This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: y3zQWI1aaWLD/BT5SwXu+tkIOftN3Jhkqlu/q9c/tOg= Subject key identifier: ED:9B:0B:42:FC:70:3A:D3:0C:EE:60:98:C1:43:02:2A:A8:00:5D:D8 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 1074 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1060 Signing time: Sat 20 Dec 2025 17:06:57 +0000 Manifest this update: Sat 20 Dec 2025 17:06:56 +0000 Manifest next update: Sat 27 Dec 2025 17:06:56 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: WIWgPBEYHi5rv5ROVoRGh+hyK1saP7eDdOLZTswlAg0=) 2: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) 3: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4212 (0x1074) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Dec 20 17:06:56 2025 GMT Not After : Dec 27 17:06:56 2025 GMT Subject: CN=6946d7b1-55b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:74:62:15:f8:6e:b8:9d:96:58:b7:f3:d7: 00:d9:4f:5f:b9:47:c6:95:e4:ce:5c:52:50:f6:78: a6:2f:50:ce:35:8a:a9:a1:b7:bc:c9:5f:64:9c:a5: ca:f8:6f:ec:1c:ef:8b:91:6d:0e:6d:4f:ce:3f:1d: da:63:1b:c0:22:cc:a8:cb:c8:5b:91:ef:16:e4:32: 5e:01:d4:47:6b:5a:7f:13:2a:69:1e:a4:5e:27:fd: 90:ee:4c:41:f5:80:a4:b0:77:af:0a:93:8c:88:7c: e6:54:8c:6a:91:df:4b:03:ba:b1:11:d6:b4:9f:3e: d1:2c:85:38:4e:44:28:55:2a:06:5c:8a:7e:29:6d: dc:b7:de:7a:95:c2:95:b1:9b:aa:6a:d6:ba:4d:74: 76:71:0e:b1:44:f1:6a:d1:8b:26:c8:07:a9:47:2f: d6:f8:64:8c:b0:9d:78:d1:8b:c5:ab:a7:03:2d:48: 7e:e7:f2:04:cb:61:37:e5:ae:99:ad:11:e9:01:95: a0:ba:97:3d:1d:a3:f0:94:d2:a7:54:96:f9:91:fe: ac:a0:9a:f6:97:87:2f:6b:70:df:d6:58:99:0c:6e: 37:76:49:e0:fb:e2:d8:6d:d4:2f:38:2e:5a:bb:1c: 35:33:0c:1a:2d:11:d6:bd:34:3e:0c:2e:1c:f0:f4: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9B:0B:42:FC:70:3A:D3:0C:EE:60:98:C1:43:02:2A:A8:00:5D:D8 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:db:a1:df:e5:35:87:7c:74:b4:f5:ca:33:de:0a:ea:b2: 48:c5:1f:e3:21:c4:d1:fc:8b:31:e7:0f:c1:70:62:03:ac:3c: f9:fe:52:ba:c1:15:df:66:ae:77:2c:4a:04:f2:29:24:eb:b5: db:a0:aa:65:7c:c2:b9:c2:5c:a7:0b:fb:52:ed:5e:16:3c:bb: 62:86:bd:04:32:b0:98:0b:d2:6c:47:6a:9c:68:6a:f5:b7:42: 72:c2:4b:ac:d6:4a:49:b1:1e:8a:0d:14:70:79:3b:77:0b:0f: 85:48:17:95:96:02:bf:1f:fe:e9:2f:aa:7c:5e:93:b4:7f:57: 45:8a:3c:f5:3a:ad:db:8b:33:10:d5:da:b5:ad:79:c0:98:2b: 2e:32:ab:5c:22:9a:d7:73:5c:4a:a8:f6:6d:86:b9:91:3d:d7: 5d:ae:4e:68:03:b8:0e:2f:5c:b0:37:20:f0:15:16:09:5f:af: a2:20:9e:45:c8:bf:c1:21:09:c1:da:4b:25:d2:95:31:42:20: 42:9b:ef:45:18:e0:90:76:5f:0e:bb:91:b3:7f:06:d4:1d:52: b7:5b:0a:99:e8:00:b7:d6:0a:95:d1:98:b0:52:cb:fa:19:67: 9c:f6:1c:fc:cd:86:f1:31:2c:17:52:e4:95:5b:e5:a3:4f:63: 2b:76:f2:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUxMjIwMTcwNjU2WhcNMjUxMjI3MTcwNjU2WjAYMRYwFAYD VQQDDA02OTQ2ZDdiMS01NWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbl0YhX4bridlli389cA2U9fuUfGleTOXFJQ9nimL1DONYqpobe8yV9knKXK +G/sHO+LkW0ObU/OPx3aYxvAIsyoy8hbke8W5DJeAdRHa1p/EyppHqReJ/2Q7kxB 9YCksHevCpOMiHzmVIxqkd9LA7qxEda0nz7RLIU4TkQoVSoGXIp+KW3ct956lcKV sZuqata6TXR2cQ6xRPFq0YsmyAepRy/W+GSMsJ140YvFq6cDLUh+5/IEy2E35a6Z rRHpAZWgupc9HaPwlNKnVJb5kf6soJr2l4cva3Df1liZDG43dkng++LYbdQvOC5a uxw1MwwaLRHWvTQ+DC4c8PRVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2bC0L8 cDrTDO5gmMFDAiqoAF3YMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ+9uh3+U1h3x0tPXKM94K6rJIxR/jIcTR/Isx5w/BcGIDrDz5/lK6 wRXfZq53LEoE8ikk67XboKplfMK5wlynC/tS7V4WPLtihr0EMrCYC9JsR2qcaGr1 t0Jywkus1kpJsR6KDRRweTt3Cw+FSBeVlgK/H/7pL6p8XpO0f1dFijz1Oq3bizMQ 1dq1rXnAmCsuMqtcIprXc1xKqPZthrmRPdddrk5oA7gOL1ywNyDwFRYJX6+iIJ5F yL/BIQnB2ksl0pUxQiBCm+9FGOCQdl8Ou5GzfwbUHVK3WwqZ6AC31gqV0ZiwUsv6 GWec9hz8zYbxMSwXUuSVW+WjT2MrdvLm -----END CERTIFICATE-----Generated at Mon Dec 22 12:24:50 2025 by rpki-client