This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: AEn8mPSCBFcj9G5szmyHVuGXqoFjwPHCUsvtED+a1qg= Subject key identifier: FB:CF:E9:EE:6A:5F:93:A6:2A:55:23:C5:05:02:23:03:74:5C:2F:B7 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 0284 Signing time: Thu 04 Dec 2025 23:56:37 +0000 Manifest this update: Thu 04 Dec 2025 23:56:36 +0000 Manifest next update: Thu 11 Dec 2025 23:56:36 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: Mw+VDMRYH+VhpMBs/N8Fqm5TUZrPxOjDYFaoGHqfLYY=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: gYrGpBtOa5YIIgPcE2GiFbVbv7Rp37pYIDK6OFW+qv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Dec 4 23:56:36 2025 GMT Not After : Dec 11 23:56:36 2025 GMT Subject: CN=69321fb4-d740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:7c:f4:70:f0:39:81:91:50:c9:a6:d5:6f: a0:e3:05:9f:41:f3:f4:73:7b:b4:a3:f2:b6:9a:25: b2:7f:d4:8e:84:d1:e2:7f:37:ac:c6:c6:78:d4:fe: bd:ca:5b:96:f3:e0:d3:b4:8a:7d:84:0a:48:98:94: f3:e0:b7:80:fa:bc:4f:42:7e:11:cf:db:6f:6c:d5: c3:2c:d5:6e:a8:5e:37:c6:12:b8:31:8a:ec:8e:9d: 11:92:cd:86:7e:c8:68:09:86:37:6d:d8:bf:e5:e7: 06:df:39:bc:a0:72:01:13:08:68:c0:10:e2:ac:91: 08:c9:09:89:12:c8:c7:6e:c0:ba:82:3f:52:f2:c7: 7a:08:f0:c9:51:0a:45:d5:70:08:50:01:3f:8f:9f: 5a:4e:e0:45:ee:ab:23:90:fd:b0:d1:05:c3:50:b1: 25:95:8c:09:62:84:1e:83:c1:64:9a:e1:1b:55:8a: dc:c2:76:43:aa:f4:e6:d2:3f:8e:a6:70:88:12:54: bf:99:be:9c:d0:51:a9:52:3a:24:a9:71:0c:9b:7e: df:36:63:bd:65:cd:3a:46:e9:ec:5b:c8:8c:7b:11: 61:25:df:cc:90:8f:f8:fe:98:3c:d9:f1:92:fd:83: 7e:0f:09:e3:69:f7:d0:80:71:77:21:ed:66:3e:5b: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CF:E9:EE:6A:5F:93:A6:2A:55:23:C5:05:02:23:03:74:5C:2F:B7 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cd:1e:5b:fa:b8:b1:d7:41:eb:00:4e:ba:e7:14:1c:43:35: 37:b4:32:69:40:e5:1c:45:31:55:fb:d3:97:47:13:23:9c:50: b7:58:49:66:d6:10:b5:61:cd:ca:17:04:0c:31:18:58:d0:07: d5:12:1b:81:54:85:a5:62:cb:c7:58:1d:ac:74:df:0d:dc:31: b4:9f:30:72:c2:e1:dc:52:e7:cd:b3:09:52:8c:bd:fa:19:5b: 7c:0c:38:e1:49:87:4c:42:50:c4:1f:92:1d:ab:51:23:1f:07: b5:1f:ec:42:67:60:08:b4:d3:a8:24:35:c6:c7:cb:c1:b5:7c: 4c:90:b6:f3:3d:fc:4d:a6:74:ec:c5:77:76:e5:a2:e7:81:8a: a8:84:78:d1:1c:34:56:4f:49:d5:99:4e:46:7c:dd:ae:2a:31: 0d:66:59:ff:cf:5b:68:7a:4d:40:ee:8a:1e:ae:02:65:fc:31: cc:eb:a6:b2:d0:44:b5:7f:1f:6d:89:9e:c8:5c:bd:0a:ca:d0: 5f:3d:b2:c7:7f:f7:5a:3c:aa:33:c4:49:3b:94:7a:d7:61:1b: 1a:54:c2:ea:bb:d1:47:16:c3:9c:0e:31:46:7f:1c:c8:0f:44: 10:41:35:d2:cd:ee:94:ca:c9:fa:f4:44:b9:53:31:47:18:79: 1f:bc:87:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUxMjA0MjM1NjM2WhcNMjUxMjExMjM1NjM2WjAYMRYwFAYD VQQDEw02OTMyMWZiNC1kNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGB89HDwOYGRUMmm1W+g4wWfQfP0c3u0o/K2miWyf9SOhNHifzesxsZ41P69 yluW8+DTtIp9hApImJTz4LeA+rxPQn4Rz9tvbNXDLNVuqF43xhK4MYrsjp0Rks2G fshoCYY3bdi/5ecG3zm8oHIBEwhowBDirJEIyQmJEsjHbsC6gj9S8sd6CPDJUQpF 1XAIUAE/j59aTuBF7qsjkP2w0QXDULEllYwJYoQeg8FkmuEbVYrcwnZDqvTm0j+O pnCIElS/mb6c0FGpUjokqXEMm37fNmO9Zc06RunsW8iMexFhJd/MkI/4/pg82fGS /YN+DwnjaffQgHF3Ie1mPltMnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvP6e5q X5OmKlUjxQUCIwN0XC+3MB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGzR5b+rix10HrAE665xQcQzU3tDJpQOUcRTFV+9OXRxMjnFC3WElm 1hC1Yc3KFwQMMRhY0AfVEhuBVIWlYsvHWB2sdN8N3DG0nzBywuHcUufNswlSjL36 GVt8DDjhSYdMQlDEH5Idq1EjHwe1H+xCZ2AItNOoJDXGx8vBtXxMkLbzPfxNpnTs xXd25aLngYqohHjRHDRWT0nVmU5GfN2uKjENZln/z1toek1A7ooergJl/DHM66ay 0ES1fx9tiZ7IXL0KytBfPbLHf/daPKozxEk7lHrXYRsaVMLqu9FHFsOcDjFGfxzI D0QQQTXSze6Uysn69ES5UzFHGHkfvIeZ -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:02 2025 by rpki-client