This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: VxQNVOMMsBUmci2QWRkWhLb/k66++Mea8TBQwzycgxQ= Subject key identifier: 0F:08:9F:70:48:E1:13:7C:09:EE:A8:FB:55:6C:36:6F:6A:21:A5:0F Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 028D Signing time: Tue 23 Dec 2025 00:33:27 +0000 Manifest this update: Tue 23 Dec 2025 00:33:26 +0000 Manifest next update: Tue 30 Dec 2025 00:33:26 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: QwtCAYRmFFw2hJBo6uTzUviev4ewGtv/ULJX/VKjO4U=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: gYrGpBtOa5YIIgPcE2GiFbVbv7Rp37pYIDK6OFW+qv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Dec 23 00:33:26 2025 GMT Not After : Dec 30 00:33:26 2025 GMT Subject: CN=6949e357-6a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:b1:92:1e:c3:b1:0c:36:ee:dc:b5:e9:b4: 2c:04:77:55:32:fb:0e:17:f8:bf:43:ca:9b:d2:2d: 37:18:85:3e:3e:f6:b8:e9:89:0e:7e:98:fe:4f:c3: 93:0d:57:bb:0b:ff:cd:c9:cd:02:fb:b1:09:7c:ed: e8:06:93:ed:14:0d:14:b6:db:69:f4:de:39:64:7e: 33:80:b0:5a:5c:a2:ff:06:6f:21:99:d0:16:9b:b1: 41:2e:78:c9:bf:32:c0:b2:72:b0:9b:7a:02:77:b3: 24:13:7f:b2:4f:80:42:a1:7a:00:9c:37:26:0c:53: 7d:31:12:17:fe:30:25:a0:a8:d1:cc:92:a2:0a:8d: d3:ce:a5:e6:34:84:8d:f1:f4:29:90:c0:67:ab:fd: 90:81:9e:8c:b8:0c:a0:2c:bb:2c:89:a8:36:cd:b9: 98:9e:14:d8:04:0a:6d:1d:78:e7:23:3c:e1:34:db: b3:76:2b:f4:bf:eb:70:e8:07:48:6a:fe:c9:3c:da: c6:3f:b5:ab:9c:a9:d1:6d:32:2a:94:53:aa:0f:bc: cb:aa:6d:ab:bc:05:3b:09:c9:eb:b6:a9:83:8a:8f: ca:ef:fa:10:4f:91:ab:21:b8:b4:e5:93:e2:f5:e4: 85:19:7b:0e:0a:f8:a8:d9:4a:ab:18:f5:07:b7:68: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:08:9F:70:48:E1:13:7C:09:EE:A8:FB:55:6C:36:6F:6A:21:A5:0F X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:64:b2:61:f4:34:09:06:35:d7:cc:f3:9c:ab:84:5d:c6:e6: cb:19:03:83:e2:e8:bc:34:b5:57:4b:0c:41:6f:49:58:c2:91: 39:8f:7c:d6:8a:aa:cc:5a:38:4d:d4:44:3d:5a:a3:aa:f4:e2: 62:8a:2b:b8:d3:13:a0:1d:b6:d0:b4:a0:4e:90:81:ce:a9:f2: c8:1d:0d:58:79:68:25:00:cd:6c:ae:4f:dd:d1:47:87:94:9e: b6:1b:5f:1e:ef:25:4d:99:1d:5d:24:7a:9b:d2:05:30:40:ca: 1b:26:36:d8:fb:9c:09:0a:85:31:cf:65:1a:cc:d4:0e:11:c3: 60:7b:1a:49:61:ec:fa:c6:2a:48:17:c0:d7:42:4b:1b:fc:38: 51:56:ad:95:45:8a:80:68:4f:71:89:fb:6c:26:62:7e:14:e9: 3c:ac:82:1d:49:89:02:73:7b:3a:ff:9b:5a:82:25:e4:58:6e: ed:2f:d7:e0:d5:bd:be:9f:b9:40:71:bc:81:28:1a:1e:a6:90: e1:50:49:dd:1c:68:54:94:a8:a4:b2:39:ab:16:94:3f:db:5a: f6:c4:e3:cb:3d:82:0b:98:59:29:07:60:2b:29:fc:5a:20:08: 1b:e1:9b:87:60:a7:ef:d7:e2:13:50:f8:4a:63:7f:33:45:84: 4b:a8:fb:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUxMjIzMDAzMzI2WhcNMjUxMjMwMDAzMzI2WjAYMRYwFAYD VQQDDA02OTQ5ZTM1Ny02YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjKxkh7DsQw27ty16bQsBHdVMvsOF/i/Q8qb0i03GIU+Pva46YkOfpj+T8OT DVe7C//Nyc0C+7EJfO3oBpPtFA0Utttp9N45ZH4zgLBaXKL/Bm8hmdAWm7FBLnjJ vzLAsnKwm3oCd7MkE3+yT4BCoXoAnDcmDFN9MRIX/jAloKjRzJKiCo3TzqXmNISN 8fQpkMBnq/2QgZ6MuAygLLssiag2zbmYnhTYBAptHXjnIzzhNNuzdiv0v+tw6AdI av7JPNrGP7WrnKnRbTIqlFOqD7zLqm2rvAU7CcnrtqmDio/K7/oQT5GrIbi05ZPi 9eSFGXsOCvio2UqrGPUHt2jbcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8In3BI 4RN8Ce6o+1VsNm9qIaUPMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0ZLJh9DQJBjXXzPOcq4RdxubLGQOD4ui8NLVXSwxBb0lYwpE5j3zW iqrMWjhN1EQ9WqOq9OJiiiu40xOgHbbQtKBOkIHOqfLIHQ1YeWglAM1srk/d0UeH lJ62G18e7yVNmR1dJHqb0gUwQMobJjbY+5wJCoUxz2UazNQOEcNgexpJYez6xipI F8DXQksb/DhRVq2VRYqAaE9xiftsJmJ+FOk8rIIdSYkCc3s6/5tagiXkWG7tL9fg 1b2+n7lAcbyBKBoeppDhUEndHGhUlKiksjmrFpQ/21r2xOPLPYILmFkpB2ArKfxa IAgb4ZuHYKfv1+ITUPhKY38zRYRLqPt9 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:39 2025 by rpki-client