This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: 4fw83dLDg65XneLIMwiFr1XSyHSa2Mfq8+OQlULjfDk= Subject key identifier: AE:DC:00:8B:22:05:8E:14:08:56:5D:9C:DF:B4:A7:5F:DA:0E:B3:B6 Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 01C4 Signing time: Fri 19 Dec 2025 02:09:59 +0000 Manifest this update: Fri 19 Dec 2025 02:09:59 +0000 Manifest next update: Fri 26 Dec 2025 02:09:59 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: EFDEl0xgnSTdOjrzWdLg2KEPmCsRLCDvs2n4vS+BL2s=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: 1i3jxewXcc2DZR9rHs9xsLpB1uq+KSefHPQwMlW+krU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Dec 19 02:09:59 2025 GMT Not After : Dec 26 02:09:59 2025 GMT Subject: CN=6944b3f7-aed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:27:46:c8:32:80:7d:9a:7e:2d:ae:05:b6: 3e:d8:10:58:cb:28:75:b1:df:27:52:b8:26:fd:a8: f9:65:15:56:15:de:8b:9b:0b:eb:ea:6d:0c:b0:c7: 86:d0:31:86:8a:85:2f:70:5b:a6:5c:5c:54:e7:53: cb:39:2c:32:b9:b5:e4:6a:ba:aa:19:19:78:d3:22: d0:ea:0f:a1:1c:4d:12:ea:4e:53:38:0b:a5:a5:3a: dd:7d:38:ca:c5:6b:46:d5:18:20:50:72:1d:3a:84: ea:3b:5b:00:e6:e8:8f:c3:5a:ee:14:81:14:c6:3b: 25:23:e6:f1:aa:95:0b:17:e7:e3:9b:dc:60:a3:cc: 5a:13:b1:72:da:48:ea:e7:0a:cc:2d:aa:45:eb:0c: 75:29:af:4a:fc:a5:0f:97:e5:a1:0e:c9:1c:3c:44: c3:2c:fc:4b:3d:c9:54:40:c7:dc:38:64:2b:a8:75: 7c:8d:25:f0:f7:6c:e8:8e:9b:80:43:43:eb:ad:4a: 0a:69:b3:72:8a:9e:d0:32:de:78:30:d9:60:3e:9e: 6a:b4:ce:0c:f5:62:98:57:bc:e6:e4:81:8b:50:0e: ec:73:c4:c4:ac:e8:55:b6:c3:97:cf:df:01:85:54: f7:7f:09:b1:1a:29:24:da:d5:ea:b0:2a:1e:92:ae: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:00:8B:22:05:8E:14:08:56:5D:9C:DF:B4:A7:5F:DA:0E:B3:B6 X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:e1:5e:2c:1b:5b:cd:98:a1:e2:b8:79:e9:95:e4:bc:24:34: 0d:08:e4:3e:6b:0f:74:dd:6d:e9:25:ce:75:da:09:95:6c:52: fb:e7:e1:59:ec:14:03:1c:5c:e4:77:76:9a:3e:1c:51:fe:6f: 5f:25:3c:9e:40:88:03:5c:db:b7:f2:ad:47:5f:fc:43:6d:0a: 59:d4:74:3e:8b:23:41:ae:2b:f0:6a:49:30:97:f7:47:ae:ea: e7:66:4a:bf:f8:10:e7:36:e9:99:a3:04:93:6e:1a:3e:55:21: 61:5d:0c:01:e4:3d:2b:a7:a3:3d:2e:0f:ca:e0:b0:fe:36:cc: b1:b1:77:65:6a:43:69:f9:6e:4e:92:85:cb:77:65:af:9c:2a: 12:c4:2e:2b:8f:70:a8:6d:10:74:26:31:ac:85:39:ce:d2:17: ac:76:ba:fb:78:8e:bf:cf:2d:b6:17:e3:32:05:fb:43:01:33: 70:23:5a:e3:93:e5:c1:d8:b0:4a:7f:e0:62:4c:d5:4a:05:51: eb:04:cb:87:81:4c:44:87:73:95:39:5a:ec:b3:e6:2f:26:f9: 47:3a:aa:95:59:a7:89:3a:ef:8f:84:fd:75:16:71:ce:a7:4b: 27:50:b5:4f:25:ea:df:e7:b8:6a:8d:47:ba:17:5d:b5:70:d6: 2f:1b:8c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUxMjE5MDIwOTU5WhcNMjUxMjI2MDIwOTU5WjAYMRYwFAYD VQQDDA02OTQ0YjNmNy1hZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBcnRsgygH2afi2uBbY+2BBYyyh1sd8nUrgm/aj5ZRVWFd6Lmwvr6m0MsMeG 0DGGioUvcFumXFxU51PLOSwyubXkarqqGRl40yLQ6g+hHE0S6k5TOAulpTrdfTjK xWtG1RggUHIdOoTqO1sA5uiPw1ruFIEUxjslI+bxqpULF+fjm9xgo8xaE7Fy2kjq 5wrMLapF6wx1Ka9K/KUPl+WhDskcPETDLPxLPclUQMfcOGQrqHV8jSXw92zojpuA Q0PrrUoKabNyip7QMt54MNlgPp5qtM4M9WKYV7zm5IGLUA7sc8TErOhVtsOXz98B hVT3fwmxGikk2tXqsCoekq5ffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7cAIsi BY4UCFZdnN+0p1/aDrO2MB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDY4V4sG1vNmKHiuHnpleS8JDQNCOQ+aw903W3pJc512gmVbFL75+FZ 7BQDHFzkd3aaPhxR/m9fJTyeQIgDXNu38q1HX/xDbQpZ1HQ+iyNBrivwakkwl/dH rurnZkq/+BDnNumZowSTbho+VSFhXQwB5D0rp6M9Lg/K4LD+NsyxsXdlakNp+W5O koXLd2WvnCoSxC4rj3CobRB0JjGshTnO0hesdrr7eI6/zy22F+MyBftDATNwI1rj k+XB2LBKf+BiTNVKBVHrBMuHgUxEh3OVOVrss+YvJvlHOqqVWaeJOu+PhP11FnHO p0snULVPJerf57hqjUe6F121cNYvG4zV -----END CERTIFICATE-----Generated at Fri Dec 19 09:49:01 2025 by rpki-client