This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: kRlpe9favixiWgLpYFFJbQMbbQVit7olB4eR/t+WWXo= Subject key identifier: 83:77:C2:28:D2:FC:1E:5D:46:07:CB:4C:6E:06:D3:82:13:D4:60:5F Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 36B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 35E4 Signing time: Sat 06 Dec 2025 14:25:58 +0000 Manifest this update: Sat 06 Dec 2025 14:25:58 +0000 Manifest next update: Sat 13 Dec 2025 14:25:58 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: 0BZVzNKrHPoItNbwuvOw4ZOuFn05f22BThcNpQ2E4n0=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: uDX3snF5KOLhQFZJb9NS91kFKiMHEVAq6if3Xq1rgsY=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: +oczTLjRD/tYfsYBFtIa6eRmdxZaKTBLayvz3HoGlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14008 (0x36b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Dec 6 14:25:58 2025 GMT Not After : Dec 13 14:25:58 2025 GMT Subject: CN=69343cf6-5217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:03:fd:cf:e9:e2:4d:65:d7:33:0a:80:1a: fd:4f:62:2a:af:e5:71:9a:08:c5:3e:d9:1a:13:a9: bd:3e:61:4d:2b:bb:aa:ac:59:5d:46:a9:23:66:e4: 26:2a:f9:31:e8:b5:11:da:aa:03:27:d4:a5:41:30: cd:05:1b:54:b0:f7:f4:74:00:4f:79:a5:4e:83:cf: 6a:93:24:9e:c4:33:d9:fb:47:e0:8c:8b:6b:5e:5b: 14:a6:40:5f:77:92:d7:ce:78:b5:67:bf:4b:e6:c3: 8b:f7:6e:1e:5d:dc:0a:14:e7:28:22:6e:6c:a1:9c: 5f:f9:dc:63:d4:40:97:a4:31:ee:d7:7c:88:42:68: ed:d3:11:74:69:fa:c3:91:e6:89:34:25:e1:5c:46: ee:3a:66:74:27:22:4d:c4:d7:5f:a5:41:3c:1c:2a: 80:3e:e6:e5:91:20:16:c8:69:04:dc:05:7b:e2:7f: 73:b8:64:3e:ad:fa:e2:26:b1:93:e4:17:fa:c4:2f: f8:b5:d5:f2:e8:0c:59:03:bd:ac:5b:63:a0:c4:8a: 9c:d9:aa:06:5a:ed:f6:aa:11:27:9b:1a:f9:db:f5: c2:ff:b1:ab:98:61:d5:ee:3c:58:55:9f:a8:53:77: 4e:ae:7f:41:3c:c9:50:98:f0:35:87:be:c9:84:db: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:C2:28:D2:FC:1E:5D:46:07:CB:4C:6E:06:D3:82:13:D4:60:5F X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:a2:30:9f:36:b7:3d:c2:c8:3c:35:66:bb:cf:e8:c1:b4:fe: 61:8b:af:9b:0f:51:6d:0a:eb:9f:05:e9:43:c1:ab:d3:15:33: 61:de:fe:8b:93:0e:78:d3:ac:15:d9:e4:32:26:df:0b:09:bd: 45:f0:89:e6:b7:2c:63:cf:8a:6a:53:6e:0b:47:b0:03:ff:e0: ad:02:9f:52:97:a9:b6:70:f2:b5:46:25:7b:69:28:ee:cd:f6: 5a:25:55:d8:ec:5f:4d:16:ae:b8:c9:de:6a:56:71:b1:ff:32: cf:42:df:5f:10:79:ca:08:1c:41:b7:ec:09:15:52:c5:7b:c9: e2:47:b3:f5:09:ef:c3:2f:f6:bd:53:3b:62:56:c6:07:a9:84: 47:47:36:ad:ba:25:d8:3e:d1:ad:74:25:41:35:41:cd:4d:ec: ce:4c:fb:38:b9:20:5d:38:8b:d5:76:71:ae:65:e1:a6:c0:b5: 9d:0b:b2:07:d1:40:4f:2f:76:3c:bd:70:d5:09:87:81:49:a1: 67:0f:b1:e9:36:e4:ee:3e:cd:ed:02:e0:b9:70:11:b8:f2:b0: 58:3b:82:d7:be:42:24:8d:43:81:24:90:65:02:d9:de:2e:dd: 70:71:c7:89:bc:66:bb:74:a1:b0:ac:62:13:1c:db:d4:f7:2e: 7b:b9:14:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUxMjA2MTQyNTU4WhcNMjUxMjEzMTQyNTU4WjAYMRYwFAYD VQQDEw02OTM0M2NmNi01MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhsD/c/p4k1l1zMKgBr9T2Iqr+VxmgjFPtkaE6m9PmFNK7uqrFldRqkjZuQm Kvkx6LUR2qoDJ9SlQTDNBRtUsPf0dABPeaVOg89qkySexDPZ+0fgjItrXlsUpkBf d5LXzni1Z79L5sOL924eXdwKFOcoIm5soZxf+dxj1ECXpDHu13yIQmjt0xF0afrD keaJNCXhXEbuOmZ0JyJNxNdfpUE8HCqAPublkSAWyGkE3AV74n9zuGQ+rfriJrGT 5Bf6xC/4tdXy6AxZA72sW2OgxIqc2aoGWu32qhEnmxr52/XC/7GrmGHV7jxYVZ+o U3dOrn9BPMlQmPA1h77JhNuYvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN3wijS /B5dRgfLTG4G04IT1GBfMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/ojCfNrc9wsg8NWa7z+jBtP5hi6+bD1FtCuufBelDwavTFTNh3v6L kw5406wV2eQyJt8LCb1F8Inmtyxjz4pqU24LR7AD/+CtAp9Sl6m2cPK1RiV7aSju zfZaJVXY7F9NFq64yd5qVnGx/zLPQt9fEHnKCBxBt+wJFVLFe8niR7P1Ce/DL/a9 UztiVsYHqYRHRzatuiXYPtGtdCVBNUHNTezOTPs4uSBdOIvVdnGuZeGmwLWdC7IH 0UBPL3Y8vXDVCYeBSaFnD7HpNuTuPs3tAuC5cBG48rBYO4LXvkIkjUOBJJBlAtne Lt1wcceJvGa7dKGwrGITHNvU9y57uRR/ -----END CERTIFICATE-----Generated at Sun Dec 7 13:50:25 2025 by rpki-client