This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json) Hash identifier: 5DQcbWunVUEvLbRaDkOqdpuYXQon7TpP7Dx9GGgomWo= Subject key identifier: 5E:0F:42:D8:89:C6:A5:69:E2:BA:73:3D:DD:57:3C:09:28:F1:C4:8B Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78 Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft Manifest number: 06 Signing time: Fri 05 Dec 2025 05:55:45 +0000 Manifest this update: Fri 05 Dec 2025 05:55:45 +0000 Manifest next update: Fri 12 Dec 2025 05:55:45 +0000 Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: yqas8uMuT9VVMW/e4ZSOXvPeIzly79AQ4gepIKl4fyQ=) 2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: meg/lA1QwqDySKhpjEzkoudVyA+mOqqQd/Xz1Ox0z9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78 Validity Not Before: Dec 5 05:55:45 2025 GMT Not After : Dec 12 05:55:45 2025 GMT Subject: CN=693273e1-3119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:b8:58:d9:9a:b1:c3:c7:e7:4e:f6:30:35: ec:15:db:dd:f9:92:20:11:33:b6:9b:f6:a9:c6:69: 52:6e:f9:16:d4:cf:72:7e:b3:93:7c:43:a9:bb:fa: 1d:a9:c7:f0:7f:24:6d:77:f3:d8:19:30:ab:c0:31: b8:d9:6f:da:69:7c:c4:06:86:4a:d3:01:64:32:4c: 29:c3:27:e0:e0:f6:be:ef:da:11:c2:a1:c8:e7:fe: 76:a3:c8:78:b9:1b:f7:5e:0c:e7:0e:e3:b2:4b:69: ef:7c:2c:e0:97:cc:0c:f9:c6:c0:31:d8:41:a8:51: 7b:d2:a0:a2:a6:07:2c:df:d3:dd:34:2b:ea:d6:41: 19:63:1e:92:9a:d5:68:b3:df:d3:fa:e9:11:73:58: 12:ce:9a:3a:4c:23:1b:60:e1:2b:a3:0a:f2:34:55: ca:a6:3c:5d:cc:f5:22:34:3e:20:20:75:73:3f:b7: 4b:e7:74:c3:40:20:5f:e8:f3:66:b1:ce:16:3c:7c: f7:84:27:f2:a9:21:eb:6c:76:d1:c3:7b:97:57:41: cd:a4:c8:e1:1e:7b:5a:49:17:fd:5d:41:ba:42:1e: 0d:ac:25:08:c8:c2:9a:5b:8a:24:c0:cb:67:ce:c9: c0:08:3a:e9:02:f5:e1:c9:6b:fe:71:16:3b:d9:ce: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:42:D8:89:C6:A5:69:E2:BA:73:3D:DD:57:3C:09:28:F1:C4:8B X509v3 Authority Key Identifier: keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4d:63:a9:33:48:5d:8d:a1:90:fe:9b:91:91:66:ea:b8:b0: ff:e1:7f:02:8f:3a:71:cd:10:4f:2c:0b:4c:4f:1f:46:25:0b: ab:78:87:0b:5e:e7:87:a8:ce:53:6f:9f:9e:c6:df:5d:0a:e8: e9:e2:56:54:f0:d4:4e:1d:e9:d3:53:b9:a0:86:20:a3:3d:04: 7b:ce:09:31:1b:d5:d9:00:84:7d:0c:15:48:6a:5a:af:83:f5: 67:ed:43:5c:62:76:fd:e4:ac:00:0a:81:f7:8e:8d:e0:d1:3b: e3:42:17:c4:27:63:59:29:ff:04:ef:79:20:63:5a:fa:b2:a1: ee:ad:bf:06:a1:9a:be:20:f6:73:61:81:f3:7d:3e:68:c3:0e: 95:70:e9:a8:1e:34:fc:4a:f6:fb:4f:e8:9b:9c:10:5f:cb:1d: ed:2f:4b:30:00:f3:84:50:37:b8:4b:75:bf:98:58:ed:72:9c: 45:ac:de:28:f0:07:79:c5:c5:b3:d2:e1:66:8a:91:d1:48:69: 94:2d:3d:b1:6c:44:de:33:bd:ff:39:02:b5:5d:b6:8e:cb:25: 2e:03:9c:1c:0c:ea:68:d1:95:b7:e7:0c:9b:7e:e1:01:4e:fa: 60:3b:f1:7c:00:cd:1e:17:a9:b2:17:87:ec:53:09:c7:bc:ec: 55:45:fb:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEZFODExMC8GA1UEBRMoQTg0QTMzNjVFQTUyM0JEQTRGMjMzQTYxRTUwNzdGMzEx OEQ2M0Y3ODAeFw0yNTEyMDUwNTU1NDVaFw0yNTEyMTIwNTU1NDVaMBgxFjAUBgNV BAMTDTY5MzI3M2UxLTMxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjzrhY2Zqxw8fnTvYwNewV2935kiARM7ab9qnGaVJu+RbUz3J+s5N8Q6m7+h2p x/B/JG1389gZMKvAMbjZb9ppfMQGhkrTAWQyTCnDJ+Dg9r7v2hHCocjn/najyHi5 G/deDOcO47JLae98LOCXzAz5xsAx2EGoUXvSoKKmByzf0900K+rWQRljHpKa1Wiz 39P66RFzWBLOmjpMIxtg4SujCvI0VcqmPF3M9SI0PiAgdXM/t0vndMNAIF/o82ax zhY8fPeEJ/KpIetsdtHDe5dXQc2kyOEee1pJF/1dQbpCHg2sJQjIwppbiiTAy2fO ycAIOukC9eHJa/5xFjvZzq5pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXg9C2InG pWniunM93Vc8CSjxxIswHwYDVR0jBBgwFoAUqEozZepSO9pPIzph5Qd/MRjWP3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RkU4LzMyMkFBQjRDQ0M0 QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlwUEl6cGg1UWRfTVJqV1Az Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUVvelplcFNPOXBQSXpwaDVRZF9NUmpXUDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RkU4LzMyMkFBQjRDQ0M0QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlw UEl6cGg1UWRfTVJqV1AzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBNY6kzSF2NoZD+m5GRZuq4sP/hfwKPOnHNEE8sC0xPH0YlC6t4hwte 54eozlNvn57G310K6OniVlTw1E4d6dNTuaCGIKM9BHvOCTEb1dkAhH0MFUhqWq+D 9WftQ1xidv3krAAKgfeOjeDRO+NCF8QnY1kp/wTveSBjWvqyoe6tvwahmr4g9nNh gfN9PmjDDpVw6ageNPxK9vtP6JucEF/LHe0vSzAA84RQN7hLdb+YWO1ynEWs3ijw B3nFxbPS4WaKkdFIaZQtPbFsRN4zvf85ArVdto7LJS4DnBwM6mjRlbfnDJt+4QFO +mA78XwAzR4XqbIXh+xTCce87FVF+xk= -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:21 2025 by rpki-client