This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: CWJkykW45ugM3CEHzdeLN9Lm0RClcrrTdqhy8Frr2lo= Subject key identifier: D5:E6:22:40:EB:14:09:81:55:A8:14:2B:A7:B5:4C:4C:40:03:59:50 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D9A Signing time: Mon 08 Dec 2025 17:34:15 +0000 Manifest this update: Mon 08 Dec 2025 17:34:14 +0000 Manifest next update: Mon 15 Dec 2025 17:34:14 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: 8QuYr1eoZ+8rAurAAd9kyAUlgKXgYuHD9X/nXqFsUSQ=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: EfyBsaHY8sXfh+FtDY0lWUNRe0HDOeGbUlITqUD7/qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 17:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3535 (0xdcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Dec 8 17:34:14 2025 GMT Not After : Dec 15 17:34:14 2025 GMT Subject: CN=69370c17-1672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:78:19:1a:86:23:c6:3a:57:8d:a8:f4:4f:e4: 78:18:3f:bb:01:c3:21:08:0b:b9:25:fc:5f:54:d1: 53:a9:f4:55:49:27:03:85:28:67:f3:0a:78:86:14: 98:60:b7:c1:6a:c8:04:c3:00:cd:13:9f:1e:4e:f6: 36:1e:0c:41:09:f8:f2:4b:cb:60:86:e5:7c:18:3b: 6e:cd:79:54:ef:0f:36:be:69:af:a6:14:10:ea:20: 9a:47:c2:bc:24:b6:a3:db:de:e1:e6:ed:2c:df:68: 79:c7:12:d2:08:5b:e3:d1:69:55:34:ba:24:d0:16: ba:ba:17:73:ce:b1:87:f8:63:d0:c3:a1:61:c4:df: c8:fd:0f:5f:d5:1c:b0:b4:5e:d8:99:53:b1:2c:5d: 24:72:62:46:38:10:ac:5b:f7:71:8b:5a:ab:c5:aa: cb:5a:18:ac:05:4a:a3:6e:32:f3:16:18:34:31:06: 02:c4:75:f3:e2:1d:80:4e:8f:cd:9a:16:09:d9:ff: 4f:da:3f:1a:3f:77:40:39:ce:4d:c0:62:1b:b1:64: de:98:92:1d:63:60:83:a0:1f:81:ec:96:a8:73:a3: 3c:fb:fe:ef:a4:71:0b:26:6c:e4:98:d0:c0:b8:90: d3:53:01:b2:cf:0f:1a:07:c9:d9:94:80:fc:de:be: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E6:22:40:EB:14:09:81:55:A8:14:2B:A7:B5:4C:4C:40:03:59:50 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:95:39:fc:b5:9f:b4:31:86:d6:19:0a:61:87:3b:91:8b:f5: 58:58:cf:32:73:29:15:f0:49:73:29:dc:93:79:1d:4f:bd:cd: 61:55:86:cd:02:b0:a9:6f:fd:40:de:8d:90:b6:36:31:a4:60: 85:23:5b:ad:fa:ac:fd:5a:51:a0:66:f3:1a:17:3f:40:98:3d: bd:9a:df:f6:64:f3:2d:0d:b9:fd:be:5b:6e:a1:5f:2d:7f:a8: 7a:e1:de:bb:b9:3e:08:39:da:cb:64:3a:35:d5:0f:84:8f:4c: af:48:b4:d9:69:a9:ed:67:7b:22:00:c4:aa:3c:c1:27:52:b3: b4:03:fc:ff:a6:aa:08:90:29:64:a3:25:45:37:5e:06:ad:65: 41:8a:af:15:d8:8b:28:f5:f7:7a:a5:a3:92:26:20:7a:45:a5: 07:4b:2a:3d:89:57:ca:37:3b:5b:52:35:b3:0f:55:a7:de:5a: a6:29:a8:0e:27:cd:5f:97:a0:7a:b4:cf:b0:55:05:36:48:20: 60:8b:d0:0f:5f:82:44:dc:17:2a:01:b1:3a:c3:d4:1c:02:25: 43:8e:4a:af:4e:aa:e1:d6:5e:f0:3d:e1:3c:31:d6:51:78:b0: f6:17:ab:3f:dc:6f:49:0b:3b:41:e9:3c:56:7a:42:56:38:a8: 8c:fc:3f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUxMjA4MTczNDE0WhcNMjUxMjE1MTczNDE0WjAYMRYwFAYD VQQDEw02OTM3MGMxNy0xNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ngZGoYjxjpXjaj0T+R4GD+7AcMhCAu5JfxfVNFTqfRVSScDhShn8wp4hhSY YLfBasgEwwDNE58eTvY2HgxBCfjyS8tghuV8GDtuzXlU7w82vmmvphQQ6iCaR8K8 JLaj297h5u0s32h5xxLSCFvj0WlVNLok0Ba6uhdzzrGH+GPQw6FhxN/I/Q9f1Ryw tF7YmVOxLF0kcmJGOBCsW/dxi1qrxarLWhisBUqjbjLzFhg0MQYCxHXz4h2ATo/N mhYJ2f9P2j8aP3dAOc5NwGIbsWTemJIdY2CDoB+B7Jaoc6M8+/7vpHELJmzkmNDA uJDTUwGyzw8aB8nZlID83r7AUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXmIkDr FAmBVagUK6e1TExAA1lQMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBklTn8tZ+0MYbWGQphhzuRi/VYWM8ycykV8ElzKdyTeR1Pvc1hVYbN ArCpb/1A3o2QtjYxpGCFI1ut+qz9WlGgZvMaFz9AmD29mt/2ZPMtDbn9vltuoV8t f6h64d67uT4IOdrLZDo11Q+Ej0yvSLTZaantZ3siAMSqPMEnUrO0A/z/pqoIkClk oyVFN14GrWVBiq8V2Iso9fd6paOSJiB6RaUHSyo9iVfKNztbUjWzD1Wn3lqmKagO J81fl6B6tM+wVQU2SCBgi9APX4JE3BcqAbE6w9QcAiVDjkqvTqrh1l7wPeE8MdZR eLD2F6s/3G9JCztB6TxWekJWOKiM/D8F -----END CERTIFICATE-----Generated at Tue Dec 9 21:36:09 2025 by rpki-client