This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json) Hash identifier: h1yfpPOktwsP+Mih8yyV2u/ab0K+KQ5aMvmRl3mqdjc= Subject key identifier: 58:0B:91:1F:B7:5F:B2:FE:33:37:B2:5E:6E:95:2D:49:61:87:16:C6 Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft Manifest number: 07AA Signing time: Mon 08 Dec 2025 20:28:52 +0000 Manifest this update: Mon 08 Dec 2025 20:28:52 +0000 Manifest next update: Mon 15 Dec 2025 20:28:52 +0000 Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: jNaZ3InRgQGvlZ6PbV8WcZoR1/qadNCbf66iG0U0E+E=) 2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: CTwAyCDwocPW6eH/qU1N86er0YYRpEPrmGGxc9l63f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 20:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Validity Not Before: Dec 8 20:28:52 2025 GMT Not After : Dec 15 20:28:52 2025 GMT Subject: CN=69373504-b3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:80:ce:07:c9:88:fc:08:fe:bb:e8:a2:00: 62:3f:8c:08:d9:a7:ef:9e:f3:46:0d:ed:36:14:8d: 0e:96:09:41:1e:b6:3d:f0:0b:ef:77:15:97:a0:be: 50:ee:77:e6:40:70:08:ed:96:30:a3:37:92:dc:23: 66:63:e8:08:e4:f9:9c:a6:65:e6:e2:dd:d0:7a:6b: ac:3a:74:a2:eb:f3:cf:19:fe:2c:30:ec:bd:b5:46: 3d:36:b8:5c:35:09:e4:f7:19:60:6a:fb:c9:22:b7: cf:8e:76:7b:1c:53:fd:1e:92:8a:a7:a6:0c:cb:4f: 11:e2:a1:7d:83:4c:1b:e2:65:2e:df:e2:35:f9:28: aa:a2:89:f2:c4:9c:17:00:13:cf:c9:67:8d:e3:81: fa:29:a1:da:f2:ef:51:ac:96:ab:a2:69:1c:d7:cd: a8:8e:3c:6c:79:b5:92:6f:03:32:48:5d:10:d0:ac: d3:e0:e0:97:8f:e1:54:73:3e:fe:24:0f:f4:76:49: ab:74:7e:c0:17:8e:71:bf:c9:ac:01:b6:ad:79:da: 07:d0:49:91:8e:68:e2:fb:ae:7b:c9:23:fb:a3:9d: c4:10:e8:22:61:41:f5:b8:1f:37:02:45:c8:e4:97: 93:24:47:5f:45:20:04:9c:7f:03:ab:ad:eb:39:4c: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:91:1F:B7:5F:B2:FE:33:37:B2:5E:6E:95:2D:49:61:87:16:C6 X509v3 Authority Key Identifier: keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:df:c7:86:16:05:d0:fb:6a:47:6e:3b:79:6c:44:2c:08:38: cf:ff:28:ee:b8:b8:6d:8d:1b:50:98:38:bf:c2:7f:6f:8b:52: ae:f4:7f:9c:1b:cc:21:cd:aa:3d:90:f7:2a:5c:7a:66:68:76: 4e:61:4e:be:b8:55:e0:72:9a:4e:33:76:ad:60:38:ec:47:18: 35:da:55:18:c2:25:42:fc:15:1e:75:cf:34:00:da:e3:80:9e: ca:23:7c:0b:b9:66:96:0c:c9:c9:4b:d5:e1:b8:a2:d9:40:b6: f1:82:62:92:53:2a:c2:e6:43:91:8e:9c:6e:29:7a:ca:67:7a: 28:be:80:44:c9:0c:33:30:df:97:8f:40:2d:6b:9a:70:5f:b2: e7:16:4a:ea:47:7f:dd:4a:36:f4:72:af:a2:7c:66:ff:68:a8: 0e:4c:5a:bf:2b:49:dd:93:54:ac:13:7d:eb:ac:07:ee:f3:34: dc:f3:ac:eb:2f:fc:75:5c:b9:9a:d5:e1:e5:e8:6c:40:66:73: 14:76:69:62:a1:87:f7:7a:fa:60:50:86:4c:fa:cd:bd:36:eb: b6:51:d2:b7:43:9f:ea:a7:01:1d:e6:9c:52:13:35:2d:bf:c5: 6d:7f:aa:7e:0e:08:1a:fd:31:3c:55:3e:f4:5d:58:31:bb:b5: cd:a5:e4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx OUZFMUI4RkIwHhcNMjUxMjA4MjAyODUyWhcNMjUxMjE1MjAyODUyWjAYMRYwFAYD VQQDEw02OTM3MzUwNC1iM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s6AzgfJiPwI/rvoogBiP4wI2afvnvNGDe02FI0OlglBHrY98AvvdxWXoL5Q 7nfmQHAI7ZYwozeS3CNmY+gI5PmcpmXm4t3QemusOnSi6/PPGf4sMOy9tUY9Nrhc NQnk9xlgavvJIrfPjnZ7HFP9HpKKp6YMy08R4qF9g0wb4mUu3+I1+SiqoonyxJwX ABPPyWeN44H6KaHa8u9RrJaromkc182ojjxsebWSbwMySF0Q0KzT4OCXj+FUcz7+ JA/0dkmrdH7AF45xv8msAbatedoH0EmRjmji+657ySP7o53EEOgiYUH1uB83AkXI 5JeTJEdfRSAEnH8Dq63rOUzAYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgLkR+3 X7L+MzeyXm6VLUlhhxbGMB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQ1Ni84MTQxNDI1RTMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJM QWdPNWppRDlaLUFaX2h1UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj38eGFgXQ+2pHbjt5bEQsCDjP/yjuuLhtjRtQmDi/wn9vi1Ku9H+c G8whzao9kPcqXHpmaHZOYU6+uFXgcppOM3atYDjsRxg12lUYwiVC/BUedc80ANrj gJ7KI3wLuWaWDMnJS9XhuKLZQLbxgmKSUyrC5kORjpxuKXrKZ3oovoBEyQwzMN+X j0Ata5pwX7LnFkrqR3/dSjb0cq+ifGb/aKgOTFq/K0ndk1SsE33rrAfu8zTc86zr L/x1XLma1eHl6GxAZnMUdmlioYf3evpgUIZM+s29Nuu2UdK3Q5/qpwEd5pxSEzUt v8Vtf6p+Dgga/TE8VT70XVgxu7XNpeQN -----END CERTIFICATE-----Generated at Wed Dec 10 17:23:01 2025 by rpki-client