This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json) Hash identifier: wBMPECAJT2mqHBlgJiL58jQvbCdriajEDchp/+DQ3gA= Subject key identifier: A2:4D:36:11:DD:1A:34:4A:FB:B9:DA:0D:14:34:C0:17:8E:A4:7A:2A Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft Manifest number: 06 Signing time: Fri 19 Dec 2025 07:01:10 +0000 Manifest this update: Fri 19 Dec 2025 07:01:10 +0000 Manifest next update: Fri 26 Dec 2025 07:01:10 +0000 Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: ZFyhVC4T4hGwEzemhgP591naNe+c0gt4j2MYEqSbjOs=) 2: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: dyqXFCcUaP0MyJCMf/CgPJbAs32ejMPFahUoO/mRaLE=) 3: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: OQ9vc68P9a8kEML8WxvcO6y/ABGhLAWink2psJnWsk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Validity Not Before: Dec 19 07:01:10 2025 GMT Not After : Dec 26 07:01:10 2025 GMT Subject: CN=6944f836-69e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:e9:c9:d1:84:51:60:73:34:cd:1a:4b:1f: 59:e7:f8:dd:03:88:c7:23:6c:cf:00:50:a7:03:e1: d4:78:e5:67:11:a4:34:79:d1:4b:3a:fa:3a:2f:1d: 61:bb:39:6b:19:85:03:bc:30:2a:c6:de:7f:91:f8: db:d4:e8:95:0c:89:09:23:51:4a:fe:9c:d4:34:5e: 11:df:db:26:27:f4:12:60:42:54:31:4e:f5:ed:39: 70:95:bb:9a:63:75:c3:41:95:5b:2f:59:53:e6:ae: 61:a2:74:c5:80:32:66:2f:52:6e:9d:49:ef:84:fd: 7d:d0:8d:11:3c:26:12:be:83:46:db:2e:43:3b:05: 60:a7:7e:79:ac:bd:ce:86:ff:d9:a6:cb:b9:73:ad: 55:14:d5:da:a1:c4:52:6e:db:2d:8e:cd:48:7f:e0: de:47:21:5b:de:6a:06:e9:a3:ea:f0:61:ea:ca:49: 22:06:3a:41:49:b3:0a:37:87:1b:15:14:e3:62:97: a0:89:82:c1:fe:44:aa:24:98:a1:38:09:04:b0:8a: fc:48:56:ce:80:99:e5:c2:69:c3:f7:b0:7a:18:6f: c5:0e:5c:d1:d2:5e:20:7a:95:33:64:ca:29:76:01: 73:a4:2a:b9:10:c3:eb:21:42:d3:b9:88:bf:79:39: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:36:11:DD:1A:34:4A:FB:B9:DA:0D:14:34:C0:17:8E:A4:7A:2A X509v3 Authority Key Identifier: keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:74:6d:24:16:6a:41:aa:62:08:e7:92:2d:98:0c:ae:aa: 17:ae:73:81:0e:26:20:75:b0:bd:75:41:46:9e:8c:22:13:e6: 40:15:e5:28:91:fa:f7:69:8e:39:64:83:ae:ef:ab:92:45:38: 6c:93:e6:e2:c5:19:b0:96:8f:a8:ec:c7:a2:a9:80:d6:24:fa: 40:13:9b:14:3e:0a:13:29:32:18:d1:63:07:55:20:69:f7:96: 79:35:ba:9f:9a:f8:19:f8:d7:11:c7:77:e6:46:98:bf:a1:c4: c8:c2:0f:89:53:66:21:b0:6a:17:5d:b5:c9:c3:22:66:f3:ec: 14:22:3e:d4:ca:f5:44:f0:f7:24:2d:3a:e3:a7:3f:52:5e:69: 7e:cb:05:d4:f5:b9:94:a2:2a:49:21:ce:68:69:83:45:ce:c5: fa:d5:3e:8b:4f:2d:b5:98:46:1a:20:61:df:cb:f9:0b:bd:ba: 19:c3:78:4b:ac:17:de:83:8b:69:7e:f6:87:9f:23:77:4a:04: 03:1c:97:ef:64:a2:f2:9c:6c:b2:3c:27:5d:3b:a1:16:5b:f9: 7f:55:03:54:55:c3:f6:b9:38:37:e5:7b:96:7c:2e:79:9f:61: a6:db:d5:57:08:ef:af:ac:08:e3:a3:ac:23:29:a5:f4:3e:d9: ae:c3:eb:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy MEJCMjVENDAeFw0yNTEyMTkwNzAxMTBaFw0yNTEyMjYwNzAxMTBaMBgxFjAUBgNV BAMMDTY5NDRmODM2LTY5ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2FunJ0YRRYHM0zRpLH1nn+N0DiMcjbM8AUKcD4dR45WcRpDR50Us6+jovHWG7 OWsZhQO8MCrG3n+R+NvU6JUMiQkjUUr+nNQ0XhHf2yYn9BJgQlQxTvXtOXCVu5pj dcNBlVsvWVPmrmGidMWAMmYvUm6dSe+E/X3QjRE8JhK+g0bbLkM7BWCnfnmsvc6G /9mmy7lzrVUU1dqhxFJu2y2OzUh/4N5HIVveagbpo+rwYerKSSIGOkFJswo3hxsV FONil6CJgsH+RKokmKE4CQSwivxIVs6AmeXCacP3sHoYb8UOXNHSXiB6lTNkyil2 AXOkKrkQw+shQtO5iL95OZN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUok02Ed0a NEr7udoNFDTAF46keiowHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy OTg5L0VGRkRENzE0RDZENTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYx aGRIXzVNMXNVZmlDN0pkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEX6dG0kFmpBqmII55ItmAyuqheuc4EOJiB1sL11QUaejCIT5kAV5SiR +vdpjjlkg67vq5JFOGyT5uLFGbCWj6jsx6KpgNYk+kATmxQ+ChMpMhjRYwdVIGn3 lnk1up+a+Bn41xHHd+ZGmL+hxMjCD4lTZiGwahddtcnDImbz7BQiPtTK9UTw9yQt OuOnP1JeaX7LBdT1uZSiKkkhzmhpg0XOxfrVPotPLbWYRhogYd/L+Qu9uhnDeEus F96Di2l+9oefI3dKBAMcl+9kovKcbLI8J107oRZb+X9VA1RVw/a5ODfle5Z8Lnmf Yabb1VcI76+sCOOjrCMppfQ+2a7D65k= -----END CERTIFICATE-----Generated at Sat Dec 20 12:05:55 2025 by rpki-client