This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: 11I2dNC3LC2tjtMH1fupfOlSwxENAlkcCXKxFG1msTY= Subject key identifier: 39:0A:08:A7:88:EC:6B:A9:E8:C9:DE:15:2A:F6:31:C6:2B:BA:6F:82 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0168 Signing time: Fri 05 Dec 2025 02:05:29 +0000 Manifest this update: Fri 05 Dec 2025 02:05:28 +0000 Manifest next update: Fri 12 Dec 2025 02:05:28 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: D2swo4/OMstjRi9LJDfwMfk8zChnIzDocMX5ZRixC1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Dec 5 02:05:28 2025 GMT Not After : Dec 12 02:05:28 2025 GMT Subject: CN=69323de9-339d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:fd:40:ff:e3:da:18:5d:b4:fd:f2:8c:fa: 05:46:60:01:60:7d:8c:7e:df:7e:45:b7:dd:30:ce: 27:01:6d:b8:05:c8:39:41:e3:7e:c5:22:42:05:98: 55:1f:1f:0d:8f:f6:fe:72:43:39:cc:63:9e:48:c5: 47:64:71:ff:e2:7f:a2:0a:b2:99:e8:fe:5b:1b:73: b4:c1:0a:56:c3:23:65:65:ae:f0:28:d4:e1:8a:f9: 35:da:05:9a:e4:58:9b:d6:d1:98:ff:c8:51:68:36: 31:e0:b9:cd:20:7e:83:41:93:07:44:71:e7:ca:f1: 7b:e5:9f:e7:50:ce:be:91:b9:b1:f0:13:6b:27:80: 5b:a0:a2:d0:11:93:45:5f:cf:40:b3:35:99:0b:ae: 3e:7f:d3:26:2b:0d:14:0f:03:c5:df:6c:3f:de:9b: 1c:eb:e4:a8:d0:a4:09:b6:22:48:ca:06:d0:1d:58: b5:77:a5:ac:67:73:03:32:18:05:34:8c:c2:1d:10: 46:c2:a5:bb:8c:df:03:be:48:79:2a:61:e6:54:c6: 5b:aa:39:8b:36:dd:29:f7:f3:5a:df:0b:bf:c2:25: e9:a9:02:d8:c7:ee:74:47:b9:4d:03:d1:56:5a:b3: b3:67:a6:6e:43:cd:c1:f8:bc:ee:88:de:48:28:f1: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0A:08:A7:88:EC:6B:A9:E8:C9:DE:15:2A:F6:31:C6:2B:BA:6F:82 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:97:6d:52:d4:27:6f:6a:82:d1:fe:ed:01:67:7c:31:bd:73: c6:11:f0:b9:36:da:b4:ff:3f:c5:9b:91:43:01:a9:c5:48:7c: 53:49:ce:22:6b:2f:18:88:5e:02:d7:4f:08:be:30:52:53:e6: cc:6b:62:28:1b:24:d5:64:58:2a:c5:d4:5d:d3:49:fc:ae:77: 7b:14:81:e9:6a:9b:d6:69:f9:83:29:49:93:6a:6b:85:d9:6d: ec:2f:1a:2f:72:79:55:48:ac:44:9f:4b:7a:4c:15:9a:54:68: f4:da:c4:ba:91:aa:62:1d:1b:38:d0:7e:6c:ec:b5:bd:c7:90: 06:02:ec:5e:f6:83:84:e1:bc:fc:6e:0e:51:75:40:ce:6f:27: 43:33:80:2e:2f:10:86:cc:03:62:c7:07:cc:af:d5:47:35:3a: 60:24:15:1f:49:88:92:6d:b5:d9:a6:1b:79:0c:03:51:8e:c1: ae:38:7b:ba:b8:88:23:64:ab:df:6a:eb:96:b0:9e:5e:41:a8: 63:9c:e9:58:bd:f6:67:63:c2:5e:5b:05:8c:32:c7:58:fc:c9: fb:8a:c9:06:91:e5:49:9c:9c:6b:88:ed:99:59:c1:a7:b7:e5: 5d:55:70:5a:ea:ce:7e:f7:b5:a4:b4:ce:b7:ce:cd:07:fe:af: 09:30:01:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUxMjA1MDIwNTI4WhcNMjUxMjEyMDIwNTI4WjAYMRYwFAYD VQQDEw02OTMyM2RlOS0zMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXj9QP/j2hhdtP3yjPoFRmABYH2Mft9+RbfdMM4nAW24Bcg5QeN+xSJCBZhV Hx8Nj/b+ckM5zGOeSMVHZHH/4n+iCrKZ6P5bG3O0wQpWwyNlZa7wKNThivk12gWa 5Fib1tGY/8hRaDYx4LnNIH6DQZMHRHHnyvF75Z/nUM6+kbmx8BNrJ4BboKLQEZNF X89AszWZC64+f9MmKw0UDwPF32w/3psc6+So0KQJtiJIygbQHVi1d6WsZ3MDMhgF NIzCHRBGwqW7jN8Dvkh5KmHmVMZbqjmLNt0p9/Na3wu/wiXpqQLYx+50R7lNA9FW WrOzZ6ZuQ83B+LzuiN5IKPEo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkKCKeI 7Gup6MneFSr2McYrum+CMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUl21S1CdvaoLR/u0BZ3wxvXPGEfC5Ntq0/z/Fm5FDAanFSHxTSc4i ay8YiF4C108IvjBSU+bMa2IoGyTVZFgqxdRd00n8rnd7FIHpapvWafmDKUmTamuF 2W3sLxovcnlVSKxEn0t6TBWaVGj02sS6kapiHRs40H5s7LW9x5AGAuxe9oOE4bz8 bg5RdUDObydDM4AuLxCGzANixwfMr9VHNTpgJBUfSYiSbbXZpht5DANRjsGuOHu6 uIgjZKvfauuWsJ5eQahjnOlYvfZnY8JeWwWMMsdY/Mn7iskGkeVJnJxriO2ZWcGn t+VdVXBa6s5+97WktM63zs0H/q8JMAHB -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:49 2025 by rpki-client