This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: ZKUaIvIobfLiTVeT9xfsWVDGSw7R530ZyfYC+0gc5vY= Subject key identifier: 8B:49:D5:17:16:62:76:03:02:FC:45:F4:61:C2:E6:C7:B3:F9:A9:A1 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 0760 Signing time: Mon 22 Dec 2025 20:56:37 +0000 Manifest this update: Mon 22 Dec 2025 20:56:36 +0000 Manifest next update: Mon 29 Dec 2025 20:56:36 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: TJm1ai3VTdUyRlgAKVzQ0t6IUMm6Q2JFbdX8TS+MCGs=) 2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: m0A4bmKYQpyQxbJtwty9jze7vG5EqP7rfA85eJFYPgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: Dec 22 20:56:36 2025 GMT Not After : Dec 29 20:56:36 2025 GMT Subject: CN=6949b085-b589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:20:38:6a:09:ab:ae:de:f6:81:42:99:ee: 06:ed:90:b0:83:17:1a:64:46:a6:ef:c0:1d:89:0b: 4e:e1:05:70:35:a9:44:ef:9b:c4:20:ac:e5:a6:1d: 69:e7:30:18:3b:c3:58:60:81:f6:10:eb:0d:0b:0a: 2e:69:22:50:cf:d2:26:dd:aa:6d:02:35:71:92:aa: 54:b0:c6:57:bc:ce:98:d8:3c:7a:c9:c7:9b:81:0b: bc:df:a1:e0:a1:29:dc:4a:75:5e:2f:49:fd:1a:98: 50:30:58:75:62:5f:17:c6:4d:dc:14:f7:1c:dd:11: 6e:7d:42:69:cd:cf:ae:85:b1:c2:c6:94:d4:9c:e8: 00:29:60:df:c0:62:49:55:67:f5:92:05:54:2a:7f: 56:c3:3c:cd:c3:a8:3a:b6:7d:c6:b2:24:a1:f1:eb: 85:01:05:1e:31:50:88:e9:f1:8f:10:89:cd:14:28: 80:18:31:2c:45:07:3d:8c:dd:cb:0d:26:b6:f6:fb: 0e:b8:99:cf:70:04:5e:6a:95:29:f2:c4:8d:b9:3c: 70:2e:9e:b8:b6:5b:24:0e:e2:17:0a:73:28:a7:78: 52:60:ff:9c:4c:94:cd:fb:aa:77:cf:84:b4:98:2f: f5:da:52:8f:75:d1:ed:9a:cf:a2:6a:9b:12:8f:25: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:49:D5:17:16:62:76:03:02:FC:45:F4:61:C2:E6:C7:B3:F9:A9:A1 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:0a:24:06:d9:fb:c1:41:79:de:e5:e0:d9:82:ef:a7:c4:fa: 65:28:53:02:ca:03:c8:92:97:33:73:0e:86:9b:76:1b:75:8d: 02:4e:9e:27:e8:06:ae:02:0d:b5:00:4d:8b:6a:45:d5:24:eb: 6a:a1:89:41:f5:78:db:14:98:8b:07:72:cc:4b:87:da:89:ad: c4:e1:96:50:b8:da:25:14:b8:d5:7b:e2:2c:7c:ef:1c:d8:67: 7b:6d:70:88:a8:a2:7b:e8:c0:1b:eb:3b:01:b5:b5:9b:5b:35: 57:c8:2c:4f:42:97:5a:95:73:9c:28:b9:3a:96:2f:5c:50:8d: 8a:6e:79:a8:90:fb:e1:e5:fc:2a:44:1f:b8:fc:ee:d8:06:2c: 1a:af:2e:3b:5f:9c:fb:57:5c:fc:b6:e3:36:84:c4:50:8b:f8: b3:bc:52:cf:45:44:e7:63:0d:f7:c4:9e:51:8e:cb:82:a7:a8: 30:e1:1f:8b:83:7f:ec:e8:64:7d:ea:14:ba:dc:e5:a4:80:15: ec:92:bf:84:8c:c8:81:46:65:4b:9a:7a:09:40:99:6b:02:36: 80:28:18:f7:3a:41:cd:ed:c8:51:62:92:89:66:d3:79:b8:2c: 8e:95:fe:5c:20:d8:4d:d6:aa:a8:18:a8:54:81:07:fa:6e:05: e7:fd:fc:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjUxMjIyMjA1NjM2WhcNMjUxMjI5MjA1NjM2WjAYMRYwFAYD VQQDDA02OTQ5YjA4NS1iNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor8gOGoJq67e9oFCme4G7ZCwgxcaZEam78AdiQtO4QVwNalE75vEIKzlph1p 5zAYO8NYYIH2EOsNCwouaSJQz9Im3aptAjVxkqpUsMZXvM6Y2Dx6ycebgQu836Hg oSncSnVeL0n9GphQMFh1Yl8Xxk3cFPcc3RFufUJpzc+uhbHCxpTUnOgAKWDfwGJJ VWf1kgVUKn9WwzzNw6g6tn3GsiSh8euFAQUeMVCI6fGPEInNFCiAGDEsRQc9jN3L DSa29vsOuJnPcAReapUp8sSNuTxwLp64tlskDuIXCnMop3hSYP+cTJTN+6p3z4S0 mC/12lKPddHtms+iapsSjyUACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItJ1RcW YnYDAvxF9GHC5sez+amhMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvCiQG2fvBQXne5eDZgu+nxPplKFMCygPIkpczcw6Gm3YbdY0CTp4n 6AauAg21AE2LakXVJOtqoYlB9XjbFJiLB3LMS4faia3E4ZZQuNolFLjVe+IsfO8c 2Gd7bXCIqKJ76MAb6zsBtbWbWzVXyCxPQpdalXOcKLk6li9cUI2KbnmokPvh5fwq RB+4/O7YBiwary47X5z7V1z8tuM2hMRQi/izvFLPRUTnYw33xJ5RjsuCp6gw4R+L g3/s6GR96hS63OWkgBXskr+EjMiBRmVLmnoJQJlrAjaAKBj3OkHN7chRYpKJZtN5 uCyOlf5cINhN1qqoGKhUgQf6bgXn/fzh -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:27 2025 by rpki-client