This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: kxCxQp89tvdq8G4Iy9P1LVtEs8qXx+frAap2+s5rKwo= Subject key identifier: C8:96:CB:1E:3A:FB:E8:8B:EC:74:29:29:94:04:6C:11:20:1F:11:08 Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 076F Signing time: Fri 12 Dec 2025 20:58:23 +0000 Manifest this update: Fri 12 Dec 2025 20:58:23 +0000 Manifest next update: Fri 19 Dec 2025 20:58:23 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: YwfJn61IX3aSwC7Xob3anmPFNqixwE4F0RLWG877PVQ=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: ZXePA84JDljtbAEZn3/lxD4z+5C1w39HTFWRfaNSPt4=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: r4yk1oLOO3dNlgYTUiXUyb073QjawtmJqJmMeRzkclU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 20:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: Dec 12 20:58:23 2025 GMT Not After : Dec 19 20:58:23 2025 GMT Subject: CN=693c81ef-9d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:a3:cf:fc:93:f5:03:a4:ab:d2:58:de:ba: af:8c:8a:b1:7d:56:c7:9e:7b:1a:9e:32:39:69:82: 85:58:00:59:be:a9:b4:f3:5c:d8:be:c8:37:38:b6: 1b:e0:51:9f:df:6c:8d:c9:e3:71:a0:5b:69:a7:d1: ff:94:40:40:95:15:27:3a:b3:b2:6f:ce:b6:f3:02: f7:19:77:2b:61:b7:8c:60:28:3c:23:01:23:7a:7a: 1a:79:ea:7f:f5:66:a9:62:1b:b0:b2:e0:0f:08:58: f9:b4:be:39:95:0d:3f:f7:ed:f8:4b:35:4f:7a:b4: b1:68:cc:f4:50:e0:64:aa:fc:b6:b7:5d:93:08:bd: e1:96:8e:46:a5:63:c3:b2:12:e6:8e:86:da:e1:f9: c3:89:b6:a8:67:f4:73:df:f5:83:d6:28:ed:bf:e6: c1:ca:60:87:77:d4:e0:9b:ef:a8:d0:69:03:df:d3: bc:b0:94:13:d9:5f:40:49:2e:7c:de:92:79:3a:75: d5:78:5b:cc:c1:4a:d7:fb:28:9c:4e:a1:e9:1d:83: ad:90:c8:95:cc:87:fb:48:ff:7a:29:46:a3:4c:3a: bb:89:97:05:31:4b:4b:04:3b:e4:4d:c4:43:b2:4e: c3:67:0b:ad:1a:1e:79:44:44:40:02:38:11:02:27: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:96:CB:1E:3A:FB:E8:8B:EC:74:29:29:94:04:6C:11:20:1F:11:08 X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:1a:8a:32:8f:6b:ae:05:78:89:25:b6:d8:76:9a:f0:92:6f: 28:1e:6c:3f:1a:dd:a3:5b:71:68:16:a4:a6:de:3e:ad:c9:80: 61:46:6b:1c:ef:de:a9:27:c3:86:25:fc:b0:24:1a:ba:c7:69: b6:5b:96:b2:44:59:1e:a3:90:aa:bb:ec:82:df:d6:ad:47:1d: c6:49:d7:7c:63:57:6f:47:4a:34:47:2a:0f:24:77:8b:f2:41: b9:b7:83:69:ba:c5:89:f2:59:e6:5c:b7:ae:94:ee:c0:5f:dd: 8e:0f:56:81:ce:10:50:c8:ce:bc:a2:45:63:7a:bd:a0:e4:41: b4:6e:6d:d1:7e:ce:56:f6:f7:2f:49:55:9c:24:d3:ae:bc:ff: 4d:13:a5:37:fd:ae:91:cf:96:4d:bd:cf:3c:6f:23:a9:ff:06: dd:f6:94:a7:91:7c:da:bf:f1:c5:b2:c7:c7:de:d3:22:b1:00: c2:11:a6:dc:d2:2e:23:f1:06:fc:73:9f:0a:08:0b:55:52:40: 32:c9:15:c7:e3:a4:52:60:e0:8c:03:ba:a8:c5:34:3b:8e:eb: df:f7:7f:d7:e5:bb:0c:b8:6e:9d:14:61:50:ca:bd:82:df:a7: 40:a0:96:40:af:35:9d:fd:87:4e:f5:64:db:3f:cf:41:10:5f: 05:d9:c6:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjUxMjEyMjA1ODIzWhcNMjUxMjE5MjA1ODIzWjAYMRYwFAYD VQQDDA02OTNjODFlZi05ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq6jz/yT9QOkq9JY3rqvjIqxfVbHnnsanjI5aYKFWABZvqm081zYvsg3OLYb 4FGf32yNyeNxoFtpp9H/lEBAlRUnOrOyb8628wL3GXcrYbeMYCg8IwEjenoaeep/ 9WapYhuwsuAPCFj5tL45lQ0/9+34SzVPerSxaMz0UOBkqvy2t12TCL3hlo5GpWPD shLmjoba4fnDibaoZ/Rz3/WD1ijtv+bBymCHd9Tgm++o0GkD39O8sJQT2V9ASS58 3pJ5OnXVeFvMwUrX+yicTqHpHYOtkMiVzIf7SP96KUajTDq7iZcFMUtLBDvkTcRD sk7DZwutGh55RERAAjgRAichEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiWyx46 ++iL7HQpKZQEbBEgHxEIMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Gooyj2uuBXiJJbbYdprwkm8oHmw/Gt2jW3FoFqSm3j6tyYBhRmsc 796pJ8OGJfywJBq6x2m2W5ayRFkeo5Cqu+yC39atRx3GSdd8Y1dvR0o0RyoPJHeL 8kG5t4NpusWJ8lnmXLeulO7AX92OD1aBzhBQyM68okVjer2g5EG0bm3Rfs5W9vcv SVWcJNOuvP9NE6U3/a6Rz5ZNvc88byOp/wbd9pSnkXzav/HFssfH3tMisQDCEabc 0i4j8Qb8c58KCAtVUkAyyRXH46RSYOCMA7qoxTQ7juvf93/X5bsMuG6dFGFQyr2C 36dAoJZArzWd/YdO9WTbP89BEF8F2cYz -----END CERTIFICATE-----Generated at Sat Dec 13 15:05:25 2025 by rpki-client