This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: WaO+ao79e7uJ5rH/mfX/x3IzPs31vh935mQivKbli0A= Subject key identifier: E0:0A:54:46:AC:FF:ED:BA:A1:E0:6D:A4:2B:B0:61:48:18:41:17:B1 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 0786 Signing time: Sat 06 Dec 2025 18:41:06 +0000 Manifest this update: Sat 06 Dec 2025 18:41:05 +0000 Manifest next update: Sat 13 Dec 2025 18:41:05 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: wpr99MvHrqzni9ej1TCAYMewIy7DPJgIhm9lAsikEfg=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Dec 6 18:41:05 2025 GMT Not After : Dec 13 18:41:05 2025 GMT Subject: CN=693478c2-1d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:63:48:2d:e3:9c:e4:e7:94:0e:3e:fb:01: b1:27:4b:ed:f6:4a:78:3e:42:f3:81:5f:da:13:af: d6:03:f0:07:83:c5:7e:8f:86:7f:a2:c3:89:82:eb: a8:b7:f6:60:19:88:1d:5f:2e:19:68:57:11:8b:8d: 10:19:7b:fc:41:da:44:81:39:60:dd:54:62:de:2b: f2:c7:03:8e:1b:27:ce:09:47:d4:81:a9:13:29:18: b4:3b:da:ee:41:2d:15:66:5e:81:61:e3:d1:29:56: bb:a2:09:a3:ed:4d:bb:63:e4:c2:f4:ef:c3:60:85: 31:d8:df:1d:59:df:81:f3:ba:c1:7c:dd:da:62:bf: 41:3a:0c:26:a4:64:d5:83:d3:56:00:74:77:ca:db: 79:a2:bc:54:02:23:e6:81:4d:24:87:f3:1c:a6:bb: d4:07:d1:2a:75:68:03:6e:b6:a2:e8:29:36:1b:a5: 3e:f9:5b:bf:45:ca:3d:64:4c:6e:75:73:46:01:3f: 81:5c:2f:9a:89:dd:6d:d6:5e:1c:bc:e9:e4:4c:85: e7:26:2d:b0:38:07:74:a6:55:17:d5:62:1e:fd:e3: 0b:17:6f:7c:9f:71:eb:ae:bd:6e:75:a0:e3:1a:39: ab:eb:ad:4d:1b:06:ab:4b:21:02:16:6a:84:86:9e: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0A:54:46:AC:FF:ED:BA:A1:E0:6D:A4:2B:B0:61:48:18:41:17:B1 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:69:87:e6:15:9f:bf:f6:b9:4e:7b:3c:fd:da:2d:5c:e8:0a: e0:cf:26:1c:a5:3a:27:bd:d0:bb:7d:a1:24:8a:42:f9:94:c4: f6:87:b8:39:e5:f8:c4:38:53:eb:0b:03:28:af:04:d4:41:7b: 43:8d:76:0d:65:7b:11:1f:d9:93:68:7b:af:be:8a:8d:bf:e5: 1d:a6:49:3a:d4:a0:6f:1a:e2:6a:df:5a:f6:e9:09:d6:8e:20: 08:55:88:82:24:8c:4f:20:4d:6e:b2:a7:4b:e4:80:9d:09:ff: 98:34:2a:71:6d:6b:2d:21:6b:ba:94:bd:e7:92:e2:07:32:53: b5:e5:cb:a3:e8:65:0b:e7:bf:96:44:9b:c8:21:41:7d:ed:93: b1:39:73:c5:57:c2:e8:50:df:6d:7d:9e:35:a3:e6:b8:e6:19: 65:c7:5c:f0:94:aa:93:5c:f3:49:ea:9a:f6:7c:7c:4b:49:3c: 04:6e:92:9e:4c:35:28:ad:a3:cd:4a:bf:e0:80:89:01:75:6e: 98:8e:b4:c4:4d:62:f1:a5:a6:07:2b:7f:61:85:2a:1f:6d:ec: 55:b1:a8:be:09:41:c3:e5:ac:17:24:73:77:6a:32:c6:1d:c4: 86:95:61:9a:d8:69:de:e2:bf:e2:a0:46:8d:0e:66:a3:ea:45: 0b:c7:ff:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUxMjA2MTg0MTA1WhcNMjUxMjEzMTg0MTA1WjAYMRYwFAYD VQQDEw02OTM0NzhjMi0xZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApA9jSC3jnOTnlA4++wGxJ0vt9kp4PkLzgV/aE6/WA/AHg8V+j4Z/osOJguuo t/ZgGYgdXy4ZaFcRi40QGXv8QdpEgTlg3VRi3ivyxwOOGyfOCUfUgakTKRi0O9ru QS0VZl6BYePRKVa7ogmj7U27Y+TC9O/DYIUx2N8dWd+B87rBfN3aYr9BOgwmpGTV g9NWAHR3ytt5orxUAiPmgU0kh/McprvUB9EqdWgDbrai6Ck2G6U++Vu/Rco9ZExu dXNGAT+BXC+aid1t1l4cvOnkTIXnJi2wOAd0plUX1WIe/eMLF298n3Hrrr1udaDj Gjmr661NGwarSyECFmqEhp6zNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAKVEas /+26oeBtpCuwYUgYQRexMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtaYfmFZ+/9rlOezz92i1c6ArgzyYcpTonvdC7faEkikL5lMT2h7g5 5fjEOFPrCwMorwTUQXtDjXYNZXsRH9mTaHuvvoqNv+Udpkk61KBvGuJq31r26QnW jiAIVYiCJIxPIE1usqdL5ICdCf+YNCpxbWstIWu6lL3nkuIHMlO15cuj6GUL57+W RJvIIUF97ZOxOXPFV8LoUN9tfZ41o+a45hllx1zwlKqTXPNJ6pr2fHxLSTwEbpKe TDUoraPNSr/ggIkBdW6YjrTETWLxpaYHK39hhSofbexVsai+CUHD5awXJHN3ajLG HcSGlWGa2Gne4r/ioEaNDmaj6kULx/89 -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:01 2025 by rpki-client