This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: hVh5ngyWNlJOkjdkOUICZIxlp0J1pi73bKMsz4ylCIU= Subject key identifier: 65:7A:41:88:0E:A1:A8:8A:C0:B4:68:E2:41:A4:01:45:D3:BD:3D:93 Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 05:29:34 +0000 Manifest this update: Fri 05 Dec 2025 05:29:33 +0000 Manifest next update: Fri 12 Dec 2025 05:29:33 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: QGjReJzeIMZCj/ikT5dKAQRRMaKEeYdkZJ2mkBEdMXQ=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Dec 5 05:29:33 2025 GMT Not After : Dec 12 05:29:33 2025 GMT Subject: CN=69326dbd-28bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:67:0f:ac:6b:5b:33:a8:a9:65:56:a3:34: 9d:9b:79:e2:a3:94:bf:51:6e:0e:00:58:54:3d:a4: ed:c9:22:91:00:90:8e:72:c9:17:1a:c1:9d:09:ed: b3:ea:0e:b2:35:20:3c:c7:83:99:db:f6:63:38:cb: e0:73:a6:50:2d:ae:18:52:04:d6:3c:b6:95:a6:1b: 8c:28:ce:2e:b8:be:62:4a:3f:12:c6:dc:88:31:85: 69:81:12:a5:81:be:c0:88:e4:84:70:32:43:36:a9: 6a:10:94:42:6d:7a:ed:cc:c3:1b:a8:27:30:85:83: 89:2d:91:d2:a9:b3:eb:aa:48:df:f5:24:a5:d5:ec: 2b:14:a5:c5:d5:7e:fb:23:6c:ca:fe:3a:8f:ae:71: d0:39:0d:8b:87:f1:9e:e3:8a:e5:98:41:49:63:1d: ce:5f:7a:94:6a:ed:f1:6f:8e:5a:80:1e:a9:cd:86: b0:86:af:04:27:1d:da:ec:46:c0:2b:d6:81:4b:10: 2a:57:05:b7:1a:c8:79:32:43:40:10:47:f0:e3:c4: 8f:d2:ab:e7:c7:05:2f:13:08:73:b7:3e:74:70:08: e1:c5:01:b3:07:f8:0b:4c:18:31:b4:95:28:65:15: ed:19:dd:27:6e:b0:29:34:de:3b:e7:ce:73:e8:5f: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7A:41:88:0E:A1:A8:8A:C0:B4:68:E2:41:A4:01:45:D3:BD:3D:93 X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:83:5a:11:bc:f2:0f:ea:ed:b7:3c:3c:50:a9:e1:85:ed:1c: 0a:60:56:eb:41:a6:ed:57:2e:37:70:9d:aa:c1:60:b6:f6:c1: 7a:2b:33:43:94:9f:6f:2b:2b:81:89:1d:d6:8f:e4:b0:c1:4e: 74:39:17:88:25:41:ff:0b:e4:15:41:ff:89:64:5f:56:1e:62: f9:4b:9e:f4:a8:f9:e3:e5:d2:72:6e:22:c7:5c:78:77:2b:1d: 1b:03:8b:e9:52:49:cd:34:88:38:d3:50:90:27:e5:ff:aa:59: 59:20:34:99:27:e0:99:a0:a3:e8:6d:72:d0:49:04:f1:e7:bb: 6c:da:c2:81:2a:f3:e5:49:17:35:7b:e0:ee:a2:bf:0c:41:fa: 53:e5:05:59:82:15:83:d1:83:df:80:8c:cc:e1:c6:c8:71:c1: f9:c7:b7:ad:38:78:f6:04:ed:2a:77:6e:c7:53:51:2e:75:6e: 4a:88:0b:50:f7:7d:73:60:37:f1:71:63:69:fc:5b:c7:a4:d4: 0d:45:71:ea:a2:e9:3a:4a:cb:7d:38:bf:6c:49:69:52:a4:f3: 91:ed:3a:f3:94:98:97:fc:0d:86:06:78:b0:85:35:12:52:7a: b8:8f:38:34:a4:3c:af:69:42:79:a4:fc:e2:09:cc:e3:3d:e6: a1:7e:99:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNTEyMDUwNTI5MzNaFw0yNTEyMTIwNTI5MzNaMBgxFjAUBgNV BAMTDTY5MzI2ZGJkLTI4YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOCmcPrGtbM6ipZVajNJ2beeKjlL9Rbg4AWFQ9pO3JIpEAkI5yyRcawZ0J7bPq DrI1IDzHg5nb9mM4y+BzplAtrhhSBNY8tpWmG4wozi64vmJKPxLG3IgxhWmBEqWB vsCI5IRwMkM2qWoQlEJteu3MwxuoJzCFg4ktkdKps+uqSN/1JKXV7CsUpcXVfvsj bMr+Oo+ucdA5DYuH8Z7jiuWYQUljHc5fepRq7fFvjlqAHqnNhrCGrwQnHdrsRsAr 1oFLECpXBbcayHkyQ0AQR/DjxI/Sq+fHBS8TCHO3PnRwCOHFAbMH+AtMGDG0lShl Fe0Z3SdusCk03jvnznPoX/m7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZXpBiA6h qIrAtGjiQaQBRdO9PZMwHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWDWhG88g/q7bc8PFCp4YXtHApgVutBpu1XLjdwnarBYLb2wXorM0OU n28rK4GJHdaP5LDBTnQ5F4glQf8L5BVB/4lkX1YeYvlLnvSo+ePl0nJuIsdceHcr HRsDi+lSSc00iDjTUJAn5f+qWVkgNJkn4Jmgo+htctBJBPHnu2zawoEq8+VJFzV7 4O6ivwxB+lPlBVmCFYPRg9+AjMzhxshxwfnHt604ePYE7Sp3bsdTUS51bkqIC1D3 fXNgN/FxY2n8W8ek1A1Fceqi6TpKy304v2xJaVKk85HtOvOUmJf8DYYGeLCFNRJS eriPODSkPK9pQnmk/OIJzOM95qF+mQs= -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:42 2025 by rpki-client