This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft File: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json) Hash identifier: M7Hr6H6hjiCD5vTbxJIaXr5Ae+CNh0AVZmTOL1LbGag= Subject key identifier: A2:0E:36:5E:8A:91:6B:35:10:4B:D3:A9:4E:E3:04:70:E5:F7:B0:33 Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 Certificate issuer: /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft Manifest number: 08F1 Signing time: Mon 22 Dec 2025 19:43:49 +0000 Manifest this update: Mon 22 Dec 2025 19:43:49 +0000 Manifest next update: Mon 29 Dec 2025 19:43:49 +0000 Files and hashes: 1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: NJOdK5Z8gsfEZ9WbEPwm30jfQWGn1dbHZBvB1zNBAVI=) 2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: AenHLZ8tFLrfLlf8LlZoDLQVepIJzcT6WIJ3CgJXjkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Validity Not Before: Dec 22 19:43:49 2025 GMT Not After : Dec 29 19:43:49 2025 GMT Subject: CN=69499f75-de6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:02:93:f1:1a:6f:fb:f9:49:e2:4f:d5:0e: a0:82:5c:83:42:cf:83:19:13:82:25:e4:6b:e3:fc: 08:16:b9:93:d0:63:c9:7c:a9:de:c5:84:d8:34:bf: d8:78:6b:77:d7:b8:c9:48:0a:4f:89:23:65:6e:38: 3b:d5:b4:e4:a0:f9:ae:46:88:e4:ce:a0:42:b6:bd: 57:b0:14:fe:29:49:4f:2b:44:b0:2b:14:e3:6e:f3: 6f:74:44:6e:bc:76:d5:4f:38:49:a0:42:d2:6b:c2: 7d:e3:8b:2f:8f:37:fd:4d:4e:66:78:20:38:07:61: bc:a8:4b:57:07:f8:4b:3c:94:66:2e:b6:44:7a:2c: ed:81:7d:91:1f:33:d4:40:0d:d8:c5:ec:7c:8e:39: 27:85:8d:40:e6:95:1b:e6:f9:76:6a:21:86:b4:ea: 23:98:3a:65:84:be:29:79:a7:9c:8f:f3:0a:07:3f: dc:3c:8a:a4:c2:6d:09:05:57:e9:bd:0f:cc:6c:69: a5:3d:b8:51:fd:18:76:bb:c1:37:92:73:37:5d:d7: 3e:56:a6:48:72:85:af:d8:5d:29:1f:c8:b4:d8:82: 7d:d2:bd:46:db:97:4b:b0:90:b0:fb:b3:72:9a:13: d1:27:3a:bb:63:00:b5:00:12:07:b0:78:1a:aa:d7: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0E:36:5E:8A:91:6B:35:10:4B:D3:A9:4E:E3:04:70:E5:F7:B0:33 X509v3 Authority Key Identifier: keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3d:fc:7b:fa:e3:6a:dc:e7:24:c5:6d:bb:2d:91:50:a2:82: a5:58:1a:f8:23:c7:d2:8e:36:ae:4f:19:54:cf:18:2a:91:ca: e2:0b:b8:58:ab:29:56:90:bd:8c:3a:2d:27:04:4d:fa:05:2f: ad:8d:9c:00:cc:fd:81:98:f0:e7:a2:91:cb:59:1d:ef:fd:70: 5a:4d:27:17:7b:b5:df:79:50:8f:04:f9:e8:83:f7:5b:77:51: 77:cb:08:2b:c0:fe:0b:aa:fc:0f:b5:c1:e2:10:bc:b4:18:5e: ae:b1:4e:83:32:62:be:56:f2:7e:57:41:ee:33:4a:74:d8:e1: ab:35:28:ca:fa:d7:e1:09:ef:2f:7d:bb:dc:41:4f:d7:d8:f9: 25:56:26:69:16:21:d4:78:f5:0a:98:a0:fa:f0:e5:c6:16:76: 5b:39:cd:7e:eb:2e:f6:14:08:b4:79:1b:02:39:4d:59:e2:a1: 85:e8:ff:15:01:78:91:f5:a2:4f:e5:36:7b:10:6b:ee:5b:c7: d1:7b:b7:c4:96:f7:fe:62:28:00:cf:88:98:36:d2:fc:9c:4e: db:57:83:f9:12:1f:6d:d7:e7:7d:27:c0:70:8e:ac:0e:14:36: a4:ee:c4:82:dd:d2:91:42:d8:9e:96:de:91:83:29:dd:ca:3e: 79:83:19:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExM0YxMTAvBgNVBAUTKEFCMTYyN0I3QTg1MTQzOTJFMUM2NzhCN0IwNzg4NTVB NDQ1NTY2RTQwHhcNMjUxMjIyMTk0MzQ5WhcNMjUxMjI5MTk0MzQ5WjAYMRYwFAYD VQQDDA02OTQ5OWY3NS1kZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriECk/Eab/v5SeJP1Q6gglyDQs+DGROCJeRr4/wIFrmT0GPJfKnexYTYNL/Y eGt317jJSApPiSNlbjg71bTkoPmuRojkzqBCtr1XsBT+KUlPK0SwKxTjbvNvdERu vHbVTzhJoELSa8J944svjzf9TU5meCA4B2G8qEtXB/hLPJRmLrZEeiztgX2RHzPU QA3Yxex8jjknhY1A5pUb5vl2aiGGtOojmDplhL4peaecj/MKBz/cPIqkwm0JBVfp vQ/MbGmlPbhR/Rh2u8E3knM3Xdc+VqZIcoWv2F0pH8i02IJ90r1G25dLsJCw+7Ny mhPRJzq7YwC1ABIHsHgaqtc0KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIONl6K kWs1EEvTqU7jBHDl97AzMB8GA1UdIwQYMBaAFKsWJ7eoUUOS4cZ4t7B4hVpEVWbk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzRi9BNjcyRTNCNkJG NkUxMUVBQjY1NkJGMkZDNEY5QUUwMi9xeFludDZoUlE1TGh4bmkzc0hpRldrUlZa dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4WW50NmhSUTVMaHhuaTNzSGlGV2tSVlp1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTEzRi9BNjcyRTNCNkJGNkUxMUVBQjY1NkJGMkZDNEY5QUUwMi9xeFludDZoUlE1 TGh4bmkzc0hpRldrUlZadVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Pfx7+uNq3OckxW27LZFQooKlWBr4I8fSjjauTxlUzxgqkcriC7hY qylWkL2MOi0nBE36BS+tjZwAzP2BmPDnopHLWR3v/XBaTScXe7XfeVCPBPnog/db d1F3ywgrwP4LqvwPtcHiELy0GF6usU6DMmK+VvJ+V0HuM0p02OGrNSjK+tfhCe8v fbvcQU/X2PklViZpFiHUePUKmKD68OXGFnZbOc1+6y72FAi0eRsCOU1Z4qGF6P8V AXiR9aJP5TZ7EGvuW8fRe7fElvf+YigAz4iYNtL8nE7bV4P5Eh9t1+d9J8BwjqwO FDak7sSC3dKRQtielt6Rgyndyj55gxmt -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:34 2025 by rpki-client