This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: 3XBeoLH9x9+bjN55uUO0ugn4J5rP+5MQi6ZwmvBeMtw= Subject key identifier: E1:F0:E0:FD:82:AE:0C:9D:15:15:CD:0C:DD:6D:95:73:5A:83:FA:FB Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 28 Signing time: Wed 03 Dec 2025 05:50:56 +0000 Manifest this update: Wed 03 Dec 2025 05:50:55 +0000 Manifest next update: Wed 10 Dec 2025 05:50:55 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: 0dxmuC1C1b7y9CIYC5+2SbZ4jmQo6zfXHQcSCSIPffc=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Dec 3 05:50:55 2025 GMT Not After : Dec 10 05:50:55 2025 GMT Subject: CN=692fcfc0-9c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:60:e6:af:db:08:5c:17:07:ef:6f:ac:4e: e4:dd:4c:ae:62:1b:e3:7b:60:88:4f:c6:1f:96:8e: 7e:b4:8a:8e:4c:27:f4:58:0f:c0:51:b0:09:67:53: a8:7b:e4:f5:8e:72:ba:6d:2b:7a:d4:0f:ef:88:5f: d4:ff:31:20:f3:79:38:68:98:98:30:9c:16:6a:d6: 0b:55:51:e0:8d:d3:75:21:5f:a4:19:b9:df:f2:f4: c1:f4:5d:24:51:d4:90:cc:c4:0f:f6:0e:85:a2:95: 7c:cd:d8:4a:ee:8c:db:e2:e2:12:4e:79:b0:e5:72: ea:0f:db:ed:f4:76:d9:35:b4:5b:29:f8:dc:cf:e9: 34:ea:7b:a0:f9:75:ab:31:d3:66:af:ad:98:89:7d: aa:f6:57:06:e9:db:88:ed:29:b0:2f:2a:cf:be:27: 6f:f0:3e:fe:cc:91:33:54:3b:58:8d:cd:04:c1:77: 44:13:86:4e:78:6b:4c:50:61:d3:54:58:b5:a1:a6: 67:88:c8:23:66:f6:2f:1c:78:a9:f0:5a:bd:08:f3: c5:d7:20:9c:a9:8c:7c:e6:9d:ee:26:2a:fc:f0:8a: 7a:37:f5:1d:93:82:e0:5d:85:8d:9c:7a:06:9f:8f: a1:22:76:80:a6:8b:b6:b2:ba:7d:9c:2f:39:1c:4d: 5e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:E0:FD:82:AE:0C:9D:15:15:CD:0C:DD:6D:95:73:5A:83:FA:FB X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ff:cf:4b:7a:0d:ee:e9:7d:85:18:31:2d:98:1c:2e:61:45: 85:ee:f9:7c:d0:d8:50:ab:06:13:9a:2f:ee:93:35:f3:b0:f5: 72:53:44:b5:cb:53:a9:48:29:e6:87:2f:bd:e4:69:95:72:1e: c5:bb:40:66:1a:bf:f9:80:b4:88:00:c9:74:e8:0b:ef:e3:77: ff:ce:6e:bf:97:3b:1e:5b:23:dd:88:08:1b:4d:81:3d:48:ae: 35:3e:6e:05:91:d7:a8:5f:69:d9:4a:f9:43:b1:4c:61:de:40: b8:cd:49:89:c8:cf:2c:fc:10:0f:f5:ff:9f:08:57:1f:0e:b1: 1b:a7:89:36:72:33:48:05:d3:47:b7:d0:14:64:4c:e6:8a:c6: c8:1a:d8:30:e9:b3:8f:b8:50:f9:f6:cf:9f:47:b8:b2:ea:4b: 65:7e:8a:83:d9:c6:3f:61:75:54:52:a7:a4:4f:df:5d:60:44: 65:f2:56:88:d3:94:b9:90:12:6c:44:77:2a:f2:34:ab:2e:87: 08:4c:94:46:70:6f:a4:6d:d8:94:9f:38:52:aa:9d:fa:a8:7d: cb:b0:58:f0:48:c5:c4:be:a2:db:23:67:2c:be:b3:ae:bb:af: 01:54:e4:11:19:58:11:e2:70:41:a6:7e:c1:87:e9:39:f2:d4: 08:0c:22:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNTEyMDMwNTUwNTVaFw0yNTEyMTAwNTUwNTVaMBgxFjAUBgNV BAMTDTY5MmZjZmMwLTljNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCLmDmr9sIXBcH72+sTuTdTK5iG+N7YIhPxh+Wjn60io5MJ/RYD8BRsAlnU6h7 5PWOcrptK3rUD++IX9T/MSDzeThomJgwnBZq1gtVUeCN03UhX6QZud/y9MH0XSRR 1JDMxA/2DoWilXzN2ErujNvi4hJOebDlcuoP2+30dtk1tFsp+NzP6TTqe6D5dasx 02avrZiJfar2Vwbp24jtKbAvKs++J2/wPv7MkTNUO1iNzQTBd0QThk54a0xQYdNU WLWhpmeIyCNm9i8ceKnwWr0I88XXIJypjHzmne4mKvzwino39R2TguBdhY2cegaf j6EidoCmi7ayun2cLzkcTV6LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4fDg/YKu DJ0VFc0M3W2Vc1qD+vswHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABD/z0t6De7pfYUYMS2YHC5hRYXu+XzQ2FCrBhOaL+6TNfOw9XJTRLXL U6lIKeaHL73kaZVyHsW7QGYav/mAtIgAyXToC+/jd//Obr+XOx5bI92ICBtNgT1I rjU+bgWR16hfadlK+UOxTGHeQLjNSYnIzyz8EA/1/58IVx8OsRuniTZyM0gF00e3 0BRkTOaKxsga2DDps4+4UPn2z59HuLLqS2V+ioPZxj9hdVRSp6RP311gRGXyVojT lLmQEmxEdyryNKsuhwhMlEZwb6Rt2JSfOFKqnfqofcuwWPBIxcS+otsjZyy+s667 rwFU5BEZWBHicEGmfsGH6Tny1AgMIjQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:45 2025 by rpki-client