This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: oOAHAbc2qa9+Z0I4hgYxu5B+kpot4hcHjbiBKxPc0Gc= Subject key identifier: B4:84:27:92:69:EF:23:6C:7C:6E:9F:29:3A:02:3F:47:22:E3:67:F1 Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: D4 Signing time: Tue 23 Dec 2025 04:37:41 +0000 Manifest this update: Tue 23 Dec 2025 04:37:41 +0000 Manifest next update: Tue 30 Dec 2025 04:37:41 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: Xxyc1n748q6H9zdKreN1LZmaAYLESvlHXuIAqznlXIM=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Dec 23 04:37:41 2025 GMT Not After : Dec 30 04:37:41 2025 GMT Subject: CN=694a1c95-0222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:55:e6:cb:61:f6:20:50:b6:c1:2a:c9:29: 01:f9:d9:bd:8b:b0:d9:7d:12:43:03:5e:df:0b:91: 9b:3d:69:35:1b:2f:78:e4:36:bd:79:a2:37:d1:d3: 03:fd:c2:27:b0:49:7b:9f:26:8a:61:9b:c9:4e:78: 68:e3:52:58:81:16:7b:19:d2:15:c8:b2:d9:0d:f4: 2e:18:09:8a:60:48:84:e6:e0:f8:de:35:ff:82:65: 61:e7:31:83:13:66:f9:e8:d0:20:c9:a7:7f:59:e9: 27:60:9c:5d:a2:a2:5d:13:7d:45:21:e2:de:f4:01: 1b:1f:df:00:ab:9f:07:29:77:ce:b3:ba:e3:24:6c: bb:43:6a:0f:2c:0f:4d:3b:6b:b8:ec:d4:0d:f8:36: 60:6f:7a:f6:27:76:2c:cb:86:65:fa:8a:58:a8:e0: a4:1e:c2:3c:fe:2c:f5:7a:d8:cd:ef:6a:c3:15:42: 6d:86:8f:e7:12:4a:ab:6c:8f:29:45:34:8c:35:6e: 6c:b8:1b:62:62:94:0c:57:e0:72:d8:91:98:70:43: 98:a4:44:1d:3f:39:bd:7f:26:8b:f1:4a:74:7a:a5: 30:51:fa:a5:03:38:1c:23:db:76:50:d1:5b:8d:7c: 70:6e:6a:ad:a4:cd:84:10:a7:6f:ce:b1:b5:6f:12: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:27:92:69:EF:23:6C:7C:6E:9F:29:3A:02:3F:47:22:E3:67:F1 X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c6:cb:b6:00:29:33:6e:52:10:49:f6:8d:03:4e:27:f2:bf: 56:4b:61:31:0e:cd:e3:86:0d:5c:5c:f4:cb:9f:80:e0:db:1f: b3:37:b6:6d:51:84:77:a7:ad:3d:de:67:2a:c0:ce:91:d6:f7: dc:1c:2a:a4:27:f1:16:15:49:58:34:8e:b2:1b:9d:c9:2b:e8: 04:72:74:39:08:0b:ce:f3:e3:86:e0:ed:71:ff:48:ab:2b:3c: bc:4a:9d:26:a4:08:59:8d:7a:2d:0c:ff:4f:04:c7:c6:d1:b3: 5c:7e:cd:d4:7c:14:af:e1:c7:ef:cf:04:59:ce:79:49:a0:4d: c5:59:ab:6d:94:79:b4:cb:fc:98:4a:e9:91:f8:d4:0e:e5:e6: 43:7d:40:e8:ba:b7:da:ec:1a:69:38:69:78:88:74:28:03:58: 22:6e:b9:86:b9:a7:a1:36:0a:d4:10:33:d2:1a:8a:a5:50:58: 08:f1:ce:d1:77:e8:40:65:98:f3:34:7e:bf:79:77:21:0e:9b: 20:40:c5:fa:f7:01:c5:3e:96:aa:dc:70:7a:02:49:3e:ea:5b: 88:5b:a2:a7:fa:da:5e:ef:a2:03:9d:c4:46:1b:7d:a9:c4:69: 2d:c4:5e:9a:58:49:bf:de:8d:33:8e:76:00:2a:cc:03:62:a5: 5f:fc:d0:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5 N0YwMEY1RjUwHhcNMjUxMjIzMDQzNzQxWhcNMjUxMjMwMDQzNzQxWjAYMRYwFAYD VQQDDA02OTRhMWM5NS0wMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOJV5sth9iBQtsEqySkB+dm9i7DZfRJDA17fC5GbPWk1Gy945Da9eaI30dMD /cInsEl7nyaKYZvJTnho41JYgRZ7GdIVyLLZDfQuGAmKYEiE5uD43jX/gmVh5zGD E2b56NAgyad/WeknYJxdoqJdE31FIeLe9AEbH98Aq58HKXfOs7rjJGy7Q2oPLA9N O2u47NQN+DZgb3r2J3Ysy4Zl+opYqOCkHsI8/iz1etjN72rDFUJtho/nEkqrbI8p RTSMNW5suBtiYpQMV+By2JGYcEOYpEQdPzm9fyaL8Up0eqUwUfqlAzgcI9t2UNFb jXxwbmqtpM2EEKdvzrG1bxIJMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSEJ5Jp 7yNsfG6fKToCP0ci42fxMB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5 ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu UllXWTNqd1pxaGVYOEE5ZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdxsu2ACkzblIQSfaNA04n8r9WS2ExDs3jhg1cXPTLn4Dg2x+zN7Zt UYR3p6093mcqwM6R1vfcHCqkJ/EWFUlYNI6yG53JK+gEcnQ5CAvO8+OG4O1x/0ir Kzy8Sp0mpAhZjXotDP9PBMfG0bNcfs3UfBSv4cfvzwRZznlJoE3FWattlHm0y/yY SumR+NQO5eZDfUDourfa7BppOGl4iHQoA1gibrmGuaehNgrUEDPSGoqlUFgI8c7R d+hAZZjzNH6/eXchDpsgQMX69wHFPpaq3HB6Akk+6luIW6Kn+tpe76IDncRGG32p xGktxF6aWEm/3o0zjnYAKswDYqVf/NCo -----END CERTIFICATE-----Generated at Tue Dec 23 14:54:45 2025 by rpki-client