This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: wUfs4y41Uy/kqfeaSJHNzMJKu8vQfEDQoh2PB/g7qJI= Subject key identifier: 9B:DD:87:25:43:C5:D2:F2:36:C8:65:34:B3:F5:81:77:72:8A:7C:B6 Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C2F Signing time: Mon 22 Dec 2025 18:16:34 +0000 Manifest this update: Mon 22 Dec 2025 18:16:34 +0000 Manifest next update: Mon 29 Dec 2025 18:16:34 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: GrIozhtMEX08bjnWkN5uAVUjixVqydQypswKlJFCb6A=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: /clDM2qDPD5uC0RxJEAiWWigew7J9uL+PN4x0Vi4eF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Dec 22 18:16:34 2025 GMT Not After : Dec 29 18:16:34 2025 GMT Subject: CN=69498b02-4005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:d7:25:f4:df:bf:be:42:be:e9:be:2a:c5: ac:b1:8d:4d:2d:a2:87:6c:58:f1:63:0b:4b:a4:c7: 37:9e:e9:31:53:e9:c7:c9:3b:6c:a5:9a:67:13:d5: 19:d7:53:14:cf:46:31:04:9e:9d:a6:37:b5:c4:4f: 27:a2:ca:69:72:54:91:d9:d2:ef:fd:7d:f2:e2:98: ad:92:e1:13:c9:9a:89:e2:46:c1:8b:bf:4f:44:d0: 7a:3f:9f:f1:43:04:28:27:13:32:77:2d:4e:82:0a: ac:e7:6d:fb:a7:2d:66:c6:5d:e7:bf:3a:8c:9c:e8: d2:b9:20:39:c1:f4:db:39:f1:6a:c5:c2:b9:cc:68: 52:a8:9e:d1:82:5d:c6:1c:5b:bb:ca:ae:bd:88:58: b2:21:67:10:81:a9:bf:93:d3:7b:34:87:84:9c:7a: 6f:29:f9:ee:48:54:9a:1c:f2:54:c0:79:52:51:c4: db:59:6a:9e:66:ed:f5:ac:fe:a8:52:66:54:7a:11: 29:8b:5d:20:07:d5:88:ea:e6:8f:4a:8e:92:25:f8: 7a:d2:b6:5c:10:7e:5a:0f:e8:84:9c:0c:8c:c5:b5: 89:d2:c1:cb:22:ad:b8:7d:ac:03:6d:3c:fa:be:bf: b2:81:b1:22:e6:8d:99:ff:1d:c9:b7:75:d8:c3:a2: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DD:87:25:43:C5:D2:F2:36:C8:65:34:B3:F5:81:77:72:8A:7C:B6 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:37:d9:01:3f:9e:59:34:a9:a0:d2:6f:ba:21:fa:31:49:29: 18:b8:88:e2:57:ca:3d:ac:9b:ad:3c:ee:1f:0f:e1:c0:61:66: f4:b5:36:31:51:a3:48:ee:66:23:d6:9f:32:33:02:a5:04:03: 29:07:3d:15:6c:9a:40:64:57:18:90:15:c2:41:fd:be:4e:b1: f5:ea:7d:98:13:3a:01:98:93:b7:04:97:0e:ed:d5:89:33:f8: 45:e1:60:f7:73:1a:76:cf:84:6a:9a:09:4a:2a:d5:0c:fc:57: 1d:fd:17:65:e5:ef:df:c0:35:4c:fd:db:40:71:13:78:ad:c4: 92:3a:cf:dc:2c:d2:b5:45:78:d4:0d:83:6d:9c:02:2a:ba:f1: aa:75:85:fc:1e:a2:f0:0b:f4:0f:f1:d1:87:91:e8:00:03:43: 03:1a:a6:6a:f1:00:92:72:e8:a5:cc:95:98:7c:bc:74:39:80: 23:af:3b:89:d0:61:9e:6a:2b:dd:fa:11:ac:10:31:c9:cf:c0: bb:a1:ba:2b:66:89:f5:93:b6:41:73:62:cb:3d:4e:05:e3:91: c7:67:3b:32:eb:55:2c:71:c2:e4:e0:b7:52:19:d0:26:c9:ec: f6:0f:5d:b7:4e:8e:87:c1:20:9b:2d:82:a3:83:15:83:5c:19: 37:87:a8:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjUxMjIyMTgxNjM0WhcNMjUxMjI5MTgxNjM0WjAYMRYwFAYD VQQDDA02OTQ5OGIwMi00MDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcbXJfTfv75Cvum+KsWssY1NLaKHbFjxYwtLpMc3nukxU+nHyTtspZpnE9UZ 11MUz0YxBJ6dpje1xE8nosppclSR2dLv/X3y4pitkuETyZqJ4kbBi79PRNB6P5/x QwQoJxMydy1Oggqs5237py1mxl3nvzqMnOjSuSA5wfTbOfFqxcK5zGhSqJ7Rgl3G HFu7yq69iFiyIWcQgam/k9N7NIeEnHpvKfnuSFSaHPJUwHlSUcTbWWqeZu31rP6o UmZUehEpi10gB9WI6uaPSo6SJfh60rZcEH5aD+iEnAyMxbWJ0sHLIq24fawDbTz6 vr+ygbEi5o2Z/x3Jt3XYw6JXjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvdhyVD xdLyNshlNLP1gXdyiny2MB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKN9kBP55ZNKmg0m+6IfoxSSkYuIjiV8o9rJutPO4fD+HAYWb0tTYx UaNI7mYj1p8yMwKlBAMpBz0VbJpAZFcYkBXCQf2+TrH16n2YEzoBmJO3BJcO7dWJ M/hF4WD3cxp2z4RqmglKKtUM/Fcd/Rdl5e/fwDVM/dtAcRN4rcSSOs/cLNK1RXjU DYNtnAIquvGqdYX8HqLwC/QP8dGHkegAA0MDGqZq8QCScuilzJWYfLx0OYAjrzuJ 0GGeaivd+hGsEDHJz8C7oborZon1k7ZBc2LLPU4F45HHZzsy61UsccLk4LdSGdAm yez2D123To6HwSCbLYKjgxWDXBk3h6hW -----END CERTIFICATE-----Generated at Tue Dec 23 08:00:19 2025 by rpki-client