This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json) Hash identifier: EwwD4o3gJPiO/QHLeznuWlZ6XNToQCYXansmOdzgyqI= Subject key identifier: F1:CA:59:8A:C1:85:74:E2:10:37:02:E0:1D:0A:B7:59:E4:9E:33:71 Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Certificate serial: 0B84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft Manifest number: 1316 Signing time: Thu 04 Dec 2025 18:23:46 +0000 Manifest this update: Thu 04 Dec 2025 18:23:45 +0000 Manifest next update: Thu 11 Dec 2025 18:23:45 +0000 Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: EQ4BVfYaCwfZALWA77N97BZWc2YVzVLPYN4sSu4QvXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2948 (0xb84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Validity Not Before: Dec 4 18:23:45 2025 GMT Not After : Dec 11 18:23:45 2025 GMT Subject: CN=6931d1b2-8cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:45:e7:b1:cd:12:17:d1:7a:89:10:3b:c4: 9b:15:41:a1:3b:88:a7:33:82:6c:d3:0d:25:ad:37: 3c:82:91:0b:1c:31:cc:34:5a:01:9f:c5:8c:ee:92: 92:cb:2f:2c:d9:15:02:9d:99:84:5a:cf:d3:08:36: cf:28:24:70:38:a8:3a:b9:e3:a0:e9:0f:b6:b0:0a: 0b:f7:67:cc:e0:9e:b6:1d:f5:66:51:74:ca:a9:74: 28:43:7b:19:59:cd:b6:b1:2c:9e:a1:2e:11:c4:ad: 71:09:12:9c:0f:bc:8c:06:fd:0a:21:a8:87:0b:6a: 90:83:32:ff:b4:d8:9d:fe:46:de:a9:52:3a:44:fc: 4e:ca:f5:bf:93:e3:d0:35:3c:cb:50:3a:33:44:f5: 46:30:3a:1f:25:88:54:34:8b:74:85:b7:a2:c4:ba: 8e:cb:c1:76:43:b7:f8:66:a9:91:ca:1e:fb:7e:04: 8f:5e:50:de:5f:2a:4d:63:70:15:0b:d6:96:08:2f: fc:ae:2f:e2:c5:cd:99:1c:92:fa:2e:5d:0e:98:05: ba:b5:a6:72:fb:db:ac:e3:a1:72:d4:79:9a:9b:02: dc:f8:35:b7:de:fe:a3:e8:8e:14:a6:cf:64:8b:f5: f6:89:97:35:7e:1f:cc:c3:9c:dd:d8:18:80:67:48: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CA:59:8A:C1:85:74:E2:10:37:02:E0:1D:0A:B7:59:E4:9E:33:71 X509v3 Authority Key Identifier: keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:98:9a:d4:71:de:a9:48:68:bb:42:14:22:90:5e:1d:5f:f8: 1d:d3:96:24:a4:e3:be:71:cb:ba:64:66:0a:e3:45:d9:e6:d4: 21:94:71:dd:92:16:28:88:f4:f4:ce:24:2f:d2:7b:b1:fc:66: 17:a9:dd:cf:71:6f:2c:55:f5:c4:6d:1e:6f:3f:ad:81:3b:d4: cd:db:57:a3:36:1b:4b:27:3b:fd:04:33:ee:6c:fd:1b:e2:b5: f1:89:93:e0:2e:1e:c9:7f:dc:98:04:86:11:c6:fb:12:00:69: ab:dc:81:fa:25:f1:ea:12:f5:37:a4:32:b3:cf:20:0e:0e:3e: 3c:f2:7c:00:d2:60:b2:f1:5b:fc:8b:94:b3:49:fe:88:64:37: 7b:3b:68:8a:97:2a:42:5b:2f:b6:2b:3f:aa:b6:9f:58:0f:a0: 98:13:14:34:5c:9c:6f:83:1c:d4:79:b2:41:35:c1:75:31:b1: 3d:81:c9:b2:2f:b2:ae:0d:06:3f:0e:8f:05:b3:8a:44:e2:f0: 1d:52:5f:b4:92:2f:d0:b6:eb:28:f8:ea:1d:94:54:06:e1:87: 2e:ba:69:36:e5:26:ed:fd:1d:45:03:90:9a:a3:27:68:06:06: 33:fb:27:be:b9:c2:d9:ff:ff:38:03:bd:9d:58:b9:62:61:6e: 34:8a:7f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEIzRTQxNTdERDU4RDQzQTdBN0Q4MEZGMzA2RkJDNTQx NTQ0NTE2RTYwHhcNMjUxMjA0MTgyMzQ1WhcNMjUxMjExMTgyMzQ1WjAYMRYwFAYD VQQDEw02OTMxZDFiMi04Y2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN1F57HNEhfReokQO8SbFUGhO4inM4Js0w0lrTc8gpELHDHMNFoBn8WM7pKS yy8s2RUCnZmEWs/TCDbPKCRwOKg6ueOg6Q+2sAoL92fM4J62HfVmUXTKqXQoQ3sZ Wc22sSyeoS4RxK1xCRKcD7yMBv0KIaiHC2qQgzL/tNid/kbeqVI6RPxOyvW/k+PQ NTzLUDozRPVGMDofJYhUNIt0hbeixLqOy8F2Q7f4ZqmRyh77fgSPXlDeXypNY3AV C9aWCC/8ri/ixc2ZHJL6Ll0OmAW6taZy+9us46Fy1HmamwLc+DW33v6j6I4Ups9k i/X2iZc1fh/Mw5zd2BiAZ0h4TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHKWYrB hXTiEDcC4B0Kt1nknjNxMB8GA1UdIwQYMBaAFLPkFX3VjUOnp9gP8wb7xUFURRbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2ZW4yQV96QnZ2RlFWUkZG dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtUVZmZFdOUTZlbjJBX3pCdnZGUVZSRkZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2 ZW4yQV96QnZ2RlFWUkZGdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBImJrUcd6pSGi7QhQikF4dX/gd05YkpOO+ccu6ZGYK40XZ5tQhlHHd khYoiPT0ziQv0nux/GYXqd3PcW8sVfXEbR5vP62BO9TN21ejNhtLJzv9BDPubP0b 4rXxiZPgLh7Jf9yYBIYRxvsSAGmr3IH6JfHqEvU3pDKzzyAODj488nwA0mCy8Vv8 i5SzSf6IZDd7O2iKlypCWy+2Kz+qtp9YD6CYExQ0XJxvgxzUebJBNcF1MbE9gcmy L7KuDQY/Do8Fs4pE4vAdUl+0ki/Qtuso+OodlFQG4Ycuumk25Sbt/R1FA5Caoydo BgYz+ye+ucLZ//84A72dWLliYW40in+N -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:28 2025 by rpki-client