This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: IW6v5c6JsfAF6gG+VgqM4/B3eiqHFprYHAgNRLZYxZY= Subject key identifier: 22:03:1A:F1:BA:9F:D8:84:07:2F:A7:5A:BE:E9:B9:DB:B5:2B:1E:B1 Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: B9 Signing time: Fri 05 Dec 2025 04:02:53 +0000 Manifest this update: Fri 05 Dec 2025 04:02:52 +0000 Manifest next update: Fri 12 Dec 2025 04:02:52 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: TAiQs2DMyL7JP5w6KTQXxMKA7l5BI9H3ZSvznM1vLiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Dec 5 04:02:52 2025 GMT Not After : Dec 12 04:02:52 2025 GMT Subject: CN=6932596c-c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:ec:69:4d:b4:cd:b3:b9:a8:97:e9:1d:3f: 43:a3:63:2f:e1:2e:db:9f:1c:0f:f3:e3:bb:d5:3d: ec:fa:39:22:a3:4f:e4:d9:bf:3a:b5:02:79:82:54: e7:97:76:76:68:b0:5a:1e:63:1b:99:8d:13:a1:ee: 1b:93:d8:fd:ad:8b:b7:7a:4e:e4:4b:27:7c:43:04: 17:11:fd:63:bd:66:5c:34:dd:5e:0a:a6:71:36:73: e6:55:bb:96:f2:dd:0d:8f:22:10:30:42:87:4b:9b: 8a:bb:8e:5a:c7:12:e9:24:d3:19:2a:87:cf:d7:91: 01:2d:3b:40:dc:a6:67:1e:7b:87:34:a4:76:ea:6a: a8:e9:5a:8b:2b:33:e5:83:a3:0c:23:a1:0c:95:b7: c1:12:8f:fb:e8:ef:43:6e:b7:6d:a3:37:6b:5d:f1: 90:7e:57:75:5f:83:cb:d8:08:62:2d:2c:3d:72:71: 17:19:ac:9f:d6:71:84:24:e1:22:cc:62:d8:f3:dd: a0:3f:49:8b:0b:db:d3:bc:c5:b2:af:bf:c0:03:5c: bc:b4:39:33:60:d0:c1:05:c1:82:bf:b3:50:69:eb: 2f:00:15:44:7f:53:ed:1f:1a:2f:e1:36:25:9d:dc: 12:c7:36:69:fd:54:d9:70:3e:f3:e3:8d:7c:7d:2c: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:1A:F1:BA:9F:D8:84:07:2F:A7:5A:BE:E9:B9:DB:B5:2B:1E:B1 X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ca:57:c7:a7:9d:3e:e2:9b:8e:53:20:f4:04:f5:43:93:5b: e1:17:17:5f:da:41:e8:d3:8f:a0:58:fa:ba:fa:89:29:54:34: 20:94:ae:9b:c8:5c:96:23:76:d3:5c:e7:2b:44:5c:b9:1d:4a: d1:14:e9:a8:f8:e4:28:c3:13:3a:a3:26:42:7a:df:5d:f3:52: 08:38:52:37:3b:c5:48:e3:e7:b3:0f:2a:49:f9:6e:c8:f9:00: 00:83:2f:ca:0e:94:69:37:1e:db:5d:f6:76:88:13:4a:9d:02: 3a:dd:9c:69:14:5d:ca:54:50:95:b0:a2:4f:4d:b6:9e:a9:06: 21:30:54:8d:2a:a9:5e:5e:dd:22:2e:d1:a2:5e:90:95:ea:8d: 37:04:60:79:a6:2d:2d:91:b0:c4:c0:80:6f:1f:85:57:1b:01: b9:60:d3:94:57:dd:3d:46:c3:42:e6:28:49:f7:07:c8:93:99: a0:26:d3:bf:ef:85:0d:48:69:92:29:e4:39:53:9d:1b:a4:f5: 4d:e4:c3:98:c2:68:b6:f3:4d:4c:67:b6:93:06:a3:35:94:2c: f5:03:e1:46:b4:7e:50:4e:e8:98:ee:ab:b5:e3:b0:4e:eb:0c: 75:3d:7b:72:aa:52:d4:ca:8f:ae:98:af:db:f1:10:1a:16:46: c6:f0:56:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBNDcxMTAvBgNVBAUTKDQzQjIyMkZFM0JFNDkxQUQ3MDU4QkVEMzgwNDIxNDQy NUQ2OTQxQjcwHhcNMjUxMjA1MDQwMjUyWhcNMjUxMjEyMDQwMjUyWjAYMRYwFAYD VQQDEw02OTMyNTk2Yy1jM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKHsaU20zbO5qJfpHT9Do2Mv4S7bnxwP8+O71T3s+jkio0/k2b86tQJ5glTn l3Z2aLBaHmMbmY0Toe4bk9j9rYu3ek7kSyd8QwQXEf1jvWZcNN1eCqZxNnPmVbuW 8t0NjyIQMEKHS5uKu45axxLpJNMZKofP15EBLTtA3KZnHnuHNKR26mqo6VqLKzPl g6MMI6EMlbfBEo/76O9DbrdtozdrXfGQfld1X4PL2AhiLSw9cnEXGayf1nGEJOEi zGLY892gP0mLC9vTvMWyr7/AA1y8tDkzYNDBBcGCv7NQaesvABVEf1PtHxov4TYl ndwSxzZp/VTZcD7z4418fSxhkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIDGvG6 n9iEBy+nWr7pudu1Kx6xMB8GA1UdIwQYMBaAFEOyIv475JGtcFi+04BCFEJdaUG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny9FNUJGRUE0NkI4 MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9RN0lpX2p2a2thMXdXTDdUZ0VJVVFsMXBR YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE0Ny9FNUJGRUE0NkI4MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9RN0lpX2p2a2th MXdXTDdUZ0VJVVFsMXBRYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ylfHp50+4puOUyD0BPVDk1vhFxdf2kHo04+gWPq6+okpVDQglK6b yFyWI3bTXOcrRFy5HUrRFOmo+OQowxM6oyZCet9d81IIOFI3O8VI4+ezDypJ+W7I +QAAgy/KDpRpNx7bXfZ2iBNKnQI63ZxpFF3KVFCVsKJPTbaeqQYhMFSNKqleXt0i LtGiXpCV6o03BGB5pi0tkbDEwIBvH4VXGwG5YNOUV909RsNC5ihJ9wfIk5mgJtO/ 74UNSGmSKeQ5U50bpPVN5MOYwmi2801MZ7aTBqM1lCz1A+FGtH5QTuiY7qu147BO 6wx1PXtyqlLUyo+umK/b8RAaFkbG8Faw -----END CERTIFICATE-----Generated at Sat Dec 6 22:09:22 2025 by rpki-client