This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: 3IS49xF6X2mYiMTqfUkmVNyUgzYeygbQG8x34F/U5iw= Subject key identifier: 35:5B:D4:16:DF:66:F6:AD:47:39:84:58:EE:19:B4:CA:6E:BE:D7:F2 Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: D7 Signing time: Fri 05 Dec 2025 03:37:53 +0000 Manifest this update: Fri 05 Dec 2025 03:37:53 +0000 Manifest next update: Fri 12 Dec 2025 03:37:53 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: yg81po0aZxJoDlW8QNItp4Aq06iJVGXLrmImC1kW82w=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: izaJYsSU6U7Mo7zWWYJeDmZ95mIz6wQL/e1yh556DPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Dec 5 03:37:53 2025 GMT Not After : Dec 12 03:37:53 2025 GMT Subject: CN=69325391-2c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:79:0d:f6:2d:e5:c6:7a:d1:b2:1b:6e:89: d8:c1:8c:c1:00:31:5b:b5:3c:10:eb:81:d7:91:45: 61:d7:a1:7d:00:09:e4:6a:fd:4b:66:a1:e1:02:29: d0:e3:24:7d:ed:60:5a:52:52:ee:d0:9a:f3:cb:ff: a7:f9:f1:1f:7b:8c:b2:17:aa:91:8f:f8:1c:2e:66: e6:50:97:64:5d:b1:3b:6f:48:76:58:30:52:95:e4: db:1c:d6:24:66:7c:a1:7d:63:fe:bf:5f:a0:a9:9a: 0d:93:88:ad:84:91:a5:f1:c5:1d:a8:34:3a:3b:77: 5f:40:74:d5:e6:da:5f:8f:67:99:14:8c:08:9f:40: ac:82:8d:d2:a6:29:55:53:b0:0f:fb:82:c8:f0:bd: ba:c3:b4:44:9d:93:6b:90:f3:26:b1:ef:87:f6:24: dc:d2:29:37:a5:9d:02:f2:0b:17:f4:ad:f7:61:25: 06:df:fc:ce:3b:62:36:c9:97:15:62:06:98:8f:e4: 34:ef:7e:33:6b:d7:33:36:b3:41:8a:64:40:98:00: f7:0a:c9:9f:60:b4:12:b3:ca:34:62:0b:67:8d:0b: 88:4f:b2:e9:60:11:b9:87:11:5e:e8:ce:fd:a6:f5: a4:b3:d8:ee:c7:61:3a:7d:22:9f:4f:8d:06:a0:cd: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:D4:16:DF:66:F6:AD:47:39:84:58:EE:19:B4:CA:6E:BE:D7:F2 X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2d:32:a6:ea:8f:de:bf:b6:d7:1b:cd:de:f4:32:f2:66:1b: 15:9c:92:88:83:c3:dd:83:c8:7b:d0:79:af:b2:6f:d8:03:41: df:1c:5f:14:76:90:8a:74:ca:6a:80:4b:13:37:90:59:b5:21: 4e:2b:c5:2e:9d:18:c2:e0:75:d5:35:a3:fc:1b:4c:72:47:73: 54:bb:a8:a2:a1:0c:4c:86:18:82:bb:37:bf:e1:b6:15:45:78: be:62:58:aa:51:83:40:2a:33:f9:da:3d:d5:b3:9f:9e:03:27: 77:9e:9c:32:43:5f:2b:d3:7b:56:c5:ca:10:43:8b:27:30:70: b8:ac:74:c3:18:ef:2a:87:16:51:f3:43:3a:42:d8:a6:19:a0: 4e:3e:03:d4:19:24:f2:0f:93:53:8a:d5:88:f9:9e:f6:40:61: d0:7f:14:26:42:98:84:77:bf:ca:e7:14:1d:64:49:1a:18:97: e1:bf:c6:15:ff:28:d0:16:9b:2a:b3:41:3c:8c:ae:b1:9e:ae: 37:cc:d1:d4:f4:bd:f0:02:59:bc:71:dc:65:8e:9d:1b:9e:78: 08:94:72:0a:a9:3f:9f:2c:c4:26:1f:b3:3a:10:44:d3:4d:84: 7e:fd:8e:b0:93:5d:60:0f:69:a6:3e:bc:d8:09:4c:43:b2:74: f6:b7:32:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDQwRERFRUYwMThFQURDREU0RDFCRjc4RDE1NDg1MUY4 RDhCQzI2QTUwHhcNMjUxMjA1MDMzNzUzWhcNMjUxMjEyMDMzNzUzWjAYMRYwFAYD VQQDEw02OTMyNTM5MS0yYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDd5DfYt5cZ60bIbbonYwYzBADFbtTwQ64HXkUVh16F9AAnkav1LZqHhAinQ 4yR97WBaUlLu0Jrzy/+n+fEfe4yyF6qRj/gcLmbmUJdkXbE7b0h2WDBSleTbHNYk ZnyhfWP+v1+gqZoNk4ithJGl8cUdqDQ6O3dfQHTV5tpfj2eZFIwIn0Csgo3SpilV U7AP+4LI8L26w7REnZNrkPMmse+H9iTc0ik3pZ0C8gsX9K33YSUG3/zOO2I2yZcV YgaYj+Q0734za9czNrNBimRAmAD3CsmfYLQSs8o0YgtnjQuIT7LpYBG5hxFe6M79 pvWks9jux2E6fSKfT40GoM3gwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVb1Bbf ZvatRzmEWO4ZtMpuvtfyMB8GA1UdIwQYMBaAFEDd7vAY6tzeTRv3jRVIUfjYvCal MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GMEI2NkNGODhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNONU5HX2VORlVoUi1OaThK cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GMEI2NkNGODhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNO NU5HX2VORlVoUi1OaThKcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhLTKm6o/ev7bXG83e9DLyZhsVnJKIg8Pdg8h70Hmvsm/YA0HfHF8U dpCKdMpqgEsTN5BZtSFOK8UunRjC4HXVNaP8G0xyR3NUu6iioQxMhhiCuze/4bYV RXi+YliqUYNAKjP52j3Vs5+eAyd3npwyQ18r03tWxcoQQ4snMHC4rHTDGO8qhxZR 80M6QtimGaBOPgPUGSTyD5NTitWI+Z72QGHQfxQmQpiEd7/K5xQdZEkaGJfhv8YV /yjQFpsqs0E8jK6xnq43zNHU9L3wAlm8cdxljp0bnngIlHIKqT+fLMQmH7M6EETT TYR+/Y6wk11gD2mmPrzYCUxDsnT2tzIf -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:12 2025 by rpki-client