This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: Vl+szvM6loaWaPUeZkfuY5FbrbGlaeA6aC3MeffNclA= Subject key identifier: 21:E2:22:98:8E:60:1F:25:A7:11:FC:26:AC:2D:95:8C:19:AD:9B:AE Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 021A Signing time: Tue 09 Dec 2025 00:31:54 +0000 Manifest this update: Tue 09 Dec 2025 00:31:54 +0000 Manifest next update: Tue 16 Dec 2025 00:31:54 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: vtQOrkKX6OP9Q80ipkuaDVefHZaJ6zxIW/7n+jdbbJ8=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Dec 9 00:31:54 2025 GMT Not After : Dec 16 00:31:54 2025 GMT Subject: CN=69376dfa-0f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:73:27:2a:9b:cc:e5:12:25:d9:c0:36:b0: 8b:fa:98:ed:4d:ed:ec:6d:4f:59:e0:31:38:fc:04: a5:43:b3:24:87:ea:31:a0:c3:99:a2:d7:2c:50:01: c3:da:43:ab:38:ca:69:f7:69:db:45:9c:04:ff:80: 85:d6:e4:e7:1f:f2:77:34:3e:cb:c3:18:bb:d2:a5: 2c:d5:28:b8:37:c3:0b:3f:87:28:66:fe:f6:43:3c: 84:7e:6c:87:bf:3e:91:d5:ab:a6:4b:70:02:f4:ff: b0:13:e4:3e:62:fb:5b:4d:85:c9:f4:7e:4e:48:b4: ae:70:b0:69:68:ba:0e:78:a8:5b:30:8c:7d:83:99: 47:c1:09:df:59:f1:4b:cb:3b:75:a6:c2:a7:97:ec: 52:52:d2:50:e8:e9:64:8f:10:97:ed:8e:60:5d:ef: 1a:69:15:d9:ad:96:8d:49:fb:25:88:ac:c7:e3:af: 2f:1f:f6:65:df:d8:a3:47:7b:2c:03:2d:46:43:43: 67:58:24:9b:5e:80:6a:74:c6:30:bb:ec:ae:46:6e: 7f:6a:12:5d:7f:9a:2b:3b:15:e8:52:e9:06:b9:bf: 6c:23:ad:bb:4e:7b:5e:95:c3:aa:a2:24:e8:ce:f3: 57:be:d9:72:e6:cd:8f:53:05:d3:fe:cf:3a:2e:ef: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:22:98:8E:60:1F:25:A7:11:FC:26:AC:2D:95:8C:19:AD:9B:AE X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:37:43:11:62:26:ef:e8:bd:f5:87:7d:64:eb:e4:ac:da:ee: 65:0a:6d:c7:12:b9:71:7c:9e:d7:0a:53:d7:d8:e1:27:41:93: 65:fa:90:4f:49:d7:45:73:ee:f6:ba:45:9f:35:7e:16:24:05: e7:a1:0d:8d:e6:c0:92:e5:ec:71:a7:fc:9b:08:b8:c5:c8:46: 94:c0:aa:f6:ef:ba:12:55:a2:eb:a6:90:91:fa:42:7b:c7:84: b7:e9:cb:83:d5:9a:30:99:05:b5:44:f8:32:a7:5e:89:27:9d: ea:e9:de:ae:87:bf:44:22:ec:89:a0:34:c5:26:9d:55:52:c0: 84:dc:16:8b:5f:70:17:1e:df:95:8c:81:30:75:1e:be:f9:a6: a2:f3:a3:50:f7:6a:84:56:07:90:be:36:cd:1c:b6:a1:48:cc: c1:ef:cc:3d:46:61:b2:47:34:a3:90:b3:9f:7b:e2:5d:06:4f: da:0c:0a:5f:99:d8:ec:91:ae:9f:e3:5b:0e:54:62:9a:b3:6b: 98:08:13:95:a5:b0:c3:a5:ab:33:b3:42:b6:b0:ce:7b:6a:98: 3d:b0:7b:92:64:7f:3e:a7:b4:39:70:ef:61:40:47:64:ad:dd: 97:a3:2b:e6:1d:d7:d5:af:05:b7:bc:18:f9:e9:6b:7c:8f:a6: b2:3b:79:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUxMjA5MDAzMTU0WhcNMjUxMjE2MDAzMTU0WjAYMRYwFAYD VQQDEw02OTM3NmRmYS0wZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaVzJyqbzOUSJdnANrCL+pjtTe3sbU9Z4DE4/ASlQ7Mkh+oxoMOZotcsUAHD 2kOrOMpp92nbRZwE/4CF1uTnH/J3ND7Lwxi70qUs1Si4N8MLP4coZv72QzyEfmyH vz6R1aumS3AC9P+wE+Q+YvtbTYXJ9H5OSLSucLBpaLoOeKhbMIx9g5lHwQnfWfFL yzt1psKnl+xSUtJQ6OlkjxCX7Y5gXe8aaRXZrZaNSfsliKzH468vH/Zl39ijR3ss Ay1GQ0NnWCSbXoBqdMYwu+yuRm5/ahJdf5orOxXoUukGub9sI627TntelcOqoiTo zvNXvtly5s2PUwXT/s86Lu9bBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHiIpiO YB8lpxH8JqwtlYwZrZuuMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmN0MRYibv6L31h31k6+Ss2u5lCm3HErlxfJ7XClPX2OEnQZNl+pBP SddFc+72ukWfNX4WJAXnoQ2N5sCS5exxp/ybCLjFyEaUwKr277oSVaLrppCR+kJ7 x4S36cuD1ZowmQW1RPgyp16JJ53q6d6uh79EIuyJoDTFJp1VUsCE3BaLX3AXHt+V jIEwdR6++aai86NQ92qEVgeQvjbNHLahSMzB78w9RmGyRzSjkLOfe+JdBk/aDApf mdjska6f41sOVGKas2uYCBOVpbDDpaszs0K2sM57apg9sHuSZH8+p7Q5cO9hQEdk rd2XoyvmHdfVrwW3vBj56Wt8j6ayO3mW -----END CERTIFICATE-----Generated at Wed Dec 10 15:19:46 2025 by rpki-client