This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: 5c51fbCKF0yznnAdT/NH04ngrCjTVFeM1GbH7BJ2he4= Subject key identifier: 40:77:E4:0F:CA:43:A5:60:9F:5A:66:C9:3F:3A:FA:40:F2:64:EE:42 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0CF0 Signing time: Thu 04 Dec 2025 17:36:45 +0000 Manifest this update: Thu 04 Dec 2025 17:36:44 +0000 Manifest next update: Thu 11 Dec 2025 17:36:44 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: mhIbwG7c/l7vkPcXSKn9aDe7KozyGIvG2uSvFl4tYOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Dec 4 17:36:44 2025 GMT Not After : Dec 11 17:36:44 2025 GMT Subject: CN=6931c6ad-465b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:54:9e:bc:af:0d:a0:c9:9c:b8:25:20:48: 96:57:8d:02:d8:ea:6d:ec:f1:45:a8:2a:1f:0c:5e: 94:7c:18:f7:55:e3:f8:5e:81:64:ff:5e:b5:7e:a7: 68:ba:04:c2:ce:b9:68:e0:79:17:b4:d4:89:15:2a: ac:82:60:0f:e0:8e:3d:f3:14:cd:33:92:25:a5:55: 4e:98:90:69:35:58:93:72:12:e0:e7:6a:f1:cf:58: e2:e3:f3:0a:16:69:66:39:b4:43:71:87:50:39:28: 0c:22:b8:a8:83:54:3a:a8:1a:2e:26:2a:23:eb:06: da:b6:42:b4:6d:27:4b:b1:1b:cb:a7:a5:db:28:49: d1:f9:7d:a4:01:e8:de:6d:b2:1d:a9:ce:a3:3e:53: 78:5d:86:bb:e8:04:c8:4c:91:38:85:e9:0f:f5:69: b7:e6:5e:65:1d:d7:f3:e2:7c:2d:a7:ff:a1:0a:36: 37:6a:34:70:1d:9c:c2:c2:ca:e9:74:31:48:f1:08: b2:18:22:ce:fd:00:e1:0a:47:f8:e7:ad:3e:76:8a: 5e:0c:9e:ca:56:6f:82:b1:d9:40:61:a8:36:04:bd: 07:01:4e:cb:b2:44:6f:a4:ff:dc:6a:3e:3d:f8:ee: 98:18:55:11:e9:53:55:3e:c5:3e:74:ea:48:d9:6b: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:77:E4:0F:CA:43:A5:60:9F:5A:66:C9:3F:3A:FA:40:F2:64:EE:42 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:55:6c:d6:a9:45:1e:f2:6e:59:58:82:a9:1c:d3:48:e6:bf: e7:b5:3c:31:13:31:e8:55:e8:39:7b:ae:cc:3b:5f:f3:05:a4: f9:73:df:98:40:05:e9:b6:7a:77:09:dd:8c:64:c1:95:e1:1c: 1b:55:b6:3d:3a:ad:fd:cb:be:0c:2a:ac:2f:b7:61:99:40:b1: 0c:0c:87:92:c2:5e:62:c2:db:7d:32:5d:53:44:36:5a:4d:d2: 25:bc:14:ef:a2:37:fe:a4:89:4a:71:bc:1b:64:53:5e:9e:2d: d7:ed:3e:79:8d:67:6e:c6:30:18:25:80:0c:d2:36:db:c9:36: 2c:ac:d5:31:11:2d:77:ce:57:0f:17:12:6e:a5:07:67:99:88: c8:98:a2:99:e1:85:ed:ac:47:b1:5f:d7:79:15:06:ee:f6:d4: 35:4c:7c:41:26:95:ea:fe:53:f6:f5:43:c6:0a:6a:0b:a4:48: b2:ac:76:c5:f3:c7:21:c5:59:47:50:7f:cb:68:b4:14:b1:f9: 12:20:0f:f4:b4:79:40:e2:d1:52:b2:4a:57:9b:b0:2e:00:75: e3:89:b2:34:8e:c7:6b:24:16:3d:1e:f3:91:de:4b:38:fa:52: a1:ee:d5:4f:dc:a3:fd:93:78:0d:21:c5:e9:f3:04:93:c4:8c: 26:41:e8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUxMjA0MTczNjQ0WhcNMjUxMjExMTczNjQ0WjAYMRYwFAYD VQQDEw02OTMxYzZhZC00NjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC1UnryvDaDJnLglIEiWV40C2Opt7PFFqCofDF6UfBj3VeP4XoFk/161fqdo ugTCzrlo4HkXtNSJFSqsgmAP4I498xTNM5IlpVVOmJBpNViTchLg52rxz1ji4/MK FmlmObRDcYdQOSgMIriog1Q6qBouJioj6wbatkK0bSdLsRvLp6XbKEnR+X2kAeje bbIdqc6jPlN4XYa76ATITJE4hekP9Wm35l5lHdfz4nwtp/+hCjY3ajRwHZzCwsrp dDFI8QiyGCLO/QDhCkf4560+dopeDJ7KVm+CsdlAYag2BL0HAU7LskRvpP/caj49 +O6YGFUR6VNVPsU+dOpI2WsqzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB35A/K Q6Vgn1pmyT86+kDyZO5CMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqVWzWqUUe8m5ZWIKpHNNI5r/ntTwxEzHoVeg5e67MO1/zBaT5c9+Y QAXptnp3Cd2MZMGV4RwbVbY9Oq39y74MKqwvt2GZQLEMDIeSwl5iwtt9Ml1TRDZa TdIlvBTvojf+pIlKcbwbZFNeni3X7T55jWduxjAYJYAM0jbbyTYsrNUxES13zlcP FxJupQdnmYjImKKZ4YXtrEexX9d5FQbu9tQ1THxBJpXq/lP29UPGCmoLpEiyrHbF 88chxVlHUH/LaLQUsfkSIA/0tHlA4tFSskpXm7AuAHXjibI0jsdrJBY9HvOR3ks4 +lKh7tVP3KP9k3gNIcXp8wSTxIwmQege -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:30 2025 by rpki-client