This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: TwMBovmGH4JxlbZwKePyRtngGeHV7LlT0NK14h1nzsw= Subject key identifier: 28:5A:AE:1B:39:47:49:0F:76:17:03:76:99:59:69:5D:E8:9A:3F:B1 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 95 Signing time: Sun 07 Dec 2025 04:40:09 +0000 Manifest this update: Sun 07 Dec 2025 04:40:08 +0000 Manifest next update: Sun 14 Dec 2025 04:40:08 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: IQKqdhRpGFkPox/hTiqzP3zz1DRDh+qpQDbh4EZJ6pU=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: Vaj7yoUJUzeUA3126kxNxsmUyuPrhpFqRcjaAWEYWYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Dec 7 04:40:08 2025 GMT Not After : Dec 14 04:40:08 2025 GMT Subject: CN=69350529-4808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:4c:33:a6:55:01:5d:39:ad:a4:f2:51:9b: bd:78:bc:ae:ca:61:b5:be:53:96:7f:c3:bd:9e:cb: a4:f7:80:5e:7d:4c:f6:5d:90:b1:c8:99:3a:29:65: 07:f5:bf:7e:2b:58:36:7a:0d:e4:70:f0:ae:d3:76: fc:0a:63:1c:1d:cf:b0:7d:d9:53:01:dd:ae:14:7a: 3a:74:59:39:f9:20:d5:e8:50:38:af:7b:19:5a:7b: 00:a3:4b:e3:c2:fc:f6:51:e8:5a:42:d6:7f:99:80: 5e:58:9e:0b:b9:82:6e:6a:d9:d2:19:ce:bc:43:2c: 51:3b:e7:f4:88:09:93:75:49:07:95:aa:9a:4d:ca: 6a:4a:8e:ce:14:98:5a:03:8c:21:b1:43:73:9a:04: 85:3a:8f:75:fa:a1:eb:d5:a9:de:9e:bf:ce:57:01: 99:b0:e1:a4:7c:85:7c:ba:57:50:77:f8:a9:0b:21: 42:dd:d4:e7:b2:5e:36:b8:e4:43:6b:4d:f4:2b:f0: 5a:24:85:85:7e:b7:e9:80:f6:f2:b0:38:be:b9:dc: cf:79:6a:f3:1a:47:d3:ae:e0:a3:2d:6d:3a:10:50: fa:bc:b7:f5:02:43:0f:7a:53:b9:9c:6d:0e:e6:b8: 07:d9:bd:bd:89:68:4f:6c:81:a9:c3:cd:78:6b:0e: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:AE:1B:39:47:49:0F:76:17:03:76:99:59:69:5D:E8:9A:3F:B1 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b2:40:69:62:cf:08:ec:b7:5f:65:b8:c5:ba:b0:30:0e:3e: 17:3a:e8:18:ff:fd:78:7e:a3:a5:b5:98:46:65:3a:37:33:f9: 27:eb:95:08:41:23:05:30:e0:61:e7:3a:c3:01:f0:e4:15:3c: b6:c0:10:4d:50:d6:67:1a:72:34:c5:43:9a:d5:d3:b8:42:11: cf:d9:50:6b:0d:d9:69:52:0d:9b:e4:b6:a0:76:5d:34:b9:40: 58:78:c7:85:61:d5:4d:f1:0c:0c:8e:3b:bd:55:83:01:9e:1b: f8:82:37:e9:6c:81:8f:00:12:a9:95:e1:5f:13:a8:f6:40:51: a2:6b:70:8e:d9:c7:fb:78:f3:98:97:ff:54:58:aa:ab:5a:3b: 27:73:ed:b3:ec:3f:93:b2:c3:aa:79:02:1a:27:7c:74:57:49: 86:58:5e:e1:89:bb:ae:65:eb:5c:2e:a6:0c:75:7d:5c:b2:8b: 5c:a9:9b:a6:a8:91:e4:2e:c7:61:f4:17:16:60:fc:5a:9b:4f: 0b:b4:31:24:e0:19:2b:1c:0a:72:5e:8e:fb:57:50:e8:d0:4e: 9d:7d:42:9f:a5:76:bb:58:45:b6:ff:e4:4c:09:c6:b9:4c:bf: c5:71:37:75:6c:08:cc:a7:5c:37:17:fc:ff:93:ed:6e:01:1f: 51:c4:d3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjUxMjA3MDQ0MDA4WhcNMjUxMjE0MDQ0MDA4WjAYMRYwFAYD VQQDEw02OTM1MDUyOS00ODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jJMM6ZVAV05raTyUZu9eLyuymG1vlOWf8O9nsuk94BefUz2XZCxyJk6KWUH 9b9+K1g2eg3kcPCu03b8CmMcHc+wfdlTAd2uFHo6dFk5+SDV6FA4r3sZWnsAo0vj wvz2UehaQtZ/mYBeWJ4LuYJuatnSGc68QyxRO+f0iAmTdUkHlaqaTcpqSo7OFJha A4whsUNzmgSFOo91+qHr1anenr/OVwGZsOGkfIV8uldQd/ipCyFC3dTnsl42uORD a030K/BaJIWFfrfpgPbysDi+udzPeWrzGkfTruCjLW06EFD6vLf1AkMPelO5nG0O 5rgH2b29iWhPbIGpw814aw6O+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCharhs5 R0kPdhcDdplZaV3omj+xMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZskBpYs8I7LdfZbjFurAwDj4XOugY//14fqOltZhGZTo3M/kn65UI QSMFMOBh5zrDAfDkFTy2wBBNUNZnGnI0xUOa1dO4QhHP2VBrDdlpUg2b5Lagdl00 uUBYeMeFYdVN8QwMjju9VYMBnhv4gjfpbIGPABKpleFfE6j2QFGia3CO2cf7ePOY l/9UWKqrWjsnc+2z7D+TssOqeQIaJ3x0V0mGWF7hibuuZetcLqYMdX1csotcqZum qJHkLsdh9BcWYPxam08LtDEk4BkrHApyXo77V1Do0E6dfUKfpXa7WEW2/+RMCca5 TL/FcTd1bAjMp1w3F/z/k+1uAR9RxNPg -----END CERTIFICATE-----Generated at Mon Dec 8 06:23:06 2025 by rpki-client