiqV+SrwRaf/dKz3lEJtJhIbQ/WNp3YuioYgYvCSXz/zG2Zp LUFklTUVZdK6lLrX56EMDZ/q5YSPL8b1MpyFPuwwWhuT65NxlU8b/FuowCOeOq+/ hrM/JwhlgZrOP0A/DasrjxIrTLkugYtReFg1bkNsQHXp1a8yP54S5NhiWeGIMFNf KxD0TyCvyV+EVTm9xULeBFAWmyaDGQin -----END CERTIFICATE-----Generated at Wed Dec 24 09:16:52 2025 by rpki-client