This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: qF5bDE5JmuS9/+E9vQv46s66q/FU6daeqD66RAczej0= Subject key identifier: BD:05:6D:F8:05:17:33:7C:22:25:1A:97:15:AE:12:A9:24:83:7B:2D Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 34A8 Signing time: Thu 04 Dec 2025 15:08:03 +0000 Manifest this update: Thu 04 Dec 2025 15:08:03 +0000 Manifest next update: Thu 11 Dec 2025 15:08:03 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: TcA5KrEcE3c4csZn15KWVND475cSo29dH4OJJ73UoBA=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: i7V57Dro1PeoCEaseJh0ivldyfQ81BauNS5GWJcFu1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Dec 4 15:08:03 2025 GMT Not After : Dec 11 15:08:03 2025 GMT Subject: CN=6931a3d3-45c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:f9:2e:6d:f2:98:d8:e6:67:a1:55:db:1d: 6a:af:21:39:d7:86:db:34:88:be:ae:78:47:f9:ac: ba:34:2d:35:df:d2:67:2b:b7:88:4c:87:0f:60:c3: f3:db:e4:dc:8e:bf:9a:7e:a9:fa:a3:03:6a:85:5b: 31:74:72:c6:9b:7d:22:81:58:1b:48:97:e1:6a:2e: f0:f5:9f:33:51:30:45:af:f6:a7:09:57:18:59:7a: aa:46:7f:7d:8f:89:59:b5:e4:4d:56:e7:de:95:9e: 64:78:65:98:00:1f:a0:fa:ad:18:8f:6f:5f:8c:0b: e4:41:92:77:51:56:b1:c9:86:ad:15:7e:0f:0d:6d: 98:d1:25:a8:0c:44:f1:61:f0:73:64:8c:3c:59:18: 3a:a5:c9:f6:90:57:22:44:5b:72:c0:84:1e:1e:96: b0:2a:d7:9e:9b:43:91:d0:97:c3:30:20:be:fc:3d: 49:5a:18:e1:ba:63:5c:dd:81:58:d0:43:f3:48:4f: ef:56:6e:41:9e:9c:83:01:54:04:f3:ce:2e:dd:84: 43:76:60:9c:a8:f6:93:34:6b:06:df:7f:c9:aa:e2: 04:b5:2a:7b:88:f3:c4:1d:2c:9a:eb:f5:d9:49:39: 43:47:de:f0:80:fc:d7:59:ba:63:f1:fc:ae:d5:71: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:05:6D:F8:05:17:33:7C:22:25:1A:97:15:AE:12:A9:24:83:7B:2D X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:e0:b0:c1:07:f0:19:20:f8:ea:1f:22:77:95:ba:40:e5: 35:da:c6:22:a0:2e:24:9d:93:92:1f:8e:5f:c8:10:64:d3:1d: 45:e0:18:72:e4:55:63:fa:e6:37:0e:81:32:79:51:58:6f:30: 09:58:c9:0d:15:f6:9f:d7:3c:97:9c:96:13:23:08:57:6a:53: 5b:47:d5:df:47:73:79:13:17:90:fd:16:25:11:2f:c1:7d:15: 77:27:83:b6:50:a1:f4:75:c7:c3:34:61:9c:0a:ac:03:ab:4a: 40:7e:c0:7f:19:58:26:74:e5:f1:6e:b2:a1:53:52:6c:99:ac: 35:da:52:4b:9a:42:36:62:6c:04:03:42:a3:57:8d:02:84:a2: 89:e6:40:b2:db:7b:a9:04:f3:1d:6a:10:ee:92:6d:61:7a:d0: ce:9b:bb:80:ec:dc:50:f5:31:72:6c:1d:fd:50:dc:f7:13:18: 6e:87:08:3c:86:e3:90:d5:17:f1:0f:32:d8:a0:dc:38:42:16: 98:7e:c9:3f:95:ad:7e:43:d7:c5:44:bb:81:40:57:fb:df:b0: 3d:f1:3a:b2:e3:1a:0c:dc:33:e6:c7:b3:87:f6:f3:bc:fb:9a: c2:5a:dc:c2:9d:b5:04:e1:1d:57:fe:8a:ed:f5:57:78:d1:0c: a2:11:b1:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjUxMjA0MTUwODAzWhcNMjUxMjExMTUwODAzWjAYMRYwFAYD VQQDEw02OTMxYTNkMy00NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5475Lm3ymNjmZ6FV2x1qryE514bbNIi+rnhH+ay6NC0139JnK7eITIcPYMPz 2+Tcjr+afqn6owNqhVsxdHLGm30igVgbSJfhai7w9Z8zUTBFr/anCVcYWXqqRn99 j4lZteRNVufelZ5keGWYAB+g+q0Yj29fjAvkQZJ3UVaxyYatFX4PDW2Y0SWoDETx YfBzZIw8WRg6pcn2kFciRFtywIQeHpawKteem0OR0JfDMCC+/D1JWhjhumNc3YFY 0EPzSE/vVm5BnpyDAVQE884u3YRDdmCcqPaTNGsG33/JquIEtSp7iPPEHSya6/XZ STlDR97wgPzXWbpj8fyu1XGOCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0FbfgF FzN8IiUalxWuEqkkg3stMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCOOCwwQfwGSD46h8id5W6QOU12sYioC4knZOSH45fyBBk0x1F4Bhy 5FVj+uY3DoEyeVFYbzAJWMkNFfaf1zyXnJYTIwhXalNbR9XfR3N5ExeQ/RYlES/B fRV3J4O2UKH0dcfDNGGcCqwDq0pAfsB/GVgmdOXxbrKhU1Jsmaw12lJLmkI2YmwE A0KjV40ChKKJ5kCy23upBPMdahDukm1hetDOm7uA7NxQ9TFybB39UNz3Exhuhwg8 huOQ1RfxDzLYoNw4QhaYfsk/la1+Q9fFRLuBQFf737A98Tqy4xoM3DPmx7OH9vO8 +5rCWtzCnbUE4R1X/ort9Vd40QyiEbFh -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:45 2025 by rpki-client