This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: rfL2H9MX36YNesOaSLdLs2DNYR/O40ZzAZ1b9Y6Z7mI= Subject key identifier: 04:75:D4:9D:0D:91:88:86:FF:1D:26:90:88:FB:BD:7A:6C:1C:6E:8F Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 106C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1058 Signing time: Thu 04 Dec 2025 16:59:01 +0000 Manifest this update: Thu 04 Dec 2025 16:59:01 +0000 Manifest next update: Thu 11 Dec 2025 16:59:01 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 2aS9GnB2fji5MaoP+/4Rzz3TrHHPn+W3Eo4NYu8ftiE=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Dec 4 16:59:01 2025 GMT Not After : Dec 11 16:59:01 2025 GMT Subject: CN=6931bdd5-4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:38:64:3c:92:a8:a0:ee:43:fc:f9:39:4e: 36:75:90:f3:c1:9c:b0:34:ab:35:7a:3e:9a:f0:9a: df:a4:d3:c7:31:eb:a0:fa:0c:1f:59:7d:35:73:a8: 1a:06:c2:c7:59:c8:d0:62:95:99:30:f1:e1:b7:11: c8:a1:86:24:2e:a5:01:e1:a2:04:1e:e9:11:a8:64: 40:61:2b:2f:70:05:eb:04:ec:3b:af:e7:4e:1f:cd: cb:39:1b:9b:7e:3a:7d:6f:43:81:75:ca:9f:00:de: ec:37:d2:23:d5:89:fa:d0:35:10:31:60:08:bd:0b: 9e:08:52:63:cf:69:cd:56:4a:f1:de:50:bd:d0:f1: 7d:99:cd:c4:f4:f4:ca:89:6f:61:c2:a7:34:51:47: 42:6c:e2:f4:6a:12:1a:54:4d:e6:3a:01:b3:92:16: fa:cc:fa:57:ba:75:e2:6a:fa:d7:9c:f9:20:b0:04: b3:e3:a3:78:df:31:e1:0d:44:8f:90:ed:66:b7:cd: 74:d1:27:61:68:c4:fb:e4:5d:a7:37:e7:e3:3f:b8: bb:c3:4d:97:90:04:cf:70:14:f7:66:5b:dd:d6:ab: 4d:f8:36:2a:8a:3b:b2:c0:e0:fa:1c:8b:5e:e3:db: eb:7e:e0:38:44:86:58:6c:23:cd:e2:77:e1:d5:eb: 19:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:75:D4:9D:0D:91:88:86:FF:1D:26:90:88:FB:BD:7A:6C:1C:6E:8F X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:42:d6:d7:36:eb:84:d7:aa:28:c4:b8:39:9a:28:41:ca:b5: 01:04:8b:1a:dd:1b:c1:b5:76:2f:6c:74:94:44:6d:b4:a6:43: a8:de:2b:34:bb:66:e5:a1:69:e3:cc:6f:c0:27:45:af:f4:7b: ea:be:21:f4:6d:db:67:5a:27:9f:71:d6:95:ee:de:af:09:ec: b8:83:3e:f9:ca:97:e4:d5:ab:9d:66:98:15:1c:80:35:e3:4a: cf:a6:9c:05:29:90:4a:ff:d9:41:7b:15:98:51:89:d1:b8:e1: ec:1f:b6:6c:1f:54:1d:9f:49:4c:f5:3d:42:6e:e2:8d:2e:bd: 69:86:65:ec:a4:f9:f9:77:a5:5b:b4:98:12:57:7f:60:5f:91: 8f:10:66:5c:70:81:bd:bf:88:ab:85:1e:6c:37:55:ac:90:ba: 2f:9c:ff:3a:92:91:60:ee:e7:48:1d:3f:10:d8:17:72:da:80: 8c:da:a4:7d:b4:10:7d:63:b0:32:a4:82:09:a3:3c:14:b5:07: be:d3:2a:f3:63:10:fc:57:93:50:6d:6b:e8:5f:c8:3c:c2:41: 55:6a:73:27:26:16:6a:8d:f3:2f:88:7c:a1:19:30:85:0b:88: f2:5d:ab:99:4c:02:13:a6:54:ee:4f:28:d9:26:64:be:30:3b: 0b:af:55:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUxMjA0MTY1OTAxWhcNMjUxMjExMTY1OTAxWjAYMRYwFAYD VQQDEw02OTMxYmRkNS00ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Gg4ZDySqKDuQ/z5OU42dZDzwZywNKs1ej6a8JrfpNPHMeug+gwfWX01c6ga BsLHWcjQYpWZMPHhtxHIoYYkLqUB4aIEHukRqGRAYSsvcAXrBOw7r+dOH83LORub fjp9b0OBdcqfAN7sN9Ij1Yn60DUQMWAIvQueCFJjz2nNVkrx3lC90PF9mc3E9PTK iW9hwqc0UUdCbOL0ahIaVE3mOgGzkhb6zPpXunXiavrXnPkgsASz46N43zHhDUSP kO1mt8100SdhaMT75F2nN+fjP7i7w02XkATPcBT3Zlvd1qtN+DYqijuywOD6HIte 49vrfuA4RIZYbCPN4nfh1esZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAR11J0N kYiG/x0mkIj7vXpsHG6PMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAQtbXNuuE16ooxLg5mihByrUBBIsa3RvBtXYvbHSURG20pkOo3is0 u2bloWnjzG/AJ0Wv9HvqviH0bdtnWiefcdaV7t6vCey4gz75ypfk1audZpgVHIA1 40rPppwFKZBK/9lBexWYUYnRuOHsH7ZsH1Qdn0lM9T1CbuKNLr1phmXspPn5d6Vb tJgSV39gX5GPEGZccIG9v4irhR5sN1WskLovnP86kpFg7udIHT8Q2Bdy2oCM2qR9 tBB9Y7AypIIJozwUtQe+0yrzYxD8V5NQbWvoX8g8wkFVanMnJhZqjfMviHyhGTCF C4jyXauZTAITplTuTyjZJmS+MDsLr1XX -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:35 2025 by rpki-client