This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: XtaEuSY2+Ad3yxRAymZFBcNaD3mPjwa5YzssMFycwuE= Subject key identifier: 93:98:B7:EE:A6:39:49:70:E5:A9:8A:42:26:C1:00:15:A1:7E:6A:4C Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0CD7 Signing time: Sat 20 Dec 2025 17:49:46 +0000 Manifest this update: Sat 20 Dec 2025 17:49:45 +0000 Manifest next update: Sat 27 Dec 2025 17:49:45 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: 4z9PMSjwKqCS6tLt7sCDXD3gkYLwl0pD/sKo13+doS4=) 2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: CJEgaP8KqXDJxOZP2RnxuUbrLWDCGR55rSwKPSomEHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: Dec 20 17:49:45 2025 GMT Not After : Dec 27 17:49:45 2025 GMT Subject: CN=6946e1b9-463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:80:9e:e2:83:31:bd:97:ee:17:42:26:80: 34:3b:c6:0c:f2:34:2d:90:eb:f5:18:82:63:46:ce: 5f:9b:24:70:1b:cb:49:56:db:ef:f5:c7:5d:06:e1: 4b:89:2c:d2:76:31:55:08:3b:82:95:76:45:85:80: 3f:1e:17:5a:60:c4:e9:9b:57:03:55:97:c5:05:b7: 27:10:35:56:e6:82:cf:cb:03:ca:e0:b1:a3:4b:95: 99:c6:26:86:87:5b:8a:0b:f7:26:e4:bd:00:f6:d9: 9e:bd:5a:f1:41:aa:fa:ec:5a:cb:e1:c9:b7:9a:c9: e8:a5:ee:44:a0:c5:e6:59:de:76:85:78:a4:5a:0a: 93:6c:f1:0f:d4:af:af:fb:60:b6:a7:ae:f6:df:76: 25:d6:6a:09:64:40:41:10:cf:a2:82:d2:37:47:d7: c6:cd:a5:b7:4e:31:d0:db:53:0f:57:c5:cd:47:27: 26:03:15:40:f2:75:02:93:de:3d:cd:eb:94:85:e4: d3:2d:68:63:92:de:e1:d0:29:2d:86:14:fc:b6:e7: 39:63:6e:f7:7d:f1:cf:a7:e5:ba:3e:84:cd:ce:9a: 5a:4a:93:ee:9e:15:c8:0d:ed:13:21:6d:76:a3:58: 9e:e2:ff:ef:16:f4:ac:c9:2e:9e:db:0c:36:64:fe: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:98:B7:EE:A6:39:49:70:E5:A9:8A:42:26:C1:00:15:A1:7E:6A:4C X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:57:3e:5c:3b:89:72:39:62:45:30:34:49:b8:51:6a:4e:8e: 8f:cb:26:80:f0:ae:33:84:08:87:ca:47:7f:b1:49:c8:31:0a: 0a:cd:7e:6c:b3:28:47:5c:f4:2d:1f:3d:9f:bc:67:cc:c9:f9: 64:e3:bd:d0:bc:23:a6:d6:c3:af:f6:a6:7d:c5:dd:6f:cb:30: 28:02:cc:79:55:64:c6:d2:1d:9c:ce:4c:7d:26:3e:70:a2:77: c4:2c:e5:9e:95:58:88:78:d9:e4:3e:e2:df:61:7a:96:f5:a6: a5:84:99:33:fd:da:84:69:d2:ab:99:47:13:81:94:6e:f3:e4: ba:d9:6b:c3:6d:e2:7f:d8:97:2f:d3:0c:14:f4:21:c7:4a:79: e6:7d:50:28:b5:f8:23:3d:92:eb:1b:e0:60:f1:0a:b1:82:97: 57:b6:0b:76:8f:3a:bf:02:04:08:e1:61:66:fe:35:37:5a:fb: e3:ac:b7:36:03:73:70:fa:da:c2:60:1e:b0:73:08:53:6d:9b: 60:42:1d:74:66:4c:93:db:0b:c7:60:9f:41:f8:cb:34:cc:66: 0e:61:63:ba:5b:96:9e:21:70:dc:a2:30:4a:b9:49:c7:5b:75: 95:97:1b:c7:93:8b:94:93:4c:86:19:59:8c:65:c0:81:57:dd: 97:7f:6f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjUxMjIwMTc0OTQ1WhcNMjUxMjI3MTc0OTQ1WjAYMRYwFAYD VQQDDA02OTQ2ZTFiOS00NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUmAnuKDMb2X7hdCJoA0O8YM8jQtkOv1GIJjRs5fmyRwG8tJVtvv9cddBuFL iSzSdjFVCDuClXZFhYA/HhdaYMTpm1cDVZfFBbcnEDVW5oLPywPK4LGjS5WZxiaG h1uKC/cm5L0A9tmevVrxQar67FrL4cm3msnope5EoMXmWd52hXikWgqTbPEP1K+v +2C2p67233Yl1moJZEBBEM+igtI3R9fGzaW3TjHQ21MPV8XNRycmAxVA8nUCk949 zeuUheTTLWhjkt7h0CkthhT8tuc5Y273ffHPp+W6PoTNzppaSpPunhXIDe0TIW12 o1ie4v/vFvSsyS6e2ww2ZP5qTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOYt+6m OUlw5amKQibBABWhfmpMMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJVz5cO4lyOWJFMDRJuFFqTo6PyyaA8K4zhAiHykd/sUnIMQoKzX5s syhHXPQtHz2fvGfMyflk473QvCOm1sOv9qZ9xd1vyzAoAsx5VWTG0h2czkx9Jj5w onfELOWelViIeNnkPuLfYXqW9aalhJkz/dqEadKrmUcTgZRu8+S62WvDbeJ/2Jcv 0wwU9CHHSnnmfVAotfgjPZLrG+Bg8QqxgpdXtgt2jzq/AgQI4WFm/jU3WvvjrLc2 A3Nw+trCYB6wcwhTbZtgQh10ZkyT2wvHYJ9B+Ms0zGYOYWO6W5aeIXDcojBKuUnH W3WVlxvHk4uUk0yGGVmMZcCBV92Xf29m -----END CERTIFICATE-----Generated at Mon Dec 22 07:41:34 2025 by rpki-client