This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: h+SDW7959sEDiugGjwJfm9aupEURoiCfQkGs6EVC1AM= Subject key identifier: 30:92:EB:E5:7F:8A:DA:13:6D:CA:14:E9:07:CF:E6:EB:AE:6A:F8:76 Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 019C Signing time: Fri 05 Dec 2025 01:33:54 +0000 Manifest this update: Fri 05 Dec 2025 01:33:53 +0000 Manifest next update: Fri 12 Dec 2025 01:33:53 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: Otypu3+fdQlFFFKWafE3lzv+c8RxAL+W05SfW6BxCbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Dec 5 01:33:53 2025 GMT Not After : Dec 12 01:33:53 2025 GMT Subject: CN=69323681-3401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:9e:ae:b1:3b:cc:f1:cb:a4:f3:74:72:92: 9a:ab:a2:55:e8:20:eb:76:12:cb:bf:e4:51:1f:ac: 65:30:2c:76:83:f8:96:1c:71:52:bc:47:a1:f7:2c: 5f:4e:d4:da:6f:15:77:30:53:58:e4:31:d6:32:30: 72:b4:83:22:df:a9:2e:23:47:20:96:0d:3d:34:9a: a6:55:fb:04:69:14:22:5c:e2:0a:16:4a:6f:31:a2: c1:e7:70:3d:e6:3f:c5:0c:d7:0d:6f:e7:37:74:3b: 7c:4b:0c:f8:77:10:e9:47:8d:6f:eb:32:63:e9:d4: 94:e9:ee:c0:a7:a8:8f:cc:ec:1e:8d:35:ff:24:a4: 23:30:d8:58:20:ac:40:fc:a9:00:8c:50:0f:3b:47: 82:c4:16:2f:0f:eb:b0:ac:84:72:48:ae:39:16:ba: 8a:23:e7:a7:e8:f3:67:f6:5a:a4:d1:71:4b:9d:b2: 96:c2:77:af:15:18:b0:0d:de:48:ef:06:a5:fc:79: 45:3b:c5:1a:66:89:db:d2:a5:7d:b4:f1:74:7a:6c: b1:2a:70:a7:43:82:13:25:9e:cc:25:9e:f1:90:be: e2:7d:db:42:64:bf:c4:6b:97:d3:6b:64:c0:22:85: 1f:5b:d5:6a:c0:32:8c:cb:7a:76:a4:74:f0:22:61: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:EB:E5:7F:8A:DA:13:6D:CA:14:E9:07:CF:E6:EB:AE:6A:F8:76 X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:98:62:60:5c:a0:eb:90:10:16:01:1a:88:7c:5d:df:35:5f: cb:6c:ef:11:9e:2c:96:89:a4:f4:d5:26:b9:cc:4c:5b:40:9f: 19:45:13:15:92:a8:ab:5e:29:ce:94:f0:b5:a9:65:3f:09:db: 0c:9b:42:50:0f:25:94:17:6a:d9:c6:6f:fc:ee:6d:77:52:a2: b8:d9:46:35:0d:11:a8:21:a6:5c:c1:a9:71:bd:2e:14:d9:2c: 93:46:7a:4b:f9:db:2f:29:a1:c4:c6:d2:7b:53:b1:a4:47:1c: cf:1e:8f:be:3b:1d:66:f6:17:8a:24:64:7b:84:c9:7d:b1:67: 6b:42:6e:10:d6:22:e6:ce:b9:f0:00:05:d0:1a:b8:08:b3:5a: 25:ec:43:35:cc:fa:02:7a:5b:d3:56:67:40:66:64:fc:10:5d: d8:70:d6:7d:f5:c8:5d:e2:96:8d:86:94:03:14:73:a4:d2:d3: fd:51:dc:6d:aa:b4:96:b0:5b:f9:b1:82:04:e1:24:42:21:bb: c0:cc:28:ac:a9:dc:56:cc:19:77:2f:42:cb:2e:4d:b5:43:75: db:87:ef:27:e6:51:85:1c:6d:43:18:43:27:2f:90:74:3b:c5: 9f:82:ff:7c:0b:2f:ff:65:00:66:50:e4:f6:12:b7:c1:12:24: c4:e3:21:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUxMjA1MDEzMzUzWhcNMjUxMjEyMDEzMzUzWjAYMRYwFAYD VQQDEw02OTMyMzY4MS0zNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDCerrE7zPHLpPN0cpKaq6JV6CDrdhLLv+RRH6xlMCx2g/iWHHFSvEeh9yxf TtTabxV3MFNY5DHWMjBytIMi36kuI0cglg09NJqmVfsEaRQiXOIKFkpvMaLB53A9 5j/FDNcNb+c3dDt8Swz4dxDpR41v6zJj6dSU6e7Ap6iPzOwejTX/JKQjMNhYIKxA /KkAjFAPO0eCxBYvD+uwrIRySK45FrqKI+en6PNn9lqk0XFLnbKWwnevFRiwDd5I 7wal/HlFO8UaZonb0qV9tPF0emyxKnCnQ4ITJZ7MJZ7xkL7ifdtCZL/Ea5fTa2TA IoUfW9VqwDKMy3p2pHTwImGzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCS6+V/ itoTbcoU6QfP5uuuavh2MB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbmGJgXKDrkBAWARqIfF3fNV/LbO8RniyWiaT01Sa5zExbQJ8ZRRMV kqirXinOlPC1qWU/CdsMm0JQDyWUF2rZxm/87m13UqK42UY1DRGoIaZcwalxvS4U 2SyTRnpL+dsvKaHExtJ7U7GkRxzPHo++Ox1m9heKJGR7hMl9sWdrQm4Q1iLmzrnw AAXQGrgIs1ol7EM1zPoCelvTVmdAZmT8EF3YcNZ99chd4paNhpQDFHOk0tP9Udxt qrSWsFv5sYIE4SRCIbvAzCisqdxWzBl3L0LLLk21Q3Xbh+8n5lGFHG1DGEMnL5B0 O8Wfgv98Cy//ZQBmUOT2ErfBEiTE4yFq -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:32 2025 by rpki-client