This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft File: sQnalQV25mJneVo066kbw3qZI7Q.mft (raw, json) Hash identifier: bZe+f5peEOxe3evZsylJgg2knnc0SonZEyVCTAncSYk= Subject key identifier: 11:8D:68:A7:2F:7A:E9:91:A9:CD:D4:66:65:8B:E2:79:46:BC:1F:85 Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 Certificate issuer: /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft Manifest number: 1C Signing time: Wed 03 Dec 2025 06:01:26 +0000 Manifest this update: Wed 03 Dec 2025 06:01:26 +0000 Manifest next update: Wed 10 Dec 2025 06:01:26 +0000 Files and hashes: 1: sQnalQV25mJneVo066kbw3qZI7Q.crl (hash: 9FH36/1U5fBBmXbWx5vxp+p57GunwzFMDN3KJf2rmTA=) 2: 0FDE83B6C36811F0BB7F9C65C4F9AE02.roa (hash: HUV1xiTm4nTnouvWGKMxu0/+nSr2OIqTSE04ekggEQI=) 3: EBBEEC14C36711F084BC3465C4F9AE02.roa (hash: sEsXZZXeC9fx2SKgwdoJZ8ecJUtifztiDpJwhoX/eN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Validity Not Before: Dec 3 06:01:26 2025 GMT Not After : Dec 10 06:01:26 2025 GMT Subject: CN=692fd236-418f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:91:c9:ba:cb:6b:90:56:0a:ad:a8:3e:f1: bc:c2:44:68:d8:3e:56:34:b6:6a:ce:1a:36:e3:f8: 7f:5a:49:e8:1e:7a:d2:f6:fe:34:23:9f:0c:f7:a4: 4a:e4:fc:11:9f:cf:13:5c:5c:64:9c:0c:73:80:39: 85:35:78:6a:91:ff:8c:7a:f6:db:f5:3e:64:ef:59: 9d:6a:ae:29:bf:ed:a1:d9:bc:59:8e:68:98:71:c2: 70:21:9c:ab:55:ec:42:bf:66:ad:af:52:d3:44:ef: 62:25:61:7c:5c:a7:00:0b:23:8d:a4:90:e9:33:50: ee:91:69:07:cc:ae:81:28:64:a6:1e:66:46:0c:13: ad:8a:ed:eb:6c:f9:fc:eb:c1:d3:83:d4:c4:17:2e: a5:54:1d:e7:d9:99:24:35:f2:bb:55:a5:88:b3:83: d0:6a:9c:c0:3a:76:be:9a:e4:67:ae:b1:fc:f6:68: 01:00:ac:6e:1c:b1:79:88:43:7b:38:4c:d9:8a:a1: 10:46:38:76:b2:d8:a1:e5:04:08:c2:d2:70:30:52: dd:bc:a8:ce:d1:31:83:17:ac:47:08:68:23:90:24: a8:8f:76:89:ca:ef:15:91:82:7e:df:45:59:53:64: 02:8d:34:4a:fc:38:63:1a:2c:e8:17:1e:5f:96:86: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8D:68:A7:2F:7A:E9:91:A9:CD:D4:66:65:8B:E2:79:46:BC:1F:85 X509v3 Authority Key Identifier: keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ba:49:b3:6c:a5:62:87:af:49:8e:9d:0a:0e:62:31:e0:c6: ae:0d:e9:20:e2:0b:a3:9d:aa:01:30:a2:19:8c:c8:87:ca:86: 7c:c7:cc:79:89:72:ad:b8:b0:de:04:a5:01:39:cb:dd:52:cc: e3:85:5f:b3:ab:c0:e3:05:56:3b:37:36:20:0b:77:7e:53:63: 62:d7:7f:55:19:10:c0:cb:54:d5:b1:a9:3b:34:b3:61:f9:47: e6:9c:64:7f:fa:e5:21:0d:b9:24:8e:b9:64:52:36:7a:49:c0: b7:c4:e6:0f:71:cd:72:bd:a0:dc:3e:52:45:30:b5:97:2b:26: d8:de:b4:b7:2b:03:2c:cf:aa:c7:68:1b:40:2b:2a:8e:05:43: 40:5f:95:36:ac:b1:57:c6:90:42:40:41:4c:a6:91:54:e1:e5: 90:43:b6:77:39:5f:6c:52:ed:8b:b2:fd:1d:c1:95:e8:3f:74: 19:18:49:ec:d8:44:aa:57:f8:fa:32:1d:a8:9c:23:6a:04:f7: 95:88:66:81:ff:ca:9c:d3:0f:ce:9e:9b:03:d5:49:77:f7:21: e8:38:88:f6:72:6c:0e:88:4f:d8:c1:bd:91:b7:ca:f0:aa:2f: 47:1c:f1:1f:e3:16:e8:16:bf:60:3f:1c:5d:c5:a4:df:d6:10: 30:ad:89:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoQjEwOURBOTUwNTc2RTY2MjY3Nzk1QTM0RUJBOTFCQzM3 QTk5MjNCNDAeFw0yNTEyMDMwNjAxMjZaFw0yNTEyMTAwNjAxMjZaMBgxFjAUBgNV BAMTDTY5MmZkMjM2LTQxOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8vJHJustrkFYKrag+8bzCRGjYPlY0tmrOGjbj+H9aSegeetL2/jQjnwz3pErk /BGfzxNcXGScDHOAOYU1eGqR/4x69tv1PmTvWZ1qrim/7aHZvFmOaJhxwnAhnKtV 7EK/Zq2vUtNE72IlYXxcpwALI42kkOkzUO6RaQfMroEoZKYeZkYME62K7ets+fzr wdOD1MQXLqVUHefZmSQ18rtVpYizg9BqnMA6dr6a5Geusfz2aAEArG4csXmIQ3s4 TNmKoRBGOHay2KHlBAjC0nAwUt28qM7RMYMXrEcIaCOQJKiPdonK7xWRgn7fRVlT ZAKNNEr8OGMaLOgXHl+WhkThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEY1opy96 6ZGpzdRmZYvieUa8H4UwHwYDVR0jBBgwFoAUsQnalQV25mJneVo066kbw3qZI7Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzBFNkZGNTRBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1KbmVWbzA2NmtidzNxWkk3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1FuYWxRVjI1bUpuZVZvMDY2a2J3M3FaSTdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 REM5LzBFNkZGNTRBQUU1QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1K bmVWbzA2NmtidzNxWkk3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACi6SbNspWKHr0mOnQoOYjHgxq4N6SDiC6OdqgEwohmMyIfKhnzHzHmJ cq24sN4EpQE5y91SzOOFX7OrwOMFVjs3NiALd35TY2LXf1UZEMDLVNWxqTs0s2H5 R+acZH/65SENuSSOuWRSNnpJwLfE5g9xzXK9oNw+UkUwtZcrJtjetLcrAyzPqsdo G0ArKo4FQ0BflTassVfGkEJAQUymkVTh5ZBDtnc5X2xS7Yuy/R3Bleg/dBkYSezY RKpX+PoyHaicI2oE95WIZoH/ypzTD86emwPVSXf3Ieg4iPZybA6IT9jBvZG3yvCq L0cc8R/jFugWv2A/HF3FpN/WEDCtiSM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:13 2025 by rpki-client