This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: sxm+U+zrqsxZFSnO1nl08hMe/PpGwUtfkQBlLRVcPCc= Subject key identifier: BF:11:BD:57:F8:5A:A5:11:B6:D3:94:CD:0A:F5:A5:10:05:D8:25:77 Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: 0126 Signing time: Fri 05 Dec 2025 02:47:23 +0000 Manifest this update: Fri 05 Dec 2025 02:47:22 +0000 Manifest next update: Fri 12 Dec 2025 02:47:22 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: PGbgiAmln9P3U7Jx1Si1ZN42xhIf4SqT/5oPl0DxKvU=) 2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: 1KiFLWub5BHrSO0tUJ2uOHpJ+a6PoNSbEd3Z8qezbIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Dec 5 02:47:22 2025 GMT Not After : Dec 12 02:47:22 2025 GMT Subject: CN=693247ba-c6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:1b:78:29:f1:ae:a8:02:ab:22:0a:0e:d8: a1:eb:7a:74:5b:cc:ba:56:29:b0:c5:70:5c:e3:36: 4c:8b:5d:12:93:8c:8d:36:3d:5e:8a:fa:a1:cd:c6: f2:59:d3:7b:f7:63:fb:a1:30:60:55:9b:b7:2a:ed: 37:88:f7:e7:33:e3:85:6f:93:79:29:d1:c2:0e:be: b5:9f:19:88:e0:aa:cd:b9:da:b8:2e:de:5d:2d:dd: 49:b2:f3:58:bf:8b:dd:37:7d:f6:48:81:d8:e0:a8: 88:25:a7:5e:4e:f0:f9:4d:9c:64:28:b9:60:2c:1b: 62:39:5f:52:69:24:b2:9d:46:f5:ae:85:b8:c7:f8: 15:f7:b3:ce:84:73:ad:fe:be:6c:a3:0e:04:67:8b: 36:74:7f:ea:de:13:dc:2d:8c:6d:5e:dd:44:50:15: d8:23:cd:9d:45:a8:35:c9:79:36:d9:62:08:9e:5f: 8b:3f:b1:4b:6f:e6:fc:d8:a0:e5:14:1c:c5:00:c9: 9d:d3:f8:a1:bb:18:ed:2b:fb:35:71:0a:e7:0f:07: d0:cf:81:58:e1:f6:c6:b1:a2:5e:8f:c3:4e:52:6e: 70:a0:a9:7f:b1:33:9e:7b:d9:22:f0:38:c9:d1:8d: b4:f8:c9:42:e8:0a:51:7d:8b:33:a4:e1:d2:37:51: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:11:BD:57:F8:5A:A5:11:B6:D3:94:CD:0A:F5:A5:10:05:D8:25:77 X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:28:76:43:b7:4a:17:22:f1:f6:f5:09:fd:21:6e:ad:c1:34: a5:95:78:a3:9b:b4:45:c8:90:30:ba:4d:fb:e0:e7:fd:de:2a: 43:57:a2:a8:60:de:71:f7:a6:0f:b3:3a:db:2e:87:4d:1e:85: 8e:bb:d8:59:6e:29:c2:e5:cc:f2:97:60:33:bb:d6:3b:49:ff: c8:47:a6:96:65:cc:0d:39:37:63:12:ed:12:64:18:b0:8e:bf: 5e:19:ca:46:40:e4:a0:81:b4:fa:76:0e:78:58:fe:bb:aa:a9: 91:14:ec:d6:52:55:9d:72:1f:1f:73:7e:99:2f:0c:73:5f:9c: e1:d2:c3:4e:60:6a:41:e6:00:43:5e:a1:97:83:9b:91:38:8b: e4:d8:4d:52:75:19:f6:7e:88:9d:e0:11:43:b7:49:f5:31:b2: 12:67:c5:2a:7e:1a:ff:1c:2c:7a:c1:36:b2:34:e9:bb:45:07: cb:72:26:6f:98:e1:74:8d:a0:95:75:55:ba:fe:ab:bb:ca:1b: 63:ec:f8:46:83:03:7f:92:32:85:d3:9d:d5:e5:1e:d9:d4:99: 3f:17:87:60:66:74:f6:61:d7:a6:19:a9:93:6f:71:88:5b:47: 32:ce:59:7f:8d:75:7f:13:25:ad:14:56:53:97:42:3c:64:f4: 2b:d2:c8:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUxMjA1MDI0NzIyWhcNMjUxMjEyMDI0NzIyWjAYMRYwFAYD VQQDEw02OTMyNDdiYS1jNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+MbeCnxrqgCqyIKDtih63p0W8y6VimwxXBc4zZMi10Sk4yNNj1eivqhzcby WdN792P7oTBgVZu3Ku03iPfnM+OFb5N5KdHCDr61nxmI4KrNudq4Lt5dLd1JsvNY v4vdN332SIHY4KiIJadeTvD5TZxkKLlgLBtiOV9SaSSynUb1roW4x/gV97POhHOt /r5sow4EZ4s2dH/q3hPcLYxtXt1EUBXYI82dRag1yXk22WIInl+LP7FLb+b82KDl FBzFAMmd0/ihuxjtK/s1cQrnDwfQz4FY4fbGsaJej8NOUm5woKl/sTOee9ki8DjJ 0Y20+MlC6ApRfYszpOHSN1GXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8RvVf4 WqURttOUzQr1pRAF2CV3MB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKKHZDt0oXIvH29Qn9IW6twTSllXijm7RFyJAwuk374Of93ipDV6Ko YN5x96YPszrbLodNHoWOu9hZbinC5czyl2Azu9Y7Sf/IR6aWZcwNOTdjEu0SZBiw jr9eGcpGQOSggbT6dg54WP67qqmRFOzWUlWdch8fc36ZLwxzX5zh0sNOYGpB5gBD XqGXg5uROIvk2E1SdRn2foid4BFDt0n1MbISZ8Uqfhr/HCx6wTayNOm7RQfLciZv mOF0jaCVdVW6/qu7yhtj7PhGgwN/kjKF053V5R7Z1Jk/F4dgZnT2YdemGamTb3GI W0cyzll/jXV/EyWtFFZTl0I8ZPQr0sju -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:41 2025 by rpki-client