This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: 8rWLNJFeUQ1c2s3GtJoGmitvkaC8zDx0jMM090ucMsQ= Subject key identifier: 51:A2:9F:6F:AE:AC:D9:A2:41:2F:E2:6A:E1:B1:D3:CF:D6:C1:95:C8 Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: 012F Signing time: Tue 23 Dec 2025 03:36:55 +0000 Manifest this update: Tue 23 Dec 2025 03:36:54 +0000 Manifest next update: Tue 30 Dec 2025 03:36:54 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: hHH33Avq/3JOIXggLLlTskTybFhc9mMr7TWrFmZXzxA=) 2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: 1KiFLWub5BHrSO0tUJ2uOHpJ+a6PoNSbEd3Z8qezbIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Dec 23 03:36:54 2025 GMT Not After : Dec 30 03:36:54 2025 GMT Subject: CN=694a0e57-5e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:ed:7f:92:b5:90:78:54:53:e2:34:64:51: 1d:fa:8b:73:47:55:38:ab:6c:b5:c4:ec:51:d2:b8: d6:31:b0:8b:ce:a3:92:94:2d:f9:38:6a:ed:9d:68: a5:b7:f9:8c:48:ca:d8:f8:9c:05:53:b5:bb:d0:0d: ee:a0:19:28:32:8d:ed:2b:eb:cf:fb:10:99:ba:6d: 61:dd:fb:86:c9:ca:53:6d:04:ac:70:3d:f1:28:f3: 99:cb:dc:35:29:aa:0f:e6:9c:9b:27:9b:ea:49:42: 25:43:39:2f:c7:8e:a3:15:7d:36:5e:ba:db:05:e8: 33:c4:97:d0:88:14:05:dd:06:d3:fc:50:d4:15:2e: 69:d3:3e:57:c0:3b:41:de:11:a2:e1:ef:c1:5d:70: 78:97:1c:04:40:1c:dc:40:6b:1c:65:38:c8:de:ee: 9a:18:b4:28:aa:b8:b6:22:f3:76:bb:81:7e:e3:9d: 61:75:aa:35:28:c9:da:0d:0c:05:45:72:24:b2:43: c5:c9:40:e9:99:6d:41:24:7c:8e:ec:c4:65:f5:e6: 94:79:a3:f1:07:68:39:98:40:d7:3b:51:c6:e6:6a: 55:48:a8:7b:45:89:bc:a9:04:e6:8a:a4:c7:6c:c1: 4f:25:59:e5:35:0f:da:c8:84:31:a1:8e:5a:5f:d2: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A2:9F:6F:AE:AC:D9:A2:41:2F:E2:6A:E1:B1:D3:CF:D6:C1:95:C8 X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:29:c4:dd:da:b2:34:3b:20:7e:9b:45:7a:f7:09:d1:94:61: 89:16:b2:8d:2b:f4:89:42:d5:09:53:bd:33:56:4e:a7:d1:af: 17:50:98:26:2a:a5:ad:06:54:19:57:b7:b0:50:50:04:b5:36: f7:88:89:a6:ce:7f:48:5f:c6:49:4b:6a:c7:24:92:74:50:4f: a8:e2:f7:ed:4b:62:5c:c4:25:5e:ca:51:98:61:fe:fb:1a:3a: 40:1f:01:0f:88:39:c7:5e:d1:18:e3:f8:87:42:3b:12:69:f6: 79:6f:14:1a:58:1e:49:1f:f3:ba:fd:6e:4e:9e:fd:8c:fa:39: 56:9f:08:a8:3a:b4:9f:8d:e7:58:22:16:d9:43:62:cd:49:d4: a3:e8:38:14:1e:25:34:8f:7d:56:d9:79:e5:40:4c:b5:e6:aa: 77:e3:73:a3:24:a3:14:56:94:7a:e2:71:d2:4f:25:b7:59:ba: 38:eb:44:90:09:2d:1c:43:82:62:41:31:19:22:c1:b5:a6:b8: 30:0e:9c:75:e7:1b:75:02:77:69:6c:d5:3b:a3:da:59:a1:56: 67:62:0a:71:ec:bd:b2:f1:a6:e1:5d:81:8c:ab:f0:e5:49:be: 45:d6:f4:ec:1f:45:b2:5e:2f:7f:fb:93:68:e1:1b:25:0f:a7: 08:57:4d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUxMjIzMDMzNjU0WhcNMjUxMjMwMDMzNjU0WjAYMRYwFAYD VQQDDA02OTRhMGU1Ny01ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0ntf5K1kHhUU+I0ZFEd+otzR1U4q2y1xOxR0rjWMbCLzqOSlC35OGrtnWil t/mMSMrY+JwFU7W70A3uoBkoMo3tK+vP+xCZum1h3fuGycpTbQSscD3xKPOZy9w1 KaoP5pybJ5vqSUIlQzkvx46jFX02XrrbBegzxJfQiBQF3QbT/FDUFS5p0z5XwDtB 3hGi4e/BXXB4lxwEQBzcQGscZTjI3u6aGLQoqri2IvN2u4F+451hdao1KMnaDQwF RXIkskPFyUDpmW1BJHyO7MRl9eaUeaPxB2g5mEDXO1HG5mpVSKh7RYm8qQTmiqTH bMFPJVnlNQ/ayIQxoY5aX9KcSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGin2+u rNmiQS/iauGx08/WwZXIMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKKcTd2rI0OyB+m0V69wnRlGGJFrKNK/SJQtUJU70zVk6n0a8XUJgm KqWtBlQZV7ewUFAEtTb3iImmzn9IX8ZJS2rHJJJ0UE+o4vftS2JcxCVeylGYYf77 GjpAHwEPiDnHXtEY4/iHQjsSafZ5bxQaWB5JH/O6/W5Onv2M+jlWnwioOrSfjedY IhbZQ2LNSdSj6DgUHiU0j31W2XnlQEy15qp343OjJKMUVpR64nHSTyW3Wbo460SQ CS0cQ4JiQTEZIsG1prgwDpx15xt1AndpbNU7o9pZoVZnYgpx7L2y8abhXYGMq/Dl Sb5F1vTsH0WyXi9/+5No4RslD6cIV01m -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:07 2025 by rpki-client