This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: F77E1DDwuOZLd6t9narhri/MGchEYwpUplHBffPK8Ig= Subject key identifier: 9C:7A:EA:6C:86:DD:26:1B:CE:4B:A7:0E:F4:7D:42:AC:70:E5:77:80 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: EF Signing time: Sun 21 Dec 2025 04:32:44 +0000 Manifest this update: Sun 21 Dec 2025 04:32:44 +0000 Manifest next update: Sun 28 Dec 2025 04:32:44 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: ieAWSeIOI5uKf0pAvn58hbGAIizwwwhQNNgyI9pWTSk=) 2: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: RfcMIG1IXwx6pF5vk+cVTv0c/fwzJvqDiir11C+zzpI=) 3: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: gFT3tE7cOKt1wG5K3C0Vr6g5ehw7Cbh9wHU/cKgl+po=) 4: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: OJAV4WkM6x0VNa00vf9C4w5wbjHBK75s7rqnrmFq6U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Dec 21 04:32:44 2025 GMT Not After : Dec 28 04:32:44 2025 GMT Subject: CN=6947786c-28a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:70:c0:ae:ae:7f:87:d6:c5:d7:89:66:ee: d2:51:e2:93:1f:a2:6d:54:5f:49:d5:3a:e5:bb:0d: d5:9b:33:e6:fd:0e:51:c8:c0:b6:b5:ba:4f:fc:e8: e7:63:a9:15:f8:fe:47:af:5d:d1:b4:67:75:c9:35: f4:84:d6:05:79:b7:70:ff:e6:cc:1d:33:09:18:86: a5:22:2b:5b:29:75:0d:0e:c9:91:0b:09:46:be:fa: ae:a3:c8:7c:ec:c4:81:da:8f:16:f9:84:e6:4b:81: 46:72:8e:ce:5a:df:e1:9d:f8:3b:e8:fe:cc:26:e8: e9:50:2d:b6:aa:c1:70:a1:98:c8:a9:59:f8:37:c2: 4d:04:08:f3:b5:55:dd:83:f9:71:65:72:fa:f1:f5: 42:1b:73:9a:a3:18:b1:11:66:f4:c4:d4:46:5e:d0: b3:a4:d2:53:82:30:2c:21:82:07:ed:02:fd:41:62: 08:df:e9:b1:bf:a2:e9:1c:d7:d2:ae:27:ef:e3:83: 26:da:db:61:5e:8d:20:93:c8:34:81:d6:e7:b4:98: 16:5d:72:09:30:8c:ba:a1:48:0c:f0:29:3f:02:49: 63:85:72:53:ec:77:79:b0:89:87:52:bd:4e:36:6f: b1:25:71:b5:17:53:e1:68:04:50:0f:8b:45:e2:af: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7A:EA:6C:86:DD:26:1B:CE:4B:A7:0E:F4:7D:42:AC:70:E5:77:80 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c7:04:e1:d6:18:a4:fd:72:8a:c8:74:3e:6a:e3:74:48:f7: 99:0a:2f:34:d4:46:6e:00:06:f5:0e:29:72:64:e8:1f:b1:2d: 93:8d:fc:ab:e5:bf:99:b5:57:40:51:89:d4:7b:47:bb:4b:e8: cf:67:20:e3:4d:05:73:ef:f7:2a:4b:97:07:c6:83:90:49:54: 1e:b4:20:fc:38:67:51:ea:1e:91:26:81:8c:84:2c:36:ad:d3: 85:2d:86:4e:de:6e:21:f6:bc:3f:82:71:f2:8c:48:6e:e4:f4: 68:1d:8d:5c:4a:d2:d6:85:17:33:9d:93:c2:23:97:17:ae:c6: 63:d5:66:b5:c6:93:46:8d:de:07:78:f7:1a:dc:16:18:c1:74: ab:53:7f:a0:e7:40:99:7b:35:ab:6c:2c:09:4f:43:34:68:63: 73:32:2a:0d:82:58:fb:dd:e1:99:18:6a:59:16:aa:1e:3e:d6: 38:6d:c5:3b:84:5f:e9:fc:c6:73:f8:ba:e9:4d:47:ce:9c:00: 1a:76:96:3a:4c:25:1d:d1:ab:0b:17:84:22:24:33:f0:57:cd: f4:88:af:a7:e4:7a:7f:a7:72:b8:bb:18:b5:39:99:e4:36:b6: 13:00:00:13:19:99:de:34:39:38:3f:85:8e:fa:a5:7a:25:5b: f5:3b:b2:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUxMjIxMDQzMjQ0WhcNMjUxMjI4MDQzMjQ0WjAYMRYwFAYD VQQDDA02OTQ3Nzg2Yy0yOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq5wwK6uf4fWxdeJZu7SUeKTH6JtVF9J1Trluw3VmzPm/Q5RyMC2tbpP/Ojn Y6kV+P5Hr13RtGd1yTX0hNYFebdw/+bMHTMJGIalIitbKXUNDsmRCwlGvvquo8h8 7MSB2o8W+YTmS4FGco7OWt/hnfg76P7MJujpUC22qsFwoZjIqVn4N8JNBAjztVXd g/lxZXL68fVCG3OaoxixEWb0xNRGXtCzpNJTgjAsIYIH7QL9QWII3+mxv6LpHNfS rifv44Mm2tthXo0gk8g0gdbntJgWXXIJMIy6oUgM8Ck/AkljhXJT7Hd5sImHUr1O Nm+xJXG1F1PhaARQD4tF4q/6ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJx66myG 3SYbzkunDvR9Qqxw5XeAMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaxwTh1hik/XKKyHQ+auN0SPeZCi801EZuAAb1DilyZOgfsS2Tjfyr 5b+ZtVdAUYnUe0e7S+jPZyDjTQVz7/cqS5cHxoOQSVQetCD8OGdR6h6RJoGMhCw2 rdOFLYZO3m4h9rw/gnHyjEhu5PRoHY1cStLWhRcznZPCI5cXrsZj1Wa1xpNGjd4H ePca3BYYwXSrU3+g50CZezWrbCwJT0M0aGNzMioNglj73eGZGGpZFqoePtY4bcU7 hF/p/MZz+LrpTUfOnAAadpY6TCUd0asLF4QiJDPwV830iK+n5Hp/p3K4uxi1OZnk NrYTAAATGZneNDk4P4WO+qV6JVv1O7KL -----END CERTIFICATE-----Generated at Sun Dec 21 17:54:32 2025 by rpki-client