This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: 4jCo+hOver5bn6Q0OfZ6hdE7l+3LUUb2svw2dzgG7pY= Subject key identifier: 6B:3E:9E:EB:68:33:03:3F:2A:D8:99:B7:10:B7:DB:E7:12:BB:DB:67 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 09AF Signing time: Sat 06 Dec 2025 19:18:12 +0000 Manifest this update: Sat 06 Dec 2025 19:18:12 +0000 Manifest next update: Sat 13 Dec 2025 19:18:12 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: qsJ+PHsLmKgn6kdon/hgOVufVNPcwoJZVdSzW85Hp3U=) 2: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: 2Xgzexa7KQwDiL/PLcy8XKf+wHv4JM7y6behjMBPwWQ=) 3: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: y+1LcMZWVq0sxCzTaWENpdmxk9z32hroZYUL1UHWPKM=) 4: 828F2562CA7711F0ACE50D54C4F9AE02.roa (hash: as/IVlnCSA3otirC5nGRgQuyVyN998c83S0eNardGTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Dec 6 19:18:12 2025 GMT Not After : Dec 13 19:18:12 2025 GMT Subject: CN=69348174-cbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:38:f2:07:7e:66:b2:f6:5a:9d:79:67:f2: ab:a7:ca:d5:f2:3a:96:f3:c8:e6:a2:e2:49:2b:98: 3e:57:63:4b:f3:dc:ad:fe:72:5b:e8:03:bd:ab:ca: 6b:e1:25:e9:cd:c8:48:6b:6d:21:16:64:a9:d0:62: e6:cb:a4:2a:cb:57:5e:2e:3d:8d:41:61:1c:c0:f8: a5:ec:25:67:9f:24:bf:b7:e6:22:5b:26:98:65:eb: 25:bf:63:b8:86:3c:a1:e4:5f:de:e5:f5:f7:10:e8: 45:5f:63:c6:9b:17:aa:a5:05:dd:7d:12:03:5c:60: c8:bf:ce:31:9f:e7:a6:de:42:5b:fd:5d:d7:99:50: 00:2d:ab:8a:29:40:0e:9f:73:ec:99:f2:09:01:74: 9c:c8:f3:65:86:42:4e:7d:02:5a:7c:c1:cd:b6:21: 24:d5:62:ab:29:91:5c:26:96:b4:dc:1c:cf:34:2b: d5:b8:a7:b4:cb:69:6c:cd:a9:e3:19:be:9d:99:4f: 34:25:4c:11:60:52:1b:9d:38:56:57:47:a9:08:d9: c3:07:22:14:a1:4c:bf:99:ef:7a:7b:ea:27:4a:53: 0f:0e:75:6f:6c:e1:00:c7:7d:e5:41:ca:ab:f3:8f: 3f:2e:6f:cb:c8:a7:88:9e:6f:52:d5:25:1b:fc:ff: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:9E:EB:68:33:03:3F:2A:D8:99:B7:10:B7:DB:E7:12:BB:DB:67 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d3:fe:e9:be:fc:d6:27:7f:b0:38:1a:86:fb:40:8a:23:d0: 3a:5b:34:4f:6b:a6:60:1e:f9:d0:5c:dc:01:1f:1a:bb:6f:4f: a7:29:6f:ee:76:5e:ac:6d:6e:de:d3:d8:1b:bb:9e:d8:50:0f: 93:65:ff:0f:8a:23:20:88:6e:63:1a:d4:7d:b7:8a:2a:2f:ac: d2:03:9c:10:e0:02:8d:2c:25:e2:96:0b:77:42:cf:1d:b4:83: 5a:f9:93:05:64:5a:3a:f1:0c:7d:e3:18:09:aa:0f:e4:a7:95: dd:45:00:e0:a2:87:6e:67:3b:0a:3d:df:c8:54:51:fe:d9:4c: 85:94:39:4b:1d:0f:f1:69:2f:71:84:da:7e:59:9d:26:e5:b3: ac:f2:20:e5:f1:16:21:51:3e:4f:1a:f2:d0:b3:66:f5:1a:07: 0e:aa:44:9a:da:7b:16:1d:d5:92:31:82:83:64:ae:f0:9e:19: 86:f1:51:60:9c:59:5b:44:9c:d2:f0:bc:cf:7b:c3:ca:d7:ef: 8c:98:28:93:51:b4:28:d0:be:e9:6e:ec:a7:75:9f:07:8e:b2: 47:9d:fb:b6:a8:01:36:0f:73:b1:72:b4:ae:5e:af:ea:23:53: 95:14:07:ff:17:f8:67:ad:27:1e:54:2a:7f:62:a3:7f:3e:44: 8a:6d:c1:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUxMjA2MTkxODEyWhcNMjUxMjEzMTkxODEyWjAYMRYwFAYD VQQDEw02OTM0ODE3NC1jYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUc48gd+ZrL2Wp15Z/Krp8rV8jqW88jmouJJK5g+V2NL89yt/nJb6AO9q8pr 4SXpzchIa20hFmSp0GLmy6Qqy1deLj2NQWEcwPil7CVnnyS/t+YiWyaYZeslv2O4 hjyh5F/e5fX3EOhFX2PGmxeqpQXdfRIDXGDIv84xn+em3kJb/V3XmVAALauKKUAO n3PsmfIJAXScyPNlhkJOfQJafMHNtiEk1WKrKZFcJpa03BzPNCvVuKe0y2lszanj Gb6dmU80JUwRYFIbnThWV0epCNnDByIUoUy/me96e+onSlMPDnVvbOEAx33lQcqr 848/Lm/LyKeInm9S1SUb/P/1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs+nuto MwM/KtiZtxC32+cSu9tnMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI0/7pvvzWJ3+wOBqG+0CKI9A6WzRPa6ZgHvnQXNwBHxq7b0+nKW/u dl6sbW7e09gbu57YUA+TZf8PiiMgiG5jGtR9t4oqL6zSA5wQ4AKNLCXilgt3Qs8d tINa+ZMFZFo68Qx94xgJqg/kp5XdRQDgooduZzsKPd/IVFH+2UyFlDlLHQ/xaS9x hNp+WZ0m5bOs8iDl8RYhUT5PGvLQs2b1GgcOqkSa2nsWHdWSMYKDZK7wnhmG8VFg nFlbRJzS8LzPe8PK1++MmCiTUbQo0L7pbuyndZ8HjrJHnfu2qAE2D3OxcrSuXq/q I1OVFAf/F/hnrSceVCp/YqN/PkSKbcE3 -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:28 2025 by rpki-client