This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: UZhvnwHXaUbYKDYMBqGl7kDS1TM10A2hVLDlQwq0iLA= Subject key identifier: F4:DB:2A:2B:C4:47:8D:A8:AA:DC:B1:BA:D3:15:04:01:0D:DF:60:BF Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 34FB Signing time: Mon 22 Dec 2025 15:04:29 +0000 Manifest this update: Mon 22 Dec 2025 15:04:28 +0000 Manifest next update: Mon 29 Dec 2025 15:04:28 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: ClDveZ/IbgwOU/sw0vogA8MbZWX5MBeK063l6q8BuD8=) 2: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: civYJKjv+rMWikYh4a7W2bxU8PQ81xsHn2H6a66BKGA=) 3: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: 1GPE0tmDURxajWdKamhlkVHlKzzcwIuENfIawaY2hRg=) 4: B1244BD078D011F09BDA6276C4F9AE02.roa (hash: MSd2CPWKWVGP/2LC1J75Fk9P+pL5TkROH7YDMp9XVT0=) 5: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: vA7HKvgBqUtKU6RnBJfYOYMqqSGwytosVz33rGyKDus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13589 (0x3515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Dec 22 15:04:28 2025 GMT Not After : Dec 29 15:04:28 2025 GMT Subject: CN=69495dfd-2140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:14:ac:0e:1f:81:f5:42:00:f7:38:87:c6: c2:f4:81:d9:9e:16:9a:17:65:4d:4b:0e:10:09:af: 31:a6:ed:69:19:52:b8:93:ef:4a:d1:bf:18:97:98: b1:92:34:a3:bb:6d:22:47:1e:ab:39:66:99:79:93: 39:9a:bc:4d:45:f2:b3:89:f8:e4:46:02:75:78:7d: 70:81:27:e5:47:4a:32:0c:a5:0a:85:fd:af:ea:66: 84:ad:b1:07:52:77:b9:ed:2b:46:7e:99:54:a7:40: 25:49:da:c5:3b:f1:55:c2:e5:a9:2e:53:86:06:f2: af:47:19:d4:85:1c:32:a0:cb:f9:2d:e0:95:9b:ca: 47:86:16:d6:7a:2c:8e:87:05:bb:14:7f:ec:ca:63: 7e:51:c6:be:f1:37:03:b0:0c:22:c0:02:20:fc:25: f1:5c:0f:bd:a0:b3:68:71:fe:ec:51:c2:b1:97:ef: ac:83:c0:77:aa:30:3a:9f:d5:65:5d:3c:dd:39:ce: 00:0b:ff:02:5c:24:79:9b:f3:c9:62:4d:e7:89:9c: 9d:bf:1d:cc:94:ae:35:87:15:d2:eb:df:ae:fa:b4: 41:d8:3c:99:84:af:87:09:08:79:c4:c4:2a:0e:d6: 9f:2e:c8:e5:d5:65:48:9d:c1:ad:28:2d:2d:1f:9e: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:2A:2B:C4:47:8D:A8:AA:DC:B1:BA:D3:15:04:01:0D:DF:60:BF X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:33:c1:d2:bd:54:91:d1:ed:83:44:35:02:70:3d:5d:51:08: 27:dd:aa:9e:30:3f:35:a8:2d:67:76:50:84:ad:60:9f:e9:85: 52:6d:b3:e5:26:c2:98:62:b2:63:73:ae:46:e3:12:c2:7f:af: 31:cb:c2:a7:12:4f:3e:5b:6c:a2:ea:d0:7e:85:e7:9e:d9:b0: 63:26:91:50:13:9c:43:69:a6:97:9f:25:9a:00:ab:45:0b:81: e4:92:63:62:c4:b4:91:0a:9c:70:39:44:d5:02:1e:37:8a:eb: 9c:3b:16:27:32:6f:49:07:61:a1:58:79:ba:83:e7:4f:ba:85: 98:58:39:ae:00:59:79:07:77:39:92:62:36:90:52:31:69:43: e8:08:c9:aa:7b:9b:f4:6f:ec:b2:f1:e8:94:2b:aa:1a:d1:5f: 79:03:da:0c:3e:bc:2e:75:10:cf:f0:9a:d9:ea:7e:f9:d8:17: 5e:68:d0:af:e0:fb:4d:f7:7a:69:70:ac:53:67:45:7d:26:52: fd:dd:ef:28:1e:a6:9c:9f:c1:fc:84:7f:4b:25:05:79:dc:81: af:0a:2d:af:a6:c3:25:31:b8:90:a2:dd:3f:3c:e7:46:20:e5: 25:1e:ab:77:47:eb:f6:7a:d8:d0:ee:df:cb:0b:0f:aa:dc:dd: 63:e8:e5:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUxMjIyMTUwNDI4WhcNMjUxMjI5MTUwNDI4WjAYMRYwFAYD VQQDDA02OTQ5NWRmZC0yMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8kUrA4fgfVCAPc4h8bC9IHZnhaaF2VNSw4QCa8xpu1pGVK4k+9K0b8Yl5ix kjSju20iRx6rOWaZeZM5mrxNRfKzifjkRgJ1eH1wgSflR0oyDKUKhf2v6maErbEH Une57StGfplUp0AlSdrFO/FVwuWpLlOGBvKvRxnUhRwyoMv5LeCVm8pHhhbWeiyO hwW7FH/symN+Uca+8TcDsAwiwAIg/CXxXA+9oLNocf7sUcKxl++sg8B3qjA6n9Vl XTzdOc4AC/8CXCR5m/PJYk3niZydvx3MlK41hxXS69+u+rRB2DyZhK+HCQh5xMQq DtafLsjl1WVIncGtKC0tH57ugQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTbKivE R42oqtyxutMVBAEN32C/MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxM8HSvVSR0e2DRDUCcD1dUQgn3aqeMD81qC1ndlCErWCf6YVSbbPl JsKYYrJjc65G4xLCf68xy8KnEk8+W2yi6tB+heee2bBjJpFQE5xDaaaXnyWaAKtF C4HkkmNixLSRCpxwOUTVAh43iuucOxYnMm9JB2GhWHm6g+dPuoWYWDmuAFl5B3c5 kmI2kFIxaUPoCMmqe5v0b+yy8eiUK6oa0V95A9oMPrwudRDP8JrZ6n752BdeaNCv 4PtN93ppcKxTZ0V9JlL93e8oHqacn8H8hH9LJQV53IGvCi2vpsMlMbiQot0/POdG IOUlHqt3R+v2etjQ7t/LCw+q3N1j6OVC -----END CERTIFICATE-----Generated at Tue Dec 23 00:05:40 2025 by rpki-client