This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json) Hash identifier: JBPaUR980VwJEOj8zUZtk7RPwEEu8kM3Fz7C10oMshI= Subject key identifier: F0:FE:4E:83:60:91:7E:B3:BB:AB:AF:1C:CF:4C:32:4D:F5:94:36:5E Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78 Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft Manifest number: 0F Signing time: Tue 23 Dec 2025 06:51:06 +0000 Manifest this update: Tue 23 Dec 2025 06:51:05 +0000 Manifest next update: Tue 30 Dec 2025 06:51:05 +0000 Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: yzsNuFU3Q8Kg/BOdu838yIlYyQ1q+EVHD3W44CEB/Xk=) 2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: meg/lA1QwqDySKhpjEzkoudVyA+mOqqQd/Xz1Ox0z9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78 Validity Not Before: Dec 23 06:51:05 2025 GMT Not After : Dec 30 06:51:05 2025 GMT Subject: CN=694a3bda-e8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:b7:45:45:c1:3f:e6:5c:53:0e:55:26:04: 80:f7:32:f9:94:09:c6:74:90:57:b6:c8:0d:c0:0b: 68:5a:9e:14:57:b5:78:42:bd:12:d8:bf:56:5d:38: ca:74:15:36:cb:37:8d:53:09:73:3d:75:67:86:81: f1:d1:1a:11:b8:99:43:2e:4e:0a:d6:0c:a4:22:63: 70:4e:70:4c:9a:ed:67:2d:5d:28:e1:90:0f:31:f0: c5:a6:74:5e:00:a6:f3:94:78:81:aa:6f:07:0a:b3: 49:3a:b4:d6:69:91:57:e5:10:12:13:0a:46:3d:84: 0e:0a:03:d1:1b:a2:6b:9f:ae:c8:b4:1d:a2:0f:d1: 5a:1e:62:9a:30:76:ba:eb:45:8a:07:52:be:ac:bc: 6d:df:c3:19:f2:bc:d4:11:da:43:63:5c:ae:b8:04: 92:ae:b2:4d:3a:77:9c:82:66:e3:5b:ea:aa:e7:a2: a9:28:7c:8c:6f:c9:fb:53:86:dc:51:2b:bb:ea:17: ef:d2:92:43:3d:d4:a3:ac:f7:9f:b0:28:4a:4a:a5: 99:6b:e4:4d:ce:09:99:57:a2:0a:94:57:40:d8:82: 6b:11:e0:6a:29:1f:f8:d3:06:35:ae:f4:49:6f:0c: d9:bf:c8:81:f9:2f:72:2f:48:88:9a:82:78:78:1f: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:4E:83:60:91:7E:B3:BB:AB:AF:1C:CF:4C:32:4D:F5:94:36:5E X509v3 Authority Key Identifier: keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d2:b1:8d:3b:aa:ce:26:fa:1b:18:86:8e:9f:24:8f:14:ec: 4a:c4:31:f1:90:cd:3a:79:13:2a:0e:f9:f4:91:8f:4f:44:4c: 7d:f2:9f:ed:37:4a:d2:06:8a:7d:af:84:4c:59:2a:50:5e:6b: c1:ac:e1:ce:5b:f7:2d:ed:82:9a:65:5f:fa:96:ed:95:33:02: 3e:0e:73:fb:3b:cb:7e:c6:a8:10:cc:ff:77:a3:f0:ea:9e:6c: 8c:f9:f1:95:7a:85:0a:a1:4f:ca:35:35:21:01:74:8e:6c:cb: a8:34:9d:91:2f:fd:ea:cc:64:6b:20:68:05:9f:7b:39:ce:d5: 78:e7:f7:69:15:95:20:63:a6:df:c8:1f:4a:b3:bd:c9:d0:78: 89:b4:73:61:42:f5:a1:6d:39:a4:35:e1:21:3c:b7:02:89:5e: 7e:58:03:00:1d:3b:e1:a8:be:30:3a:41:88:56:82:2b:10:39: 38:44:ee:48:7e:a4:f2:2e:70:60:0b:fc:8c:48:11:54:cc:c2: 83:0f:c7:e8:ed:da:ed:91:2e:48:ce:43:12:2a:6d:d8:a5:a4: 50:78:b8:71:77:86:67:e6:24:6e:60:f6:ca:37:4b:ac:a8:cc: 82:f4:5d:19:c1:8f:1f:c3:a4:dc:a7:5a:09:fc:90:2a:0e:26: 37:e5:40:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEZFODExMC8GA1UEBRMoQTg0QTMzNjVFQTUyM0JEQTRGMjMzQTYxRTUwNzdGMzEx OEQ2M0Y3ODAeFw0yNTEyMjMwNjUxMDVaFw0yNTEyMzAwNjUxMDVaMBgxFjAUBgNV BAMMDTY5NGEzYmRhLWU4ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCM9LdFRcE/5lxTDlUmBID3MvmUCcZ0kFe2yA3AC2hanhRXtXhCvRLYv1ZdOMp0 FTbLN41TCXM9dWeGgfHRGhG4mUMuTgrWDKQiY3BOcEya7WctXSjhkA8x8MWmdF4A pvOUeIGqbwcKs0k6tNZpkVflEBITCkY9hA4KA9Ebomufrsi0HaIP0VoeYpowdrrr RYoHUr6svG3fwxnyvNQR2kNjXK64BJKusk06d5yCZuNb6qrnoqkofIxvyftThtxR K7vqF+/SkkM91KOs95+wKEpKpZlr5E3OCZlXogqUV0DYgmsR4GopH/jTBjWu9Elv DNm/yIH5L3IvSIiagnh4H6v/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8P5Og2CR frO7q68cz0wyTfWUNl4wHwYDVR0jBBgwFoAUqEozZepSO9pPIzph5Qd/MRjWP3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RkU4LzMyMkFBQjRDQ0M0 QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlwUEl6cGg1UWRfTVJqV1Az Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUVvelplcFNPOXBQSXpwaDVRZF9NUmpXUDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RkU4LzMyMkFBQjRDQ0M0QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlw UEl6cGg1UWRfTVJqV1AzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXSsY07qs4m+hsYho6fJI8U7ErEMfGQzTp5EyoO+fSRj09ETH3yn+03 StIGin2vhExZKlBea8Gs4c5b9y3tgpplX/qW7ZUzAj4Oc/s7y37GqBDM/3ej8Oqe bIz58ZV6hQqhT8o1NSEBdI5sy6g0nZEv/erMZGsgaAWfeznO1Xjn92kVlSBjpt/I H0qzvcnQeIm0c2FC9aFtOaQ14SE8twKJXn5YAwAdO+GovjA6QYhWgisQOThE7kh+ pPIucGAL/IxIEVTMwoMPx+jt2u2RLkjOQxIqbdilpFB4uHF3hmfmJG5g9so3S6yo zIL0XRnBjx/DpNynWgn8kCoOJjflQNs= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:33 2025 by rpki-client