This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: aTMI60Ft1YU+kZpu67jmnDWrScu5wYMMQVLYdxFasTU= Subject key identifier: 28:50:0E:C8:FD:EF:74:F5:CA:33:B2:94:93:1F:66:0B:37:95:8B:84 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0171 Signing time: Tue 23 Dec 2025 02:50:58 +0000 Manifest this update: Tue 23 Dec 2025 02:50:58 +0000 Manifest next update: Tue 30 Dec 2025 02:50:58 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: WZSB7TKEvGwfOugG1YDbhf61d1lVgU2gfIXlXaO/zW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Dec 23 02:50:58 2025 GMT Not After : Dec 30 02:50:58 2025 GMT Subject: CN=694a0392-f779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:81:4a:3b:7a:ee:73:21:4c:da:94:63:f4: ab:73:87:e1:ea:af:01:a1:f6:25:45:89:75:a0:5b: 58:ec:0b:6c:aa:de:92:3f:aa:42:88:65:14:6b:ad: eb:59:63:5a:41:55:ee:05:20:4c:88:69:37:d6:bf: 23:2d:da:1d:a6:c3:f9:01:d0:37:de:b9:4e:92:07: cd:c3:4b:7c:85:f9:fc:bf:6c:8d:37:3d:07:01:a9: a0:5f:45:9c:61:e8:01:04:7a:d2:9a:ec:c3:5c:ce: 83:8f:27:ce:08:97:4f:68:12:b6:db:3e:71:88:18: 43:0b:ab:26:af:d1:ff:f1:9b:98:02:6a:2d:b0:8e: d1:1d:cf:fb:82:a8:ce:92:e8:32:41:a1:98:27:e8: 1d:e7:70:a1:82:2c:0c:d2:49:76:05:ab:46:a3:b2: 62:17:35:93:13:fb:c5:e8:80:f4:a8:0d:98:db:78: e1:0c:27:3a:39:77:ef:0f:ab:25:62:d2:f4:95:79: 83:70:e6:21:fc:e2:0e:63:8e:fc:4f:a3:73:87:85: 85:2a:5a:38:4c:66:67:6d:f2:82:3a:49:91:a9:d5: b0:61:cb:ee:0f:fc:95:55:0d:28:36:93:12:31:38: 5b:63:74:e4:0f:25:4d:f6:18:d9:82:49:82:8d:fc: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:0E:C8:FD:EF:74:F5:CA:33:B2:94:93:1F:66:0B:37:95:8B:84 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:74:8b:93:2c:13:ce:d8:0c:0e:00:05:70:4a:34:11:3c:52: c8:c4:31:1a:19:ae:9d:06:6b:9c:bf:85:03:91:b6:9f:30:7a: fa:cf:e6:31:43:cd:18:63:10:7d:13:1e:92:cc:0b:40:e5:8e: 6e:07:db:ba:04:27:51:b5:44:31:be:58:20:c6:59:63:60:2b: 7f:29:76:87:89:90:fa:fe:23:8e:25:5a:23:8d:35:34:c8:59: 04:97:82:59:16:bd:58:25:39:a7:da:48:b3:db:f4:38:06:71: 4d:9f:97:a9:78:59:75:92:43:ad:2d:5d:a2:a9:47:63:26:7c: 13:0e:a7:8e:5a:5b:c5:1e:4d:52:f3:1d:80:30:d8:80:a9:46: 1c:13:9b:71:e7:fb:db:cf:a3:86:da:1d:41:90:36:3a:81:c8: 8a:c5:c3:53:f1:28:de:c8:3c:8c:94:49:3e:7c:72:d0:37:eb: c4:14:de:a1:6a:0e:65:f3:94:ab:46:05:fa:ed:bb:2b:57:9e: 63:2c:8b:0d:eb:6b:60:8a:f6:52:58:41:9a:64:12:d2:4b:c7: d4:c6:09:16:38:8e:c4:71:7d:9d:fb:1d:e6:b4:fa:06:4f:6c: 5a:bb:a7:c4:7b:c1:a1:1d:6b:71:81:11:7b:9c:c5:67:66:ad: 55:69:fb:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUxMjIzMDI1MDU4WhcNMjUxMjMwMDI1MDU4WjAYMRYwFAYD VQQDDA02OTRhMDM5Mi1mNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtiBSjt67nMhTNqUY/Src4fh6q8BofYlRYl1oFtY7Atsqt6SP6pCiGUUa63r WWNaQVXuBSBMiGk31r8jLdodpsP5AdA33rlOkgfNw0t8hfn8v2yNNz0HAamgX0Wc YegBBHrSmuzDXM6DjyfOCJdPaBK22z5xiBhDC6smr9H/8ZuYAmotsI7RHc/7gqjO kugyQaGYJ+gd53ChgiwM0kl2BatGo7JiFzWTE/vF6ID0qA2Y23jhDCc6OXfvD6sl YtL0lXmDcOYh/OIOY478T6Nzh4WFKlo4TGZnbfKCOkmRqdWwYcvuD/yVVQ0oNpMS MThbY3TkDyVN9hjZgkmCjfxdkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChQDsj9 73T1yjOylJMfZgs3lYuEMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAdIuTLBPO2AwOAAVwSjQRPFLIxDEaGa6dBmucv4UDkbafMHr6z+Yx Q80YYxB9Ex6SzAtA5Y5uB9u6BCdRtUQxvlggxlljYCt/KXaHiZD6/iOOJVojjTU0 yFkEl4JZFr1YJTmn2kiz2/Q4BnFNn5epeFl1kkOtLV2iqUdjJnwTDqeOWlvFHk1S 8x2AMNiAqUYcE5tx5/vbz6OG2h1BkDY6gciKxcNT8SjeyDyMlEk+fHLQN+vEFN6h ag5l85SrRgX67bsrV55jLIsN62tgivZSWEGaZBLSS8fUxgkWOI7EcX2d+x3mtPoG T2xau6fEe8GhHWtxgRF7nMVnZq1Vafvv -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:34 2025 by rpki-client