This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: 6C+4W52u9Uw8/jtugj+Kwz2B7itErzE07WNxe7HRoWY= Subject key identifier: 85:28:3B:23:77:0D:B3:56:B6:8A:DF:54:AE:06:5A:31:B2:2C:56:57 Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 34ED Signing time: Mon 22 Dec 2025 14:37:48 +0000 Manifest this update: Mon 22 Dec 2025 14:37:47 +0000 Manifest next update: Mon 29 Dec 2025 14:37:47 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: ImP9GhG/N+sYy2176TkhqPkpJMhy/u2EZSXfSC9QISM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: Dec 22 14:37:47 2025 GMT Not After : Dec 29 14:37:47 2025 GMT Subject: CN=694957bc-4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:f9:e2:dc:49:f7:81:67:17:16:c4:5e:f8: c5:fb:24:8f:fd:a5:95:ca:60:80:fc:70:69:65:24: 18:86:b1:6a:f0:aa:39:7e:90:5d:31:2a:66:56:1c: 73:0f:53:00:d9:94:d2:45:db:38:e1:82:aa:68:2a: 65:ba:de:4c:28:12:0c:74:92:49:da:27:36:39:e8: 36:61:32:94:7a:9d:b5:92:fe:9e:b8:ff:2b:8a:09: 54:32:83:eb:7a:f5:2e:43:6f:a9:71:b0:f4:23:f9: 83:36:5e:17:d9:e8:6a:9e:3a:b7:07:1a:24:08:0f: 0e:45:59:f6:8d:30:e1:ba:e3:fe:67:9d:f0:79:ec: 97:4a:74:52:c4:7b:ad:75:f6:91:45:04:aa:09:3f: 74:a2:5f:4c:48:00:c3:aa:04:22:f7:e8:af:fc:a6: 4f:0c:38:7c:5e:04:8e:44:20:65:3b:54:30:f7:65: 9a:2d:55:db:03:b1:fe:ff:60:48:de:55:19:d6:73: e2:1b:e7:e3:5a:b0:30:28:ba:ca:5e:a1:f1:8f:cb: e2:d4:18:fe:9a:2f:f2:af:51:2d:ae:b4:8a:c8:53: 87:2f:1e:01:ef:18:ed:10:d8:e3:5a:19:03:96:a7: 18:28:22:7e:84:1b:00:67:e3:14:ec:00:34:4b:08: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:3B:23:77:0D:B3:56:B6:8A:DF:54:AE:06:5A:31:B2:2C:56:57 X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:48:94:e6:00:42:26:85:4f:8b:71:e5:53:69:fc:6b:48:8c: 23:78:98:54:5a:a1:b3:f0:2d:71:35:c1:00:65:19:fc:b5:60: 2a:a5:53:d5:61:e2:c8:b7:45:71:47:e8:2d:07:53:3b:20:02: d8:25:9f:e4:4d:65:26:09:a1:17:24:0a:21:08:86:8d:9b:5a: 85:39:05:f6:58:62:d0:9e:f6:f6:e9:63:74:55:85:45:2b:5f: ac:30:bf:9e:cd:db:2f:e5:f8:50:0c:d5:15:fc:1a:63:3d:52: 69:d2:6a:00:62:c6:cc:df:86:f3:43:81:3d:eb:b4:33:69:82: f9:da:3e:e1:52:b3:21:11:9b:1c:81:64:01:fc:3c:4a:87:b5: 51:62:03:f1:24:95:1c:eb:98:2c:e8:34:4f:4d:7d:af:7f:dc: e0:a1:c0:46:ab:48:39:25:38:52:2d:8a:15:d8:f2:a5:77:30: 7d:93:3a:61:cb:3a:5e:9b:a0:ff:ad:00:44:0a:87:c1:db:c8: ff:b8:ec:62:a9:09:ec:be:64:d3:40:ab:c2:4c:be:78:a3:b1: 8d:17:26:8e:2e:5e:8e:64:5c:81:25:e9:4a:2b:61:f9:02:d6: d6:bb:8f:7e:2d:6b:94:8b:d6:a4:52:d3:95:f1:61:94:fd:37: 83:b4:44:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjUxMjIyMTQzNzQ3WhcNMjUxMjI5MTQzNzQ3WjAYMRYwFAYD VQQDDA02OTQ5NTdiYy00NDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxj54txJ94FnFxbEXvjF+ySP/aWVymCA/HBpZSQYhrFq8Ko5fpBdMSpmVhxz D1MA2ZTSRds44YKqaCplut5MKBIMdJJJ2ic2Oeg2YTKUep21kv6euP8riglUMoPr evUuQ2+pcbD0I/mDNl4X2ehqnjq3BxokCA8ORVn2jTDhuuP+Z53weeyXSnRSxHut dfaRRQSqCT90ol9MSADDqgQi9+iv/KZPDDh8XgSORCBlO1Qw92WaLVXbA7H+/2BI 3lUZ1nPiG+fjWrAwKLrKXqHxj8vi1Bj+mi/yr1EtrrSKyFOHLx4B7xjtENjjWhkD lqcYKCJ+hBsAZ+MU7AA0SwiPgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUoOyN3 DbNWtorfVK4GWjGyLFZXMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJSJTmAEImhU+LceVTafxrSIwjeJhUWqGz8C1xNcEAZRn8tWAqpVPV YeLIt0VxR+gtB1M7IALYJZ/kTWUmCaEXJAohCIaNm1qFOQX2WGLQnvb26WN0VYVF K1+sML+ezdsv5fhQDNUV/BpjPVJp0moAYsbM34bzQ4E967QzaYL52j7hUrMhEZsc gWQB/DxKh7VRYgPxJJUc65gs6DRPTX2vf9zgocBGq0g5JThSLYoV2PKldzB9kzph yzpem6D/rQBECofB28j/uOxiqQnsvmTTQKvCTL54o7GNFyaOLl6OZFyBJelKK2H5 AtbWu49+LWuUi9akUtOV8WGU/TeDtES1 -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:57 2025 by rpki-client