This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: gEAnH2XIAcwfglj5edJjs36eVpugMA1KO64gxZXUJzc= Subject key identifier: D3:7A:77:07:13:C0:9B:36:BA:65:E5:35:AE:C9:9D:2B:F1:B3:1A:5E Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 01A4 Signing time: Fri 05 Dec 2025 01:34:06 +0000 Manifest this update: Fri 05 Dec 2025 01:34:05 +0000 Manifest next update: Fri 12 Dec 2025 01:34:05 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: HqY9Mpn4fcK4k6PEtmLY7R6OEZU5BWKrlrJCdbM+css=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: bRdR3wfNnHC1rku2OvmduQD8mvL6hcKjWYIdu2kzO40=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: Q5v08K+SDa0gE1PId5DYOFya6dBCiJ5+nRdhgtaQrKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Dec 5 01:34:05 2025 GMT Not After : Dec 12 01:34:05 2025 GMT Subject: CN=6932368e-76be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:d5:08:4b:31:fc:8e:18:fe:70:3e:7c:19: 2b:8c:8f:50:ff:f7:3c:df:06:3d:5e:72:cf:99:50: e0:fe:ec:36:ca:f9:db:f7:85:eb:ec:33:72:36:3d: 3b:3b:28:cc:37:93:7c:9c:38:27:e1:b7:19:f2:76: 32:09:a2:f7:0a:db:b6:2d:5a:e5:bd:0e:a1:69:fb: 1c:2f:af:4e:d9:9c:d6:7d:97:32:c8:5e:9b:be:30: 7e:2e:52:5d:0d:f9:82:2f:d0:8c:8c:55:7b:c5:77: 3d:20:34:38:38:e7:fa:16:21:60:29:f0:68:dd:6b: 3b:3b:25:c2:7d:29:8f:8e:4a:7e:47:57:19:7b:62: 11:e0:a4:3e:2a:94:05:8f:79:24:3b:cf:60:06:81: 18:e3:54:32:5d:4b:49:32:c4:41:35:e1:4e:7a:25: a6:3f:21:c5:e8:c0:17:6f:26:e1:cf:e5:0e:c4:54: ae:c1:fb:c9:ba:5a:b2:20:80:75:82:92:1a:83:51: cd:23:82:55:ee:5b:f0:e1:d5:c4:5e:60:d8:49:9e: 72:81:23:f7:be:2c:87:b0:42:74:46:3d:37:ac:6a: 7b:1d:48:f7:ae:f1:47:17:c6:b5:18:8b:4f:81:7b: 92:3d:0f:3c:4e:0a:fd:69:40:0d:d0:1f:8a:b2:7b: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:77:07:13:C0:9B:36:BA:65:E5:35:AE:C9:9D:2B:F1:B3:1A:5E X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ee:0c:63:00:06:32:76:4d:f8:d2:1b:0a:de:e3:24:a2:8a: 25:5e:a3:3e:13:59:b0:d9:ae:cb:66:1f:71:d7:f0:1c:39:2e: 51:16:6b:22:67:80:15:7a:95:e0:13:c6:3c:a0:95:cd:ba:3b: ef:ff:a7:d8:a6:af:cb:75:53:68:59:61:72:2d:7b:39:cd:14: 0e:63:7b:41:f6:f8:6c:b3:d8:c9:e2:9d:54:d8:3c:99:f1:c2: 47:21:10:e6:40:16:91:91:a6:66:27:bd:d0:8d:db:de:ca:fb: 7e:b6:64:09:b0:9e:99:b9:c9:3b:3a:82:1d:69:7b:69:13:d9: 56:9f:db:9a:15:63:bd:62:1a:c2:e9:72:d4:c0:ae:80:cb:09: b6:05:e1:31:34:e9:64:28:0e:24:75:aa:06:32:19:e5:d9:cf: ed:98:94:59:d3:7f:56:55:72:43:a7:c8:63:2a:3d:0a:2c:e1: 6e:ea:75:37:c1:95:13:69:b0:5d:d3:68:1c:04:5b:a4:01:a1: 74:7e:44:f7:e7:7b:0c:12:fa:0f:b4:0c:54:7e:76:8a:7f:5b: 7e:99:0f:ea:c9:a7:d1:8b:cd:62:62:11:38:8e:53:92:5b:ff: a0:b1:0d:18:c0:96:d9:6e:5e:90:ae:1b:fa:25:9a:e6:c6:39: 70:56:91:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUxMjA1MDEzNDA1WhcNMjUxMjEyMDEzNDA1WjAYMRYwFAYD VQQDEw02OTMyMzY4ZS03NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/HVCEsx/I4Y/nA+fBkrjI9Q//c83wY9XnLPmVDg/uw2yvnb94Xr7DNyNj07 OyjMN5N8nDgn4bcZ8nYyCaL3Ctu2LVrlvQ6hafscL69O2ZzWfZcyyF6bvjB+LlJd DfmCL9CMjFV7xXc9IDQ4OOf6FiFgKfBo3Ws7OyXCfSmPjkp+R1cZe2IR4KQ+KpQF j3kkO89gBoEY41QyXUtJMsRBNeFOeiWmPyHF6MAXbybhz+UOxFSuwfvJulqyIIB1 gpIag1HNI4JV7lvw4dXEXmDYSZ5ygSP3viyHsEJ0Rj03rGp7HUj3rvFHF8a1GItP gXuSPQ88Tgr9aUAN0B+Ksnv0YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNN6dwcT wJs2umXlNa7JnSvxsxpeMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC97gxjAAYydk340hsK3uMkooolXqM+E1mw2a7LZh9x1/AcOS5RFmsi Z4AVepXgE8Y8oJXNujvv/6fYpq/LdVNoWWFyLXs5zRQOY3tB9vhss9jJ4p1U2DyZ 8cJHIRDmQBaRkaZmJ73Qjdveyvt+tmQJsJ6Zuck7OoIdaXtpE9lWn9uaFWO9YhrC 6XLUwK6Aywm2BeExNOlkKA4kdaoGMhnl2c/tmJRZ039WVXJDp8hjKj0KLOFu6nU3 wZUTabBd02gcBFukAaF0fkT353sMEvoPtAxUfnaKf1t+mQ/qyafRi81iYhE4jlOS W/+gsQ0YwJbZbl6Qrhv6JZrmxjlwVpHd -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:02 2025 by rpki-client