This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: ybrbD2ptFXhT05QCbU6DGhpu7pS+P05z6VZFarujkZM= Subject key identifier: E6:3E:FF:01:1F:27:9B:B7:2E:BE:6A:60:EA:12:C9:48:12:86:ED:CA Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 042C Signing time: Sat 06 Dec 2025 22:59:29 +0000 Manifest this update: Sat 06 Dec 2025 22:59:28 +0000 Manifest next update: Sat 13 Dec 2025 22:59:28 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: Yg3OLVs2lmPSaVDWcRbI/wdWJEsNCoaEauAuPQigVbk=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: l0TDwbIQKnn22v377SYBCTiXJEwlU244XaVGT+AApO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Validity Not Before: Dec 6 22:59:28 2025 GMT Not After : Dec 13 22:59:28 2025 GMT Subject: CN=6934b550-2e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:e8:d3:f7:64:e4:e2:c2:d0:0e:f2:4c:c7: 50:7b:da:43:6b:ce:34:ae:fd:3d:db:55:12:47:5f: c1:0c:8f:c9:fb:4a:47:cf:fc:eb:15:91:69:96:02: 23:60:e8:93:5b:de:83:62:81:a5:12:c0:53:3f:00: 9a:f7:0b:20:26:70:99:86:04:fa:0a:96:a4:cb:14: 31:39:c7:76:95:b3:0a:79:51:a7:ef:26:83:69:b8: 0c:79:63:1d:4e:16:45:04:90:4d:aa:d5:92:91:d7: a9:71:a8:0d:9f:c7:84:1b:67:f1:7d:45:af:14:3a: 61:14:71:0a:e2:c6:49:05:3d:4d:b5:d3:25:5b:4b: d5:92:5c:d5:26:f2:4a:81:d3:67:31:8a:17:9a:ea: a8:42:e7:a8:a2:57:02:05:a9:da:41:6d:51:4b:c0: de:f9:6a:90:aa:d7:cb:3a:00:71:4c:6e:00:4a:d9: 2a:11:6c:1e:30:9f:7d:99:7a:81:76:4b:69:f7:dc: b7:be:9d:6b:4f:aa:1a:4b:5f:28:6c:31:5a:fa:bc: df:51:62:8d:fd:d9:ab:ad:a9:65:1c:96:bc:a2:e7: fd:6e:78:7f:c0:c5:b9:38:89:fc:f2:f9:ea:3b:1d: ff:83:8b:05:5a:df:b2:13:b8:14:1b:07:3c:c2:72: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3E:FF:01:1F:27:9B:B7:2E:BE:6A:60:EA:12:C9:48:12:86:ED:CA X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b2:b2:17:7f:e4:8c:da:88:f8:4a:e7:89:42:09:34:82:52: 0f:a3:2c:a2:af:90:ba:af:d6:cf:9d:a0:8d:3c:b7:39:97:84: 2b:5b:a8:b5:df:b3:f0:01:1e:e9:1b:77:fb:4d:31:85:5b:31: 54:3e:21:ca:85:2f:be:7c:4f:02:3b:a6:d9:37:cd:37:c7:aa: 24:80:3d:88:78:00:41:2a:ab:43:0d:26:36:cb:e2:fe:d4:c0: e7:46:f5:9d:89:62:5b:22:35:70:1e:67:cd:d9:a3:d8:ee:b6: 27:14:49:a9:75:6e:35:f5:d9:af:78:0c:ff:58:9a:45:73:7b: 5e:62:ab:b1:b5:dc:f9:ff:80:20:7a:e3:4e:ad:c4:a5:a5:2a: c7:8c:3a:96:72:4b:5f:ff:5d:94:5d:1b:25:b3:ae:3e:bf:5a: ad:7a:2a:92:2b:77:d6:3b:9b:bc:2a:5d:38:49:50:a7:55:76: bf:28:74:7d:4d:dc:87:45:3e:50:83:2f:9e:da:83:c4:2a:eb: 81:fe:49:6c:5a:6c:07:8d:ca:84:49:89:49:6f:5f:06:98:33: d7:b3:3b:30:97:67:43:d7:07:f2:14:0e:5c:dc:b8:1f:29:20: 6a:90:1d:5a:38:79:b2:91:8f:ab:76:a3:14:90:e5:10:a8:b3: f5:5e:b9:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjUxMjA2MjI1OTI4WhcNMjUxMjEzMjI1OTI4WjAYMRYwFAYD VQQDEw02OTM0YjU1MC0yZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBzo0/dk5OLC0A7yTMdQe9pDa840rv0921USR1/BDI/J+0pHz/zrFZFplgIj YOiTW96DYoGlEsBTPwCa9wsgJnCZhgT6CpakyxQxOcd2lbMKeVGn7yaDabgMeWMd ThZFBJBNqtWSkdepcagNn8eEG2fxfUWvFDphFHEK4sZJBT1NtdMlW0vVklzVJvJK gdNnMYoXmuqoQueoolcCBanaQW1RS8De+WqQqtfLOgBxTG4AStkqEWweMJ99mXqB dktp99y3vp1rT6oaS18obDFa+rzfUWKN/dmrrallHJa8ouf9bnh/wMW5OIn88vnq Ox3/g4sFWt+yE7gUGwc8wnJzgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY+/wEf J5u3Lr5qYOoSyUgShu3KMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWsrIXf+SM2oj4SueJQgk0glIPoyyir5C6r9bPnaCNPLc5l4QrW6i1 37PwAR7pG3f7TTGFWzFUPiHKhS++fE8CO6bZN803x6okgD2IeABBKqtDDSY2y+L+ 1MDnRvWdiWJbIjVwHmfN2aPY7rYnFEmpdW419dmveAz/WJpFc3teYquxtdz5/4Ag euNOrcSlpSrHjDqWcktf/12UXRsls64+v1qteiqSK3fWO5u8Kl04SVCnVXa/KHR9 TdyHRT5Qgy+e2oPEKuuB/klsWmwHjcqESYlJb18GmDPXszswl2dD1wfyFA5c3Lgf KSBqkB1aOHmykY+rdqMUkOUQqLP1Xrmb -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:47 2025 by rpki-client