This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: HvToXQu4Sg915WRaAkwO4E3y0TW8S4ZtLDTj5ABPGAU= Subject key identifier: AE:B9:0C:F9:51:16:EC:34:D5:EF:F4:6E:2C:4E:D3:23:89:A3:25:6E Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 34E5 Signing time: Sat 06 Dec 2025 14:36:10 +0000 Manifest this update: Sat 06 Dec 2025 14:36:10 +0000 Manifest next update: Sat 13 Dec 2025 14:36:10 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: 47TQE9H6opGsYEVAUxGi/p4qn+Z5xYR8o1QxG/0CHsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: Dec 6 14:36:10 2025 GMT Not After : Dec 13 14:36:10 2025 GMT Subject: CN=69343f5a-5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:40:5d:1f:1f:ea:76:5c:ef:08:d8:89:bf: df:68:76:d2:25:78:a1:e4:06:db:d7:33:c9:6d:68: b8:d8:e4:e3:1f:99:af:e2:b7:76:e0:e0:1e:8f:a4: 14:82:74:9e:d5:3c:d0:c1:72:18:42:60:2d:70:0d: e3:0c:6c:af:d9:65:74:a9:d2:46:00:54:68:fb:ee: 2a:73:4b:80:b2:f0:73:5b:39:80:ed:59:1f:29:f1: ab:0d:1a:d6:bf:5a:5b:f1:19:b8:b2:1c:12:a2:c4: 77:1c:23:2e:54:f4:26:b8:39:bd:7d:27:c0:12:a8: fc:72:5b:42:66:49:69:5e:3b:13:1a:c3:2e:57:b6: cf:1a:c5:eb:92:e7:56:59:82:19:ea:50:5f:7b:03: 5a:ba:36:28:74:1d:bf:77:7f:05:c4:50:56:21:15: 88:f2:a1:c7:f6:41:01:88:c7:b3:d2:7f:c8:de:46: 9a:26:7b:2a:b7:93:e5:22:19:ae:d5:f6:27:4f:10: 05:f7:3e:f0:4a:cb:0d:5b:a3:69:56:24:be:5c:63: 0f:ce:50:57:28:c1:08:ae:1a:1b:e8:7f:be:90:a4: aa:75:55:9b:d2:c9:98:17:cb:a5:a0:e3:2e:9e:a8: ab:98:14:62:86:de:ea:5e:d4:a4:aa:69:3d:c2:de: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:0C:F9:51:16:EC:34:D5:EF:F4:6E:2C:4E:D3:23:89:A3:25:6E X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7d:fc:63:01:de:50:0b:8f:02:a5:43:ff:31:c3:af:6b:3f: 7f:81:01:92:3e:35:f2:d0:b7:12:2d:8b:46:08:e3:f4:0b:6c: f8:c5:0a:ae:f7:b4:53:d1:0e:ac:5d:cb:c7:ba:66:3d:5b:1a: 5b:fb:02:1d:fe:1b:f5:88:15:c4:6e:58:dd:79:bd:35:32:ae: 25:61:a7:c2:8a:d2:6a:29:5c:0f:b1:ae:8f:08:59:6e:96:0d: ed:35:82:86:35:06:39:da:8b:48:90:d4:80:39:a2:25:be:d9: fb:ee:76:a2:e7:9f:fb:43:99:d3:0d:8b:01:f5:76:dc:73:dc: 9b:97:55:ea:2b:e7:ec:6d:c1:63:3a:22:ad:26:1c:d5:ee:44: 74:e3:d0:f0:d3:57:a0:bb:e2:93:91:31:e4:78:24:7b:5e:be: 4b:f9:96:2d:92:56:53:5d:b7:a3:8e:f2:e8:4e:a5:93:0b:dd: d7:85:cd:75:1a:e9:14:d8:2b:c7:cd:d8:65:61:48:a3:a5:5b: 7a:c0:de:97:3a:1e:8f:0a:fb:ad:3a:14:05:11:7f:bc:77:8b: ba:32:10:81:b1:bb:3a:a9:0e:76:f8:07:90:9e:0f:28:3d:a2: 64:02:e3:6a:7c:a0:c4:1c:c2:ea:e3:5d:9d:1f:aa:db:2e:78: fc:1d:54:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjUxMjA2MTQzNjEwWhcNMjUxMjEzMTQzNjEwWjAYMRYwFAYD VQQDEw02OTM0M2Y1YS01MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/JAXR8f6nZc7wjYib/faHbSJXih5Abb1zPJbWi42OTjH5mv4rd24OAej6QU gnSe1TzQwXIYQmAtcA3jDGyv2WV0qdJGAFRo++4qc0uAsvBzWzmA7VkfKfGrDRrW v1pb8Rm4shwSosR3HCMuVPQmuDm9fSfAEqj8cltCZklpXjsTGsMuV7bPGsXrkudW WYIZ6lBfewNaujYodB2/d38FxFBWIRWI8qHH9kEBiMez0n/I3kaaJnsqt5PlIhmu 1fYnTxAF9z7wSssNW6NpViS+XGMPzlBXKMEIrhob6H++kKSqdVWb0smYF8uloOMu nqirmBRiht7qXtSkqmk9wt5oWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK65DPlR Fuw01e/0bixO0yOJoyVuMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvffxjAd5QC48CpUP/McOvaz9/gQGSPjXy0LcSLYtGCOP0C2z4xQqu 97RT0Q6sXcvHumY9Wxpb+wId/hv1iBXEbljdeb01Mq4lYafCitJqKVwPsa6PCFlu lg3tNYKGNQY52otIkNSAOaIlvtn77nai55/7Q5nTDYsB9Xbcc9ybl1XqK+fsbcFj OiKtJhzV7kR049Dw01egu+KTkTHkeCR7Xr5L+ZYtklZTXbejjvLoTqWTC93Xhc11 GukU2CvHzdhlYUijpVt6wN6XOh6PCvutOhQFEX+8d4u6MhCBsbs6qQ52+AeQng8o PaJkAuNqfKDEHMLq412dH6rbLnj8HVSt -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:49 2025 by rpki-client