This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json) Hash identifier: rUfF0rTU9sAXPQcEFrIJXROY/reDCP7n9qLFvTw92ic= Subject key identifier: 4C:64:45:AC:45:BA:04:71:00:72:F9:8E:ED:73:88:7A:EB:87:9F:E2 Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft Manifest number: AC Signing time: Fri 19 Dec 2025 05:18:44 +0000 Manifest this update: Fri 19 Dec 2025 05:18:43 +0000 Manifest next update: Fri 26 Dec 2025 05:18:43 +0000 Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: XoHcKoXJegRco5mUrQ0p14VKPEsUg/UyLmKI44RwOe8=) 2: 1BE631B0668C11F092BB0479C4F9AE02.roa (hash: +RhAbNo/D383SiAPxxNaU93kgislLiW5JgaMp61Et+s=) 3: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: 5kn9FhpcD7D1t2P/JHjtJqDW2vPt9hT35/pvgbXUmgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Validity Not Before: Dec 19 05:18:43 2025 GMT Not After : Dec 26 05:18:43 2025 GMT Subject: CN=6944e034-7b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:35:1a:57:1a:97:1b:5d:48:3d:a4:19:39: 50:af:bf:d3:76:2e:b9:83:a2:c0:64:c6:8e:e2:2f: c4:d3:23:bc:b3:71:d7:fc:e5:48:a5:c6:49:92:12: 6d:41:3a:3f:8f:1b:cd:52:1c:0d:f6:f4:b8:3d:db: 20:4c:74:c0:37:c1:ad:57:06:80:e3:59:3d:7a:a4: f1:30:7b:ed:cb:ed:74:c0:8d:7e:a0:d1:08:d9:76: 34:ed:40:5b:58:4a:7e:c6:8e:84:06:4a:df:43:38: d3:14:1f:82:c3:38:ec:5a:ea:4c:7b:02:a7:f0:ee: 89:58:13:e2:98:39:b8:94:a7:52:ba:0e:cf:33:0a: 45:69:7d:ce:9d:86:7c:ea:be:df:ca:5a:3c:33:81: 67:8b:cc:a3:18:29:58:72:75:5a:38:ce:f2:a6:68: 67:06:fc:95:bc:e0:a2:72:de:57:55:e1:89:69:7a: 4a:1e:f6:a5:b6:cf:5b:ab:b7:65:98:4d:9c:b4:2d: 3d:96:b7:58:d8:8a:a5:51:8a:8f:3c:ca:92:55:be: fc:e9:19:a6:9b:17:f0:a5:da:0a:ee:26:6f:a8:76: d1:e5:3b:e6:7b:88:be:14:53:df:15:29:df:1c:a9: a7:9b:d2:9e:b1:af:0d:61:ec:0d:d3:56:57:c2:54: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:64:45:AC:45:BA:04:71:00:72:F9:8E:ED:73:88:7A:EB:87:9F:E2 X509v3 Authority Key Identifier: keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8d:73:09:fa:46:5e:4c:d9:3b:bd:54:f6:1a:67:b0:3d:2b: d5:f1:4b:92:39:ee:ee:aa:bf:35:47:19:e7:06:cf:25:a1:23: d1:20:51:58:bf:c5:b1:62:d2:b8:78:fb:9f:7f:26:46:72:bf: 00:ce:13:8f:a4:3c:d4:5b:74:8c:b9:3d:09:69:83:bd:53:f7: 98:b0:b2:72:9f:c4:e9:4b:e4:8e:67:d6:6f:a1:b3:b7:f4:8d: cc:02:2e:6a:94:a1:3c:60:f9:4e:9c:03:51:b0:e6:bb:88:1b: c8:b6:93:21:a8:74:b6:c2:91:dd:f8:ae:87:24:c8:6a:0c:02: 13:05:4a:62:33:39:87:ec:c8:5d:af:58:03:2c:b0:e0:f1:d4: 44:f4:c2:d5:59:a8:e6:c4:03:53:02:ce:f4:7a:83:4a:10:90: 8c:b7:e9:72:2f:44:c1:47:86:06:04:d5:ed:12:bb:fc:3d:86: b4:b0:f5:95:0d:7d:b2:88:03:34:ce:a6:34:6a:90:96:59:c6: 24:9f:4d:13:10:8d:07:65:0e:cb:8c:d3:24:f5:43:9e:a4:c8: 3d:7c:4d:47:53:18:99:ce:00:1c:de:30:e6:be:2e:ae:bf:e7: 06:8b:6b:15:47:a0:d0:e2:c5:87:02:f7:4a:32:df:59:7e:db: b3:71:3c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBNDYxMTAvBgNVBAUTKEE4OEVFMjNGRjhENzA4MjhDRURCQzcwMUU3OEM4MDc0 N0ZGQzExQ0EwHhcNMjUxMjE5MDUxODQzWhcNMjUxMjI2MDUxODQzWjAYMRYwFAYD VQQDDA02OTQ0ZTAzNC03YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7J41GlcalxtdSD2kGTlQr7/Tdi65g6LAZMaO4i/E0yO8s3HX/OVIpcZJkhJt QTo/jxvNUhwN9vS4PdsgTHTAN8GtVwaA41k9eqTxMHvty+10wI1+oNEI2XY07UBb WEp+xo6EBkrfQzjTFB+CwzjsWupMewKn8O6JWBPimDm4lKdSug7PMwpFaX3OnYZ8 6r7fylo8M4Fni8yjGClYcnVaOM7ypmhnBvyVvOCict5XVeGJaXpKHvalts9bq7dl mE2ctC09lrdY2IqlUYqPPMqSVb786RmmmxfwpdoK7iZvqHbR5Tvme4i+FFPfFSnf HKmnm9Kesa8NYewN01ZXwlTKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExkRaxF ugRxAHL5ju1ziHrrh5/iMB8GA1UdIwQYMBaAFKiO4j/41wgoztvHAeeMgHR//BHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEE0Ni9ENjRFNUE3RURD ODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWENDak8yOGNCNTR5QWRIXzhF Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEE0Ni9ENjRFNUE3RURDODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWEND ak8yOGNCNTR5QWRIXzhFY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBojXMJ+kZeTNk7vVT2GmewPSvV8UuSOe7uqr81RxnnBs8loSPRIFFY v8WxYtK4ePuffyZGcr8AzhOPpDzUW3SMuT0JaYO9U/eYsLJyn8TpS+SOZ9ZvobO3 9I3MAi5qlKE8YPlOnANRsOa7iBvItpMhqHS2wpHd+K6HJMhqDAITBUpiMzmH7Mhd r1gDLLDg8dRE9MLVWajmxANTAs70eoNKEJCMt+lyL0TBR4YGBNXtErv8PYa0sPWV DX2yiAM0zqY0apCWWcYkn00TEI0HZQ7LjNMk9UOepMg9fE1HUxiZzgAc3jDmvi6u v+cGi2sVR6DQ4sWHAvdKMt9ZftuzcTyO -----END CERTIFICATE-----Generated at Fri Dec 19 17:32:39 2025 by rpki-client