This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: 8//8mHEWx5lARQC30tCooYDYkwSxR3AuaSh8ifc3opY= Subject key identifier: BC:45:F5:36:56:EC:74:89:23:14:E1:C0:B5:34:6A:45:5E:17:E7:0C Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 01A5 Signing time: Tue 23 Dec 2025 02:15:39 +0000 Manifest this update: Tue 23 Dec 2025 02:15:38 +0000 Manifest next update: Tue 30 Dec 2025 02:15:38 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: /tqnkyZG6n4y9mhTvpsZFFeO6hDnzo2Ty9//t6QKiEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Dec 23 02:15:38 2025 GMT Not After : Dec 30 02:15:38 2025 GMT Subject: CN=6949fb4a-9574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:e5:81:e7:aa:43:2e:28:93:d3:22:6b:99: db:a9:20:af:80:26:1b:fe:62:07:b8:66:3a:83:a0: 0e:ce:5e:68:fc:a1:5b:f2:c1:0d:c0:b3:c1:97:dc: 3e:60:c5:8c:9a:43:52:aa:ba:ac:05:77:c1:f3:0f: 04:c0:05:cb:82:76:36:d9:4e:1d:b3:94:af:3f:31: 9c:62:41:cf:51:eb:39:80:bf:58:ed:6d:19:41:6e: 47:ce:0c:db:25:13:35:66:4b:63:61:77:a3:e6:23: de:9e:f1:01:2e:86:5d:64:1e:29:bf:e3:82:7c:b3: 41:17:30:82:5a:1d:36:1d:07:a7:6a:72:ab:a7:07: 32:03:6e:c1:cf:8c:69:74:15:52:1c:f7:f3:ca:a8: 54:f0:25:72:a8:76:d7:2f:4d:e7:a1:03:66:4b:18: be:2c:a3:5e:6a:83:59:65:8a:92:89:5f:71:dd:d5: b5:6e:a3:2d:d5:7e:83:42:17:f0:f2:37:0c:a5:99: 3f:47:ae:a6:5e:07:cc:6d:93:da:a8:8a:c6:0d:7f: d0:11:cb:d5:4b:f4:99:e8:8a:0a:c2:7f:e5:55:d5: 04:90:d8:0d:b7:1b:ce:3d:81:a0:5c:e3:a5:1d:74: 75:0c:1a:54:a2:d1:13:de:20:b9:01:43:90:44:92: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:F5:36:56:EC:74:89:23:14:E1:C0:B5:34:6A:45:5E:17:E7:0C X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:25:9a:f3:60:b3:d7:d7:91:42:05:72:b3:82:d8:13:76:f0: 10:72:8d:79:55:f0:c9:70:0f:8e:49:86:7f:c9:62:61:31:c2: 0f:25:2d:74:ac:7d:66:5c:b7:76:b4:e0:58:fb:18:f5:54:c9: 67:e5:0e:11:7d:56:e5:15:8e:25:8a:f1:80:88:2f:56:75:f1: bd:56:62:bd:09:b1:24:21:9b:e0:7e:76:a1:3d:c6:a5:84:5d: 53:cd:d2:da:4b:16:d2:74:6d:63:00:2e:7e:04:82:78:71:72: 66:a5:f4:4a:69:61:5a:e3:45:7d:32:a7:65:bd:83:ff:a8:dc: dd:09:c2:1f:d6:ad:02:22:fa:c4:a9:91:c8:4a:a1:b0:00:df: 99:80:33:23:ea:a9:6e:02:12:3a:67:a2:21:08:d6:d4:01:4c: 08:ab:c1:7c:51:a5:99:c5:cc:e5:6a:ad:51:cd:73:0c:88:bc: d4:fe:11:4d:2a:3d:51:fd:19:61:b1:27:0c:2b:2a:18:d0:8f: f0:93:2f:f6:34:9d:7a:ff:c4:64:1f:96:52:06:d4:48:e8:00: dc:ba:d1:92:be:01:7d:9d:54:45:ac:71:73:4e:29:cd:df:27: ad:54:af:6b:84:61:33:27:e2:12:24:2b:cc:a8:b1:4c:1c:ca: 2c:57:85:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUxMjIzMDIxNTM4WhcNMjUxMjMwMDIxNTM4WjAYMRYwFAYD VQQDDA02OTQ5ZmI0YS05NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1nlgeeqQy4ok9Mia5nbqSCvgCYb/mIHuGY6g6AOzl5o/KFb8sENwLPBl9w+ YMWMmkNSqrqsBXfB8w8EwAXLgnY22U4ds5SvPzGcYkHPUes5gL9Y7W0ZQW5Hzgzb JRM1ZktjYXej5iPenvEBLoZdZB4pv+OCfLNBFzCCWh02HQenanKrpwcyA27Bz4xp dBVSHPfzyqhU8CVyqHbXL03noQNmSxi+LKNeaoNZZYqSiV9x3dW1bqMt1X6DQhfw 8jcMpZk/R66mXgfMbZPaqIrGDX/QEcvVS/SZ6IoKwn/lVdUEkNgNtxvOPYGgXOOl HXR1DBpUotET3iC5AUOQRJIvLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxF9TZW 7HSJIxThwLU0akVeF+cMMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHJZrzYLPX15FCBXKzgtgTdvAQco15VfDJcA+OSYZ/yWJhMcIPJS10 rH1mXLd2tOBY+xj1VMln5Q4RfVblFY4livGAiC9WdfG9VmK9CbEkIZvgfnahPcal hF1TzdLaSxbSdG1jAC5+BIJ4cXJmpfRKaWFa40V9MqdlvYP/qNzdCcIf1q0CIvrE qZHISqGwAN+ZgDMj6qluAhI6Z6IhCNbUAUwIq8F8UaWZxczlaq1RzXMMiLzU/hFN Kj1R/RlhsScMKyoY0I/wky/2NJ16/8RkH5ZSBtRI6ADcutGSvgF9nVRFrHFzTinN 3yetVK9rhGEzJ+ISJCvMqLFMHMosV4Xz -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:14 2025 by rpki-client