This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json) Hash identifier: RmxoZP1zvM+e+R6SGo/1tYFuToY3A+vHnWpBU5jaKE8= Subject key identifier: 0B:3E:7D:F1:E1:89:BC:A1:08:A5:CB:3D:8A:94:63:12:96:1C:F3:3C Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft Manifest number: 4A Signing time: Fri 05 Dec 2025 05:12:28 +0000 Manifest this update: Fri 05 Dec 2025 05:12:27 +0000 Manifest next update: Fri 12 Dec 2025 05:12:27 +0000 Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: Ghnbm5LY4WnNjyjbOJiDvj1Zrxpg/6HceCQW/gIT7Cc=) 2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: QeEHUv7mRL56rOWrHXgX3CmbCbxizdK7iED7DkPJ0MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Validity Not Before: Dec 5 05:12:27 2025 GMT Not After : Dec 12 05:12:27 2025 GMT Subject: CN=693269bb-d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:8b:c5:00:48:a3:f9:48:2d:b8:4b:14:a8: 87:5d:c7:67:53:e0:4e:73:80:76:d2:ef:fc:3e:8e: d1:b1:8c:36:f1:db:e2:11:1b:4f:2b:d1:22:ff:0e: 50:08:fe:eb:af:e4:76:9b:2c:fa:9f:5d:cd:17:97: 65:7d:51:0b:0f:e1:b1:02:fd:c5:cd:24:9a:14:d0: c9:6e:c4:01:fb:90:eb:7a:05:aa:a7:3e:36:97:57: 70:20:d5:97:f7:9a:f0:26:33:5a:55:d4:49:fd:dc: f4:e0:5e:59:6b:cc:a9:08:16:4f:5e:a6:a5:08:b7: f8:8e:bd:07:97:7b:8b:6e:06:44:5f:88:b0:c5:71: 00:48:bd:e8:01:dd:af:5b:75:54:5a:9e:f1:16:f3: 1e:a8:f8:db:46:50:f1:60:74:e0:f5:75:54:0a:8d: 21:30:fb:f5:02:c1:c2:20:12:a9:db:2a:46:d9:a6: c6:e6:f4:c3:d8:81:92:69:3a:df:0a:15:68:cd:d6: 35:60:4f:04:8c:d2:36:89:8e:b0:eb:fb:2a:25:16: f4:cb:b7:5e:23:d8:50:51:8e:c4:8d:71:f0:91:f1: e8:d8:42:bc:f0:4a:27:08:9c:0d:f9:15:0d:ce:56: f8:f9:a2:13:c0:10:94:7d:ef:c4:1f:31:a2:41:40: a3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3E:7D:F1:E1:89:BC:A1:08:A5:CB:3D:8A:94:63:12:96:1C:F3:3C X509v3 Authority Key Identifier: keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:a1:12:e3:08:ee:84:70:c1:4c:08:3e:cb:41:f6:8b:e5: 0c:38:f8:59:dc:14:32:38:57:42:95:b9:bf:6b:8b:0d:30:cb: 5f:2b:bd:aa:27:8d:eb:82:17:05:fa:eb:e3:af:53:6c:66:b0: 8a:13:58:4a:1d:04:77:af:24:4b:9b:93:c9:aa:e4:35:19:e5: 13:2f:da:97:55:8f:3a:1e:e8:35:c1:a1:47:15:9b:62:36:93: 6f:37:d8:b0:a3:d9:60:7b:06:df:4b:5e:99:78:20:db:22:1f: 7b:f7:bc:72:70:74:22:7c:b8:b3:6a:fb:18:50:3b:2a:50:b1: cc:ea:ef:2e:53:8f:c5:08:e9:18:8d:b1:05:57:ca:67:55:20: 10:d3:2f:82:f2:c9:a2:81:a1:c3:cf:7c:5f:d1:2d:fd:bc:f0: 3a:76:e9:d0:47:fb:eb:04:5f:ef:f8:c3:c7:20:d3:2a:f4:fb: 70:9b:17:c8:2f:67:7f:41:2b:bf:e7:66:22:ed:4e:30:75:18: d4:a0:a8:81:5f:fe:ec:c6:8b:f9:a9:67:b5:b2:ae:31:6e:4f: e6:7d:0c:4c:68:a3:6a:72:5e:b3:68:45:df:8c:d2:4f:f7:37: 46:70:68:12:cb:d9:47:13:0e:b0:82:65:77:b7:90:1d:b5:29: 95:ac:d2:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoQUJGREE5RUU0QjRGNEUxQkQ5RUE0N0JCRkY4NUFFOTM1 NDkxMDNFNzAeFw0yNTEyMDUwNTEyMjdaFw0yNTEyMTIwNTEyMjdaMBgxFjAUBgNV BAMTDTY5MzI2OWJiLWQ2YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXXovFAEij+UgtuEsUqIddx2dT4E5zgHbS7/w+jtGxjDbx2+IRG08r0SL/DlAI /uuv5HabLPqfXc0Xl2V9UQsP4bEC/cXNJJoU0MluxAH7kOt6BaqnPjaXV3Ag1Zf3 mvAmM1pV1En93PTgXllrzKkIFk9epqUIt/iOvQeXe4tuBkRfiLDFcQBIvegB3a9b dVRanvEW8x6o+NtGUPFgdOD1dVQKjSEw+/UCwcIgEqnbKkbZpsbm9MPYgZJpOt8K FWjN1jVgTwSM0jaJjrDr+yolFvTLt14j2FBRjsSNcfCR8ejYQrzwSicInA35FQ3O Vvj5ohPAEJR978QfMaJBQKNxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCz598eGJ vKEIpcs9ipRjEpYc8zwwHwYDVR0jBBgwFoAUq/2p7ktPThvZ6ke7/4Wuk1SRA+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzY3QjA5NDA2NjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcV8ycDdrdFBUaHZaNmtlN180V3VrMVNSQS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzY3QjA5NDA2NjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2 WjZrZTdfNFd1azFTUkEtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJuoRLjCO6EcMFMCD7LQfaL5Qw4+FncFDI4V0KVub9riw0wy18rvaon jeuCFwX66+OvU2xmsIoTWEodBHevJEubk8mq5DUZ5RMv2pdVjzoe6DXBoUcVm2I2 k2832LCj2WB7Bt9LXpl4INsiH3v3vHJwdCJ8uLNq+xhQOypQsczq7y5Tj8UI6RiN sQVXymdVIBDTL4LyyaKBocPPfF/RLf288Dp26dBH++sEX+/4w8cg0yr0+3CbF8gv Z39BK7/nZiLtTjB1GNSgqIFf/uzGi/mpZ7WyrjFuT+Z9DExoo2pyXrNoRd+M0k/3 N0ZwaBLL2UcTDrCCZXe3kB21KZWs0mY= -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:30 2025 by rpki-client