This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: OYF9iJ1d3UwEEgbThbjOH3/wsMJhXlFfa2peWlAxiDY= Subject key identifier: 88:5B:C3:21:9D:C3:3E:62:41:25:80:44:CA:81:47:D1:2E:5A:F7:46 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 2118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 55EC Signing time: Sat 06 Dec 2025 14:47:31 +0000 Manifest this update: Sat 06 Dec 2025 14:47:31 +0000 Manifest next update: Sat 13 Dec 2025 14:47:31 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: 5FFt7EhogdbTv19yXr+pZNaBcPzDfXsAjRnStdWcPB8=) 2: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g=) 3: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: wW6HtygaJuqa+MnCVL4XlwdsV1VvmruGQrlj4oWNX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8472 (0x2118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: Dec 6 14:47:31 2025 GMT Not After : Dec 13 14:47:31 2025 GMT Subject: CN=69344203-fea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:40:3a:7b:a2:35:55:dc:ee:47:74:72:0c: 63:16:df:20:fb:9d:c3:19:32:12:5b:55:b2:b1:df: a0:7f:5d:c5:2c:01:bc:ad:bb:55:7d:91:cc:06:f1: a6:64:18:43:6f:60:90:49:57:2f:4b:32:46:8a:f0: ca:84:32:a2:53:71:dc:70:15:0b:7c:97:fb:ba:c7: 0a:a8:ae:70:33:5f:e7:91:41:af:a3:c6:89:29:4d: 38:48:f9:10:7f:7a:39:f6:46:ee:14:91:cb:6f:d6: c8:9b:a1:66:d4:58:4d:12:f1:57:cc:fc:48:36:cf: 62:bd:8c:c4:70:fc:bc:89:b6:5b:b1:d5:35:2b:25: 3c:15:6a:6e:b7:2a:4e:65:7c:d9:46:ba:0c:d5:ca: 37:01:56:df:00:20:96:22:39:13:80:51:2b:79:b3: 27:8b:b6:4c:e6:de:3e:90:6b:fe:97:40:aa:55:fe: b8:34:06:3d:f0:34:a6:eb:55:b3:84:46:9c:83:77: 1f:18:69:ff:5d:58:0d:6b:3c:6a:f7:95:f5:df:9d: 41:64:88:20:dc:d5:93:07:6a:03:d0:29:c9:99:0c: d1:e6:ea:11:5a:f4:6a:56:8b:37:b6:da:0d:db:71: 95:6d:6b:8d:61:02:30:fc:25:f3:3b:48:a0:d9:1d: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:C3:21:9D:C3:3E:62:41:25:80:44:CA:81:47:D1:2E:5A:F7:46 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9e:84:3b:01:91:61:2f:8c:39:1f:04:95:9a:e3:6c:84:37: 03:af:a8:41:87:f7:d8:f7:57:61:12:e3:0a:d2:1c:80:9d:ff: 27:28:14:4f:05:a9:cf:63:ad:e8:3b:ba:df:ea:64:9e:b3:9d: 96:89:4c:00:ee:48:a2:e2:a6:36:3e:6b:88:40:e7:7a:5e:eb: 83:cb:8c:b2:b2:bc:6f:4f:ba:82:be:01:f9:52:e8:57:ca:29: 26:f5:b0:10:69:12:18:d3:d8:78:95:62:98:6d:6f:ef:42:b9: fa:4b:74:8a:41:5b:06:9f:57:ad:51:4f:13:09:f6:8e:e1:87: fa:45:87:01:97:c5:1f:12:58:1d:f4:9f:38:55:e1:1d:56:58: 19:7b:f1:fa:94:91:28:ef:54:fe:45:55:86:c9:67:32:74:be: 1e:2b:64:6e:1d:82:c3:d3:48:f3:b7:45:24:ac:cc:c6:23:ab: ab:b6:9d:a4:bb:98:4f:7d:71:02:dc:cd:74:60:52:80:12:46: 69:fc:89:b7:31:70:b5:13:38:cd:81:b1:dc:08:28:44:57:84: 94:e2:0d:b3:b2:1f:ed:ce:14:10:b0:89:80:ef:f7:77:30:e7: 72:e0:19:0b:5d:40:09:38:7b:e8:48:88:d0:67:d8:06:d6:de: 76:1b:fd:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjUxMjA2MTQ0NzMxWhcNMjUxMjEzMTQ0NzMxWjAYMRYwFAYD VQQDEw02OTM0NDIwMy1mZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YlAOnuiNVXc7kd0cgxjFt8g+53DGTISW1Wysd+gf13FLAG8rbtVfZHMBvGm ZBhDb2CQSVcvSzJGivDKhDKiU3HccBULfJf7uscKqK5wM1/nkUGvo8aJKU04SPkQ f3o59kbuFJHLb9bIm6Fm1FhNEvFXzPxINs9ivYzEcPy8ibZbsdU1KyU8FWputypO ZXzZRroM1co3AVbfACCWIjkTgFErebMni7ZM5t4+kGv+l0CqVf64NAY98DSm61Wz hEacg3cfGGn/XVgNazxq95X1351BZIgg3NWTB2oD0CnJmQzR5uoRWvRqVos3ttoN 23GVbWuNYQIw/CXzO0ig2R1soQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhbwyGd wz5iQSWARMqBR9EuWvdGMB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9noQ7AZFhL4w5HwSVmuNshDcDr6hBh/fY91dhEuMK0hyAnf8nKBRP BanPY63oO7rf6mSes52WiUwA7kii4qY2PmuIQOd6XuuDy4yysrxvT7qCvgH5UuhX yikm9bAQaRIY09h4lWKYbW/vQrn6S3SKQVsGn1etUU8TCfaO4Yf6RYcBl8UfElgd 9J84VeEdVlgZe/H6lJEo71T+RVWGyWcydL4eK2RuHYLD00jzt0UkrMzGI6urtp2k u5hPfXEC3M10YFKAEkZp/Im3MXC1EzjNgbHcCChEV4SU4g2zsh/tzhQQsImA7/d3 MOdy4BkLXUAJOHvoSIjQZ9gG1t52G/2w -----END CERTIFICATE-----Generated at Sat Dec 6 18:32:00 2025 by rpki-client