This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft File: -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json) Hash identifier: VzSOyomfJF/N4YvTrasi8YCRUo69Lchu7LhGIwVCNeo= Subject key identifier: D0:AA:B9:84:09:BA:5C:A7:EA:A1:48:49:E8:D2:42:37:6B:DD:08:41 Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft Manifest number: 06D5 Signing time: Mon 22 Dec 2025 21:18:23 +0000 Manifest this update: Mon 22 Dec 2025 21:18:22 +0000 Manifest next update: Mon 29 Dec 2025 21:18:22 +0000 Files and hashes: 1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: 48dNQQOmF0cW214L+ZeY5DLbrvK5qTiOjj//asGgLq8=) 2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: ACBayas3sWm8LRkAgsG4BLCCWR0NJPgThMvDEl+trzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A Validity Not Before: Dec 22 21:18:22 2025 GMT Not After : Dec 29 21:18:22 2025 GMT Subject: CN=6949b59f-5be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:ff:da:eb:5e:22:df:d0:80:a8:f1:19:5e: 28:7e:78:ab:ec:39:13:28:77:ce:a4:38:d5:c3:8b: c3:70:01:3d:c0:d7:68:47:fc:33:94:56:b0:e0:d5: b8:65:0d:e5:15:29:98:cc:1e:02:a9:4d:91:ed:c4: bf:84:a4:a6:2f:e7:1b:7b:11:bd:67:0e:2c:1e:68: 07:70:af:f8:80:56:44:70:6c:b9:63:7d:41:21:5d: 05:21:f6:79:a5:b1:d2:6f:9e:f3:49:aa:02:8d:a1: b3:34:aa:3c:d5:e7:85:7e:6d:25:ca:a8:8e:47:67: 80:bf:be:6f:4d:1b:2b:c5:59:b9:14:49:04:a1:90: c1:fc:67:ca:58:10:9b:a9:3b:29:37:ad:09:ac:76: f1:1d:ce:3b:e4:60:01:f0:dd:9c:5b:64:bc:1c:2a: 66:63:1b:44:e5:b8:0e:ee:ba:c3:53:7f:9a:5f:a7: 46:fc:d5:12:36:94:3c:7e:dc:09:09:9d:4e:d2:7f: e7:77:3f:ec:2d:34:d6:c6:b6:1b:a7:d8:75:bb:02: 65:a3:b2:1f:4b:c7:ca:f0:f2:a4:ab:95:ef:f5:98: 4e:42:04:b4:ee:15:80:8e:ef:68:23:d3:25:58:22: 43:b0:ae:99:13:63:20:ae:97:16:9e:5b:4f:20:83: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AA:B9:84:09:BA:5C:A7:EA:A1:48:49:E8:D2:42:37:6B:DD:08:41 X509v3 Authority Key Identifier: keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ae:ce:38:17:cf:80:60:0d:eb:a4:d0:2c:a2:d1:e2:94:a7: 05:45:89:ff:f2:99:49:94:97:17:fb:45:93:5e:53:90:f4:c8: 60:9d:e5:0e:db:76:60:a9:34:09:af:45:27:0c:a4:e3:f9:4a: e4:42:bf:5a:5e:b9:03:b2:28:6e:9d:17:3d:7b:21:a0:1b:73: 89:4c:c7:1d:d3:44:03:35:19:10:f6:49:11:cc:7e:c8:08:31: 13:b5:49:03:7d:2c:b6:0c:08:3f:89:01:46:25:d4:63:9b:e8: 11:13:55:8b:38:b3:da:02:f0:d1:70:5f:35:fd:d0:92:3b:4e: 2d:69:01:66:53:e0:d8:29:26:10:87:6f:00:a3:64:ca:8d:ac: 27:45:64:3f:31:75:a6:c4:7c:aa:eb:5e:e7:c8:e6:db:52:54: 00:9b:ba:41:41:99:a6:1a:a2:53:21:f1:84:e6:d3:69:df:74: 94:5c:1b:ec:e0:18:9f:c9:21:fe:0b:04:3a:e2:5f:67:63:2f: 53:2e:e3:1b:88:f1:34:c8:43:18:75:92:33:b4:d8:52:00:de: 7f:74:7d:f0:47:f4:e6:64:67:7a:41:1b:93:4d:9c:d3:ae:1a: e3:9a:09:9d:4a:eb:3f:00:d3:76:b3:b5:ba:18:12:9f:23:d4: 8c:c1:04:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFOTcxMTAvBgNVBAUTKEY5MDZEOTdGN0FBODdDODZEQTk5MDM5RDIzNkVDREI1 MUQyMzFGN0EwHhcNMjUxMjIyMjExODIyWhcNMjUxMjI5MjExODIyWjAYMRYwFAYD VQQDDA02OTQ5YjU5Zi01YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojv/2uteIt/QgKjxGV4ofnir7DkTKHfOpDjVw4vDcAE9wNdoR/wzlFaw4NW4 ZQ3lFSmYzB4CqU2R7cS/hKSmL+cbexG9Zw4sHmgHcK/4gFZEcGy5Y31BIV0FIfZ5 pbHSb57zSaoCjaGzNKo81eeFfm0lyqiOR2eAv75vTRsrxVm5FEkEoZDB/GfKWBCb qTspN60JrHbxHc475GAB8N2cW2S8HCpmYxtE5bgO7rrDU3+aX6dG/NUSNpQ8ftwJ CZ1O0n/ndz/sLTTWxrYbp9h1uwJlo7IfS8fK8PKkq5Xv9ZhOQgS07hWAju9oI9Ml WCJDsK6ZE2MgrpcWnltPIIP54QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCquYQJ ulyn6qFISejSQjdr3QhBMB8GA1UdIwQYMBaAFPkG2X96qHyG2pkDnSNuzbUdIx96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkU5Ny9EMjE4MzAyRTdE NDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJYmFtUU9kSTI3TnRSMGpI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RYlpmM3FvZkliYW1RT2RJMjdOdFIwakgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkU5Ny9EMjE4MzAyRTdENDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJ YmFtUU9kSTI3TnRSMGpIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrs44F8+AYA3rpNAsotHilKcFRYn/8plJlJcX+0WTXlOQ9MhgneUO 23ZgqTQJr0UnDKTj+UrkQr9aXrkDsihunRc9eyGgG3OJTMcd00QDNRkQ9kkRzH7I CDETtUkDfSy2DAg/iQFGJdRjm+gRE1WLOLPaAvDRcF81/dCSO04taQFmU+DYKSYQ h28Ao2TKjawnRWQ/MXWmxHyq617nyObbUlQAm7pBQZmmGqJTIfGE5tNp33SUXBvs 4BifySH+CwQ64l9nYy9TLuMbiPE0yEMYdZIztNhSAN5/dH3wR/TmZGd6QRuTTZzT rhrjmgmdSus/ANN2s7W6GBKfI9SMwQQ0 -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:46 2025 by rpki-client