This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: EGvXF1PW3LXBHcmwsU933o317J6kJSP/1AOCisp5cDM= Subject key identifier: E8:9A:C4:2C:8E:B1:55:DD:B7:62:C7:46:79:B0:43:31:6C:AD:FD:AC Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 0450 Signing time: Thu 04 Dec 2025 22:44:07 +0000 Manifest this update: Thu 04 Dec 2025 22:44:07 +0000 Manifest next update: Thu 11 Dec 2025 22:44:07 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: h9McBh+n78V7Kojhr/TFNFfX9PBQJiFCN3K6FDJu0Uc=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: C+O2ANlEUmIIPVx1+2EgMlHonRRh//QmAeYkKbPRWUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Dec 4 22:44:07 2025 GMT Not After : Dec 11 22:44:07 2025 GMT Subject: CN=69320eb7-2cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:b2:05:e0:54:18:cf:85:9c:23:34:9f:bb: 37:e7:c2:f4:6c:95:7c:23:ba:eb:03:bc:91:47:61: 4e:91:76:99:53:f6:0a:dd:59:b1:1b:65:3e:80:f1: e0:90:ca:c5:6d:9d:40:d9:6b:02:2b:1f:4b:95:50: c7:22:16:ae:7d:cb:7c:56:f8:fa:6f:f1:87:de:b5: 36:c6:a0:0a:96:90:0b:da:1d:f0:6e:32:94:32:c3: d0:95:6d:08:8b:cb:74:63:08:0d:9c:0a:86:44:6f: c3:53:dc:3d:62:ea:c7:34:c5:3a:91:b4:c5:4d:0f: 8b:01:7d:3d:7d:62:96:fe:38:13:83:2a:60:0d:1c: 59:ec:27:f7:c5:6b:00:70:09:e3:fd:f9:26:78:8e: 73:7e:c6:28:47:0e:f2:49:d5:66:5c:44:62:dc:07: 68:6f:10:28:69:d0:9e:16:27:a4:74:6e:c9:ee:84: 19:e7:d7:4b:2c:26:6f:f3:de:66:d3:8a:c7:52:75: d3:91:19:2d:82:bb:1d:08:5b:32:e9:51:79:73:da: 17:db:a3:45:78:bd:ca:58:13:56:9c:70:f3:fa:fb: 5f:a7:48:c4:e1:01:01:c9:46:98:02:5e:a0:cb:31: 30:e2:49:0c:18:a8:e4:be:9a:e2:5e:1e:02:91:94: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:C4:2C:8E:B1:55:DD:B7:62:C7:46:79:B0:43:31:6C:AD:FD:AC X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e2:a2:fa:be:b6:cc:a2:b3:a8:9b:62:bb:41:f3:29:8b:bd: cd:01:85:b3:46:16:d1:fe:6f:c7:64:15:a4:10:9b:7e:12:67: db:5b:8b:49:d5:a2:e1:5f:92:fb:ab:14:a1:d5:fa:a6:89:17: b8:5d:c1:03:03:00:c6:e7:13:ed:6f:f4:40:7c:29:5f:9c:d9: 01:e3:13:10:86:81:ca:25:38:a8:cc:76:fb:24:b7:09:5e:99: e6:1b:2a:b1:5e:07:32:1c:5b:aa:7d:22:5e:b3:84:bb:7c:dc: ad:0d:22:68:69:9e:51:6b:04:21:06:5a:85:4c:76:0f:02:1d: b3:c7:45:01:ff:d3:ec:0e:72:7f:9d:37:ae:cc:00:f2:40:16: 43:f6:12:f1:94:5c:cd:25:5c:24:ec:89:ae:43:00:6f:e3:8e: d8:66:cd:e3:24:22:98:50:6f:a8:d5:df:15:a2:6a:a6:37:8f: ba:00:cb:70:dd:03:37:a8:0e:24:e1:aa:07:26:41:b3:2c:9d: fd:7b:80:56:2d:f8:ac:9a:1e:3d:dc:da:5a:1d:8a:c4:3e:48: 77:1e:aa:78:1d:3b:ea:0f:da:ab:a5:e4:da:6b:d8:78:19:0e: 6e:74:ef:e4:2d:05:a8:1a:9c:6f:07:94:cc:14:81:67:6e:db: d2:d9:8e:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUxMjA0MjI0NDA3WhcNMjUxMjExMjI0NDA3WjAYMRYwFAYD VQQDEw02OTMyMGViNy0yY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LyyBeBUGM+FnCM0n7s358L0bJV8I7rrA7yRR2FOkXaZU/YK3VmxG2U+gPHg kMrFbZ1A2WsCKx9LlVDHIhaufct8Vvj6b/GH3rU2xqAKlpAL2h3wbjKUMsPQlW0I i8t0YwgNnAqGRG/DU9w9YurHNMU6kbTFTQ+LAX09fWKW/jgTgypgDRxZ7Cf3xWsA cAnj/fkmeI5zfsYoRw7ySdVmXERi3AdobxAoadCeFiekdG7J7oQZ59dLLCZv895m 04rHUnXTkRktgrsdCFsy6VF5c9oX26NFeL3KWBNWnHDz+vtfp0jE4QEByUaYAl6g yzEw4kkMGKjkvpriXh4CkZSv6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiaxCyO sVXdt2LHRnmwQzFsrf2sMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC4qL6vrbMorOom2K7QfMpi73NAYWzRhbR/m/HZBWkEJt+EmfbW4tJ 1aLhX5L7qxSh1fqmiRe4XcEDAwDG5xPtb/RAfClfnNkB4xMQhoHKJTiozHb7JLcJ XpnmGyqxXgcyHFuqfSJes4S7fNytDSJoaZ5RawQhBlqFTHYPAh2zx0UB/9PsDnJ/ nTeuzADyQBZD9hLxlFzNJVwk7ImuQwBv447YZs3jJCKYUG+o1d8VomqmN4+6AMtw 3QM3qA4k4aoHJkGzLJ39e4BWLfismh493NpaHYrEPkh3Hqp4HTvqD9qrpeTaa9h4 GQ5udO/kLQWoGpxvB5TMFIFnbtvS2Y6I -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:41 2025 by rpki-client