This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json) Hash identifier: izmv7/So4NCZoPKOzmLEMnm2ptKINg0g+3m8lN3hllI= Subject key identifier: 84:06:9B:4C:48:CF:18:B8:77:75:7E:11:5E:AA:8A:74:10:8B:3A:52 Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Certificate serial: 0DB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft Manifest number: 0DAF Signing time: Mon 22 Dec 2025 17:32:28 +0000 Manifest this update: Mon 22 Dec 2025 17:32:27 +0000 Manifest next update: Mon 29 Dec 2025 17:32:27 +0000 Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: liVeF8bQh0OsXp/mwFfz0hr06ylYkDB44u/7I7LgaP4=) 2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: D+ULNvDKVlD7JVj0dgqxkA98GxkgF1Daq5+neqboohk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Validity Not Before: Dec 22 17:32:27 2025 GMT Not After : Dec 29 17:32:27 2025 GMT Subject: CN=694980ab-332c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:b7:cf:c9:5b:16:4f:ff:60:72:18:26:d5: 7a:e5:7c:b4:fd:a4:f2:ad:27:c3:a8:fb:53:ee:fe: cf:56:89:fe:9a:08:d1:33:4d:98:c0:b9:67:ee:9e: 46:3f:be:a9:3a:74:7a:cf:86:fa:16:43:9f:b2:2f: 4c:9f:56:84:e2:3b:cf:a4:8c:61:50:53:d8:87:0c: 3f:ca:f2:3a:9a:33:7f:9c:c0:79:d3:b2:11:bf:4f: c1:7e:7d:98:f7:38:c2:bb:b5:3a:27:90:b8:69:56: 81:3d:2d:04:29:73:f5:47:26:24:1e:3f:a2:1d:c3: e6:20:96:bc:63:ff:c9:bc:71:c7:48:0f:03:16:3c: 17:3b:29:f9:1e:3e:15:a3:0c:bc:95:de:77:c9:8f: 38:3c:5a:df:8d:f9:8c:4d:1a:49:5e:eb:7d:8e:e3: b5:57:66:9d:0b:1e:aa:a8:45:1d:a9:cc:9e:4e:95: 94:08:9a:af:ea:59:79:9d:6a:26:d9:95:42:b1:0c: d3:04:95:84:07:b0:6e:71:c3:38:c7:91:e8:4d:a6: 00:5e:e2:a8:d7:a2:13:d9:df:2b:46:de:e7:7c:84: d0:3f:c3:1c:13:e6:ff:5a:37:fb:ec:b7:6d:83:06: 9c:33:66:71:ed:37:a3:c7:d5:2a:d9:c7:c0:d6:68: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:06:9B:4C:48:CF:18:B8:77:75:7E:11:5E:AA:8A:74:10:8B:3A:52 X509v3 Authority Key Identifier: keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6b:e6:5b:b1:33:fb:9d:42:3d:e6:a0:84:58:51:c4:73:ec: 5f:55:37:32:4f:74:30:f0:1d:2f:1a:37:c8:c4:31:be:ad:13: c0:fd:3b:05:a5:23:56:fd:4c:f9:a7:a5:4b:44:f9:92:fc:bd: 41:23:40:a9:73:72:52:4c:8a:6a:d9:74:09:7b:0b:75:b4:de: 1d:b6:cf:cf:06:1d:ea:fe:0e:66:a8:8d:fe:7f:25:d0:7a:67: 99:13:7d:33:40:28:c1:15:8f:06:d5:d8:ec:47:64:bc:8b:c0: e3:76:be:12:f5:a9:b8:5a:f3:b8:b4:83:25:15:ab:98:eb:65: ad:fa:fc:34:09:de:eb:bf:20:92:a2:fb:04:8c:ec:81:0d:9c: 70:af:ac:04:81:35:09:62:a5:22:49:be:8e:d9:e6:5b:f9:7e: 80:0f:0f:5f:50:ab:83:e6:70:56:e4:b8:2f:dc:25:a2:d2:5c: c6:85:6e:a1:c4:a5:e2:57:c0:41:7b:98:a0:cb:e1:5c:5d:fb: 88:9f:df:1f:33:5f:1c:37:38:79:b2:96:cf:51:11:36:f1:99: ab:e6:1e:29:6d:cb:97:b4:bc:76:2e:3f:70:bb:0a:3f:e7:49: 19:ed:d9:51:b2:7c:0a:c6:c2:bd:b8:7d:5c:25:96:7f:ca:9b: d4:d4:1a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODQxMTAvBgNVBAUTKDQzNUJERjkzMDMwNDE5NEEwODY5QURFRTg3QTBCNTU2 QzU4OEY2RjQwHhcNMjUxMjIyMTczMjI3WhcNMjUxMjI5MTczMjI3WjAYMRYwFAYD VQQDDA02OTQ5ODBhYi0zMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1S3z8lbFk//YHIYJtV65Xy0/aTyrSfDqPtT7v7PVon+mgjRM02YwLln7p5G P76pOnR6z4b6FkOfsi9Mn1aE4jvPpIxhUFPYhww/yvI6mjN/nMB507IRv0/Bfn2Y 9zjCu7U6J5C4aVaBPS0EKXP1RyYkHj+iHcPmIJa8Y//JvHHHSA8DFjwXOyn5Hj4V owy8ld53yY84PFrfjfmMTRpJXut9juO1V2adCx6qqEUdqcyeTpWUCJqv6ll5nWom 2ZVCsQzTBJWEB7BuccM4x5HoTaYAXuKo16IT2d8rRt7nfITQP8McE+b/Wjf77Ldt gwacM2Zx7Tejx9Uq2cfA1miW8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQGm0xI zxi4d3V+EV6qinQQizpSMB8GA1UdIwQYMBaAFENb35MDBBlKCGmt7oegtVbFiPb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4NC82OTI1QkQ4RUQy QzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdVb0lhYTN1aDZDMVZzV0k5 dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExdmZrd01FR1VvSWFhM3VoNkMxVnNXSTl2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4NC82OTI1QkQ4RUQyQzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdV b0lhYTN1aDZDMVZzV0k5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaa+ZbsTP7nUI95qCEWFHEc+xfVTcyT3Qw8B0vGjfIxDG+rRPA/TsF pSNW/Uz5p6VLRPmS/L1BI0Cpc3JSTIpq2XQJewt1tN4dts/PBh3q/g5mqI3+fyXQ emeZE30zQCjBFY8G1djsR2S8i8Djdr4S9am4WvO4tIMlFauY62Wt+vw0Cd7rvyCS ovsEjOyBDZxwr6wEgTUJYqUiSb6O2eZb+X6ADw9fUKuD5nBW5Lgv3CWi0lzGhW6h xKXiV8BBe5igy+FcXfuIn98fM18cNzh5spbPURE28Zmr5h4pbcuXtLx2Lj9wuwo/ 50kZ7dlRsnwKxsK9uH1cJZZ/ypvU1Bog -----END CERTIFICATE-----Generated at Tue Dec 23 15:57:35 2025 by rpki-client