This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft File: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json) Hash identifier: wOQ/5iZItZmmy5yrgSn59l15ljiyDA1JmoC2O7MpalI= Subject key identifier: CD:5A:DD:7A:27:8C:BF:CD:CB:42:6B:C7:FE:E5:B1:C3:F6:C2:ED:C5 Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC Certificate issuer: /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft Manifest number: 19 Signing time: Fri 05 Dec 2025 05:40:14 +0000 Manifest this update: Fri 05 Dec 2025 05:40:13 +0000 Manifest next update: Fri 12 Dec 2025 05:40:13 +0000 Files and hashes: 1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: OmgiXRaYzUT0lljxwLOxPi2iaVPI+kTjkF0d3BuY73w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC Validity Not Before: Dec 5 05:40:13 2025 GMT Not After : Dec 12 05:40:13 2025 GMT Subject: CN=6932703e-034e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:fb:52:c2:5a:02:08:1d:aa:5c:62:a5:b3: 7d:da:1c:a7:5c:27:35:54:54:a0:2d:2f:6a:b9:68: 9c:48:89:fb:56:97:cc:a7:9a:19:5c:69:45:23:51: 8d:60:f2:c6:30:78:3d:a8:60:78:b5:37:83:b6:e6: f4:79:b2:7e:17:8a:4f:09:2c:69:24:d9:8c:13:68: 3b:3c:17:aa:78:00:63:5e:5e:a0:1b:b1:30:6b:f2: 80:f8:e6:0a:e7:dd:27:3b:ed:ad:57:a9:d2:41:5c: 1b:97:bc:99:78:2c:60:ea:b1:00:d2:66:ee:5a:12: 6a:c1:a8:4c:66:80:6c:ee:e6:45:ce:7c:16:28:8b: ca:3e:44:bc:78:f8:87:51:61:f5:6f:0b:a0:53:ee: b0:3c:e2:8a:1d:1e:f0:82:61:78:28:e5:d2:a3:a0: 27:17:1e:a5:17:39:8c:a3:4a:ec:cf:ba:39:b5:3d: ee:5f:25:b7:1e:7e:fa:17:31:8c:bf:1d:81:98:59: d1:7a:41:b3:d5:00:4d:93:34:f7:c1:76:76:5e:5b: 6c:0f:2c:77:f4:73:d5:a3:a2:b4:7a:9a:96:3e:8d: 38:14:c3:cf:68:6a:1c:e9:8f:3a:23:d6:5f:12:02: 4f:1b:88:17:7f:97:c3:e7:6d:35:86:99:4e:d0:0a: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:DD:7A:27:8C:BF:CD:CB:42:6B:C7:FE:E5:B1:C3:F6:C2:ED:C5 X509v3 Authority Key Identifier: keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:63:a1:90:5f:15:f5:71:6f:d7:fc:b0:29:44:47:68:ca:f2: ea:ab:ed:8d:5c:3d:b4:8f:e2:5d:96:10:1c:57:d7:32:86:f3: 3c:ad:39:14:01:62:05:10:14:0a:ea:7a:a8:24:d7:7a:f3:27: 2d:47:03:75:55:13:1d:d3:90:c3:76:72:65:3a:d5:df:9a:b4: ff:97:df:64:24:12:55:f9:94:5d:85:f8:a4:d5:aa:1f:17:50: 19:7c:f0:54:98:d4:af:d3:5f:81:1f:ea:13:4e:3a:10:4a:bd: 1b:11:8a:d4:ae:48:5e:8d:b6:d2:0f:d4:d7:8c:8a:48:86:05: ed:91:bb:3b:c4:30:5d:ae:8c:15:b4:a7:f1:73:4e:d4:f8:90: 5b:16:6a:c6:0e:e6:17:a2:2e:05:ab:bb:b1:f8:a0:75:ce:ea: 0c:fc:8e:4b:fd:5b:09:16:bc:ac:74:9d:d4:1b:bc:28:fc:c8: 94:42:5a:76:27:9c:77:61:73:9f:d7:84:52:84:b5:49:58:80: fc:72:f5:17:49:9d:6f:1b:f6:92:ac:12:ab:0f:0d:ef:8d:14: 51:cd:0f:78:57:bc:34:dc:58:d4:4b:d9:cf:b0:a8:2c:fa:87: 58:32:31:00:df:40:e0:67:d5:78:06:5d:c9:7a:3b:53:1f:5c: aa:43:5e:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTk5NjExMC8GA1UEBRMoRDZBNjAyOTM0QUNCRTQxNEIzNDlBMDE1NjlFQkI2NjYx RTU0QTJCQzAeFw0yNTEyMDUwNTQwMTNaFw0yNTEyMTIwNTQwMTNaMBgxFjAUBgNV BAMTDTY5MzI3MDNlLTAzNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvkPtSwloCCB2qXGKls33aHKdcJzVUVKAtL2q5aJxIiftWl8ynmhlcaUUjUY1g 8sYweD2oYHi1N4O25vR5sn4Xik8JLGkk2YwTaDs8F6p4AGNeXqAbsTBr8oD45grn 3Sc77a1XqdJBXBuXvJl4LGDqsQDSZu5aEmrBqExmgGzu5kXOfBYoi8o+RLx4+IdR YfVvC6BT7rA84oodHvCCYXgo5dKjoCcXHqUXOYyjSuzPujm1Pe5fJbcefvoXMYy/ HYGYWdF6QbPVAE2TNPfBdnZeW2wPLHf0c9WjorR6mpY+jTgUw89oahzpjzoj1l8S Ak8biBd/l8PnbTWGmU7QClurAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzVrdeieM v83LQmvH/uWxw/bC7cUwHwYDVR0jBBgwFoAU1qYCk0rL5BSzSaAVaeu2Zh5Uorww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0I4Q0Q3MzRFQUU2 NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJTelNhQVZhZXUyWmg1VW9y dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXFZQ2swckw1QlN6U2FBVmFldTJaaDVVb3J3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx OTk2L0I4Q0Q3MzRFQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJT elNhQVZhZXUyWmg1VW9ydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL1joZBfFfVxb9f8sClER2jK8uqr7Y1cPbSP4l2WEBxX1zKG8zytORQB YgUQFArqeqgk13rzJy1HA3VVEx3TkMN2cmU61d+atP+X32QkElX5lF2F+KTVqh8X UBl88FSY1K/TX4Ef6hNOOhBKvRsRitSuSF6NttIP1NeMikiGBe2RuzvEMF2ujBW0 p/FzTtT4kFsWasYO5heiLgWru7H4oHXO6gz8jkv9WwkWvKx0ndQbvCj8yJRCWnYn nHdhc5/XhFKEtUlYgPxy9RdJnW8b9pKsEqsPDe+NFFHND3hXvDTcWNRL2c+wqCz6 h1gyMQDfQOBn1XgGXcl6O1MfXKpDXuA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:43 2025 by rpki-client