This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft File: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json) Hash identifier: V8NAPhXU62C/f60PViujVDDFgfdRIOEaQdBX1iRPCws= Subject key identifier: 49:55:DB:19:E6:5A:39:CF:93:21:81:DA:7C:A0:56:C0:DB:FD:BB:FC Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 Certificate issuer: /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft Manifest number: A1 Signing time: Fri 19 Dec 2025 05:24:00 +0000 Manifest this update: Fri 19 Dec 2025 05:24:00 +0000 Manifest next update: Fri 26 Dec 2025 05:24:00 +0000 Files and hashes: 1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: +Ef1d7FswZ5+V7HDsgQwWy+aOfDtkFnzo+liMvgn1ZE=) 2: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: mpt0yv2n2/9qn3jigf6poMZZmtQOJyzbjFP/yr9TelI=) 3: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: 2ZNFwVZKhHOWC3D4N4dqgdZpiwiB+c4Fi1WKpctLr0E=) 4: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: bKExJAQVgmsEGcry3muwfFx0/j1cGOEsv7XoDmBLPJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Validity Not Before: Dec 19 05:24:00 2025 GMT Not After : Dec 26 05:24:00 2025 GMT Subject: CN=6944e170-c138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:5a:e0:61:85:30:e3:d1:34:b0:47:b2:c5: 18:9e:85:ce:29:47:23:f7:e5:12:97:b9:55:8b:c2: 80:24:ae:c5:07:eb:74:21:f2:14:52:7f:22:6e:54: 50:ba:e6:9d:c0:cb:15:c9:65:fa:53:ca:c2:65:34: 37:f9:d1:83:1a:e5:37:e7:7b:b5:a9:c7:55:78:a7: 99:97:33:cb:e9:5a:ac:ba:e5:24:b3:ed:7c:4f:b7: da:1d:b7:e4:8a:a1:b1:ad:bc:73:9f:09:55:96:9a: c3:88:8a:05:66:ed:40:ad:c7:bd:b5:e6:66:af:22: 2d:cb:30:19:44:65:a9:1d:9b:5b:f6:d0:41:8f:81: a5:bd:f9:d2:d8:09:c2:cd:e2:df:2e:51:63:6f:0c: 92:68:9c:4f:68:aa:39:74:39:99:8d:48:bd:89:57: 4e:0d:8c:bd:de:4b:3a:29:f0:78:d2:a0:ca:7d:1d: a2:1f:b8:f1:c9:2d:fe:35:02:fa:5a:5c:c5:6b:e8: 50:a8:73:2c:39:ff:1d:49:cc:77:8b:51:09:dd:70: 3e:d8:6c:17:6e:27:aa:e2:13:1a:7c:22:a6:80:69: 84:5a:af:54:2c:ca:63:09:a1:f0:d9:19:c2:e7:1f: 02:75:19:a7:67:4c:5d:34:d4:74:f2:8f:16:a3:29: c2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:55:DB:19:E6:5A:39:CF:93:21:81:DA:7C:A0:56:C0:DB:FD:BB:FC X509v3 Authority Key Identifier: keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:44:07:7b:a6:43:34:04:2d:84:a6:58:8a:02:9e:cb:ed: cf:b3:0e:33:4d:94:c2:af:d2:06:72:e6:58:22:50:04:71:58: 4a:12:d6:5d:5d:c0:07:57:72:f5:6d:ef:75:c6:c3:64:c2:a0: 19:0f:c1:a7:7a:87:05:f0:2e:f8:33:60:91:2f:3f:9b:79:9c: 92:69:33:8b:55:d1:bd:c5:4c:a8:e2:4b:00:ee:5c:11:6a:20: ac:53:13:8e:a1:64:14:6b:9a:be:62:55:04:01:d5:a1:2c:70: a2:c5:d5:ee:e6:d4:3b:6d:b9:6a:ff:d5:8d:b9:9b:ad:57:a8: 2c:94:b7:6b:b1:cc:f3:cd:e7:48:28:2f:29:98:b2:4c:c5:fb: 8d:0c:66:80:0b:bd:d5:f6:36:06:dc:57:7a:f7:0a:da:fd:e1: c4:cb:18:6a:7c:01:6a:cd:19:b9:fa:33:6a:81:fd:29:42:71: ba:1d:a4:bb:ac:2b:9a:a4:90:9a:47:5d:69:da:5e:72:ba:17: 44:88:67:8e:e8:2a:1a:44:75:11:05:f0:85:54:46:72:1a:18: dc:ea:11:c8:c9:2e:7f:4b:32:87:d9:b9:2f:a1:d0:8c:48:43: 37:38:8a:d2:4a:03:49:64:32:98:3f:f6:b9:b5:ae:24:d0:23: cf:56:bb:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0NzcxMTAvBgNVBAUTKEE5MjMwQUU5OTBBMDM2N0FFNTlBMEYyMUJGRUVGRUNE OTVENzRBODEwHhcNMjUxMjE5MDUyNDAwWhcNMjUxMjI2MDUyNDAwWjAYMRYwFAYD VQQDDA02OTQ0ZTE3MC1jMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlG5a4GGFMOPRNLBHssUYnoXOKUcj9+USl7lVi8KAJK7FB+t0IfIUUn8iblRQ uuadwMsVyWX6U8rCZTQ3+dGDGuU353u1qcdVeKeZlzPL6VqsuuUks+18T7faHbfk iqGxrbxznwlVlprDiIoFZu1Arce9teZmryItyzAZRGWpHZtb9tBBj4GlvfnS2AnC zeLfLlFjbwySaJxPaKo5dDmZjUi9iVdODYy93ks6KfB40qDKfR2iH7jxyS3+NQL6 WlzFa+hQqHMsOf8dScx3i1EJ3XA+2GwXbieq4hMafCKmgGmEWq9ULMpjCaHw2RnC 5x8CdRmnZ0xdNNR08o8WoynCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElV2xnm WjnPkyGB2nygVsDb/bv8MB8GA1UdIwQYMBaAFKkjCumQoDZ65ZoPIb/u/s2V10qB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ3Ny80RDI3RDFDQ0U5 RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi9xU01LNlpDZ05ucmxtZzhodi03LXpaWFhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FTTUs2WkNnTm5ybG1nOGh2LTctelpYWFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDQ3Ny80RDI3RDFDQ0U5RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi9xU01LNlpDZ05u cmxtZzhodi03LXpaWFhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFfEQHe6ZDNAQthKZYigKey+3Psw4zTZTCr9IGcuZYIlAEcVhKEtZd XcAHV3L1be91xsNkwqAZD8GneocF8C74M2CRLz+beZySaTOLVdG9xUyo4ksA7lwR aiCsUxOOoWQUa5q+YlUEAdWhLHCixdXu5tQ7bblq/9WNuZutV6gslLdrsczzzedI KC8pmLJMxfuNDGaAC73V9jYG3Fd69wra/eHEyxhqfAFqzRm5+jNqgf0pQnG6HaS7 rCuapJCaR11p2l5yuhdEiGeO6CoaRHURBfCFVEZyGhjc6hHIyS5/SzKH2bkvodCM SEM3OIrSSgNJZDKYP/a5ta4k0CPPVrv+ -----END CERTIFICATE-----Generated at Sat Dec 20 02:47:47 2025 by rpki-client