This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: /QNxm/nEJTpB5MLfN58nwcDKPNIqTcabrvDWRQlrnQg= Subject key identifier: 28:F2:F1:F3:09:65:44:04:47:29:21:83:95:8F:FE:4C:9B:75:51:8F Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 016C Signing time: Tue 23 Dec 2025 02:54:14 +0000 Manifest this update: Tue 23 Dec 2025 02:54:13 +0000 Manifest next update: Tue 30 Dec 2025 02:54:13 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: 51J0X5D59GQfpnfMJ4EDpNZerx8iP2MS1/ANMpAZ2fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: Dec 23 02:54:13 2025 GMT Not After : Dec 30 02:54:13 2025 GMT Subject: CN=694a0456-bfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:d4:70:99:9f:c0:7e:62:9e:54:64:67:12: de:de:6d:94:78:1b:d1:f4:4b:a8:93:5f:9c:b1:03: 93:5a:62:d5:ef:b8:8f:1d:9d:ab:11:fb:f2:41:11: 6f:d0:46:ee:30:10:dd:61:fa:68:49:37:9a:1f:9a: ab:27:c5:15:20:05:7f:82:d0:cf:f3:de:a0:76:69: 59:e8:b0:b2:9c:62:0f:24:1f:57:fd:96:f9:6d:c1: 3c:da:51:aa:2c:ac:71:b3:3c:4c:0d:ac:f1:34:f5: a1:a2:bc:91:d1:15:bd:f2:f3:17:e8:21:4f:24:14: 97:88:0c:be:42:8b:68:20:3d:44:4a:1d:9a:45:c4: 3a:6e:42:89:52:a0:26:38:66:c4:6d:5e:e8:12:c1: 22:47:b1:57:e0:d6:1d:d6:22:a7:6b:50:8f:81:4d: dc:45:2e:d6:e7:24:4b:9f:62:fb:68:af:83:06:2e: ea:b9:87:14:51:30:a3:fa:0a:88:f0:a1:2b:a7:c3: 3c:3b:6f:4d:14:16:4b:b8:77:bf:0c:f1:06:72:aa: ca:9f:67:b6:b6:85:7d:1d:16:a7:6e:3d:54:c2:0c: d1:f8:91:23:52:e1:9f:7a:8e:f0:3a:f3:fa:2e:b0: 7a:d2:78:9a:af:b3:a4:f4:0b:62:02:a7:1a:10:f0: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F2:F1:F3:09:65:44:04:47:29:21:83:95:8F:FE:4C:9B:75:51:8F X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:1e:0f:d2:f5:e9:65:85:ff:8f:9c:f6:11:23:06:ae:9c: 52:27:a4:8e:66:cf:f7:07:a7:f2:7a:e6:4b:8c:11:e1:b4:0a: bc:61:08:46:6d:83:88:65:96:65:ea:15:04:92:bd:a4:e8:48: 51:06:82:7c:9d:41:93:29:8c:dd:30:d2:e5:71:2a:e0:ad:f6: 4c:57:92:ae:f0:9c:f1:19:a6:91:ac:da:6b:87:1b:5c:33:32: c3:94:59:00:50:32:92:95:2b:25:e3:40:c0:2c:96:ec:9c:dc: 86:48:42:4f:41:e1:ef:04:39:36:d3:2e:66:88:38:a3:f2:0f: ef:1b:6e:f3:d8:c3:0a:5d:1e:b5:1c:5a:77:a2:ca:0d:60:24: 9a:ee:ae:ab:d4:6f:5c:ba:7a:b2:0b:e9:fc:52:ea:7b:59:36: ad:0d:5a:79:7f:1a:c3:eb:5a:ee:a3:45:32:fa:dc:95:ac:13: 43:66:5b:f3:7d:63:0f:7f:40:14:84:f9:57:a7:8f:75:d3:a0: 69:88:2e:b7:05:94:49:77:ef:9a:07:46:d6:ee:6e:6e:36:1a: 96:81:84:9a:01:9f:62:1b:22:46:bf:70:72:be:91:8f:5b:c3: e6:df:a6:71:40:c0:16:8b:07:08:11:38:79:04:79:c6:5e:50: aa:a6:e8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUxMjIzMDI1NDEzWhcNMjUxMjMwMDI1NDEzWjAYMRYwFAYD VQQDDA02OTRhMDQ1Ni1iZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl3UcJmfwH5inlRkZxLe3m2UeBvR9Euok1+csQOTWmLV77iPHZ2rEfvyQRFv 0EbuMBDdYfpoSTeaH5qrJ8UVIAV/gtDP896gdmlZ6LCynGIPJB9X/Zb5bcE82lGq LKxxszxMDazxNPWhoryR0RW98vMX6CFPJBSXiAy+QotoID1ESh2aRcQ6bkKJUqAm OGbEbV7oEsEiR7FX4NYd1iKna1CPgU3cRS7W5yRLn2L7aK+DBi7quYcUUTCj+gqI 8KErp8M8O29NFBZLuHe/DPEGcqrKn2e2toV9HRanbj1UwgzR+JEjUuGfeo7wOvP6 LrB60niar7Ok9AtiAqcaEPAkqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjy8fMJ ZUQERykhg5WP/kybdVGPMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1mR4P0vXpZYX/j5z2ESMGrpxSJ6SOZs/3B6fyeuZLjBHhtAq8YQhG bYOIZZZl6hUEkr2k6EhRBoJ8nUGTKYzdMNLlcSrgrfZMV5Ku8JzxGaaRrNprhxtc MzLDlFkAUDKSlSsl40DALJbsnNyGSEJPQeHvBDk20y5miDij8g/vG27z2MMKXR61 HFp3osoNYCSa7q6r1G9cunqyC+n8Uup7WTatDVp5fxrD61ruo0Uy+tyVrBNDZlvz fWMPf0AUhPlXp49106BpiC63BZRJd++aB0bW7m5uNhqWgYSaAZ9iGyJGv3ByvpGP W8Pm36ZxQMAWiwcIETh5BHnGXlCqpuiU -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:02 2025 by rpki-client