This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json) Hash identifier: pRPeMP/0GQuZ7hX6zUEaU+MbYRmvAg4AJF7gMZ/wHN4= Subject key identifier: 66:6C:5A:89:2A:F8:81:0C:BB:7E:AE:30:5C:F8:D1:0B:E7:BC:42:80 Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft Manifest number: BC Signing time: Thu 01 Jan 2026 05:29:10 +0000 Manifest this update: Thu 01 Jan 2026 05:29:10 +0000 Manifest next update: Thu 08 Jan 2026 05:29:10 +0000 Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: y6LuUg0OAEryjArYkQEUkWtLedTrP9mrvISfqu9Kh9Y=) 2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 05:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Validity Not Before: Jan 1 05:29:10 2026 GMT Not After : Jan 8 05:29:10 2026 GMT Subject: CN=69560626-0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:d6:cb:70:24:33:0a:8f:c7:38:9a:ab:74: a1:e8:4b:98:9a:8f:c6:a7:2a:e2:4e:4f:67:58:b5: da:2d:3e:7c:79:33:d4:3a:2e:7a:61:3f:cc:85:3f: 21:02:44:f0:ef:8e:37:c7:88:6b:53:db:b8:a0:36: 20:ad:a3:bd:ae:39:e8:9f:76:d3:4f:09:d6:39:79: bc:ad:d7:e7:0f:87:c7:d1:6e:d5:af:35:76:df:20: 63:0e:20:30:a5:9e:4b:99:14:ae:38:11:0d:c7:f2: 25:56:db:e6:98:88:33:53:71:fd:60:bc:7d:63:03: fc:1f:c1:48:c5:28:fc:d1:5d:69:c0:c5:f1:31:51: 45:06:ab:d1:58:55:d6:3c:d0:f9:7b:b4:8a:d0:3b: c6:fd:36:1d:29:6d:71:8d:b2:6b:58:6f:c3:b0:bc: c4:67:63:c9:b3:44:2e:d5:01:8a:5a:9f:fa:67:dd: 08:34:64:38:90:cd:ad:51:b2:6b:29:0e:f7:d5:be: d3:6f:e4:ec:cb:75:b9:a9:7c:a8:6c:e9:b8:43:6f: bb:a0:28:a6:aa:be:a3:a3:da:e7:b1:2f:bd:df:21: e8:32:95:6e:4a:36:d6:fa:fc:bd:d2:bc:2f:11:96: 17:3a:3b:d5:bd:68:37:43:d8:9a:ba:5d:41:49:4b: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6C:5A:89:2A:F8:81:0C:BB:7E:AE:30:5C:F8:D1:0B:E7:BC:42:80 X509v3 Authority Key Identifier: keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:13:a7:c0:e6:f3:4e:75:3b:1f:e9:76:bf:ce:06:22:ed:28: b9:3f:48:8d:65:7b:01:9d:80:eb:3c:ff:3f:b2:a9:ea:5b:6f: e2:1f:6d:61:08:82:ea:64:75:cc:94:dc:4d:cb:b4:84:c8:cc: c7:81:ba:3f:7f:fe:a6:6f:ab:bb:28:01:cd:a6:e6:9c:95:a0: 86:a9:9f:02:ee:cb:54:c6:2c:c7:96:b9:f4:1c:c0:71:5b:64: e4:67:b0:1e:fe:21:82:ca:e0:70:ff:b5:2f:94:ba:e2:d0:5b: 15:2b:cd:2a:36:bf:b8:67:aa:b4:36:a5:9c:bd:8a:8f:1d:23: 70:a9:92:be:df:5f:7e:58:e6:c0:f3:08:a2:c7:4c:d9:0f:4c: 9f:95:35:99:5e:5c:8d:e4:44:f7:18:b2:e0:c4:98:fb:ca:36: 38:6a:63:3a:e3:df:6e:56:c2:e1:a8:0e:0e:0e:ad:5d:8f:c0: af:85:b5:cc:9b:62:0b:89:f0:b4:a0:ee:25:a7:b1:9e:77:44: 9c:e4:c0:a0:ae:76:19:aa:a7:49:db:15:f3:3f:be:ff:10:19: dd:31:94:fc:0c:7a:18:a7:b0:33:d7:6e:5b:42:39:8e:5a:05: 35:ab:22:e6:b2:3e:73:8d:4f:91:aa:c8:52:16:95:13:ac:f1: 9c:f6:b3:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNjIxMTAvBgNVBAUTKDQyRkVGMzMxNzQxQTU0RDVBMEFFNzU1MzEwOEQ0RDJE MzJCMDU3QjAwHhcNMjYwMTAxMDUyOTEwWhcNMjYwMTA4MDUyOTEwWjAYMRYwFAYD VQQDDA02OTU2MDYyNi0wNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDXWy3AkMwqPxziaq3Sh6EuYmo/GpyriTk9nWLXaLT58eTPUOi56YT/MhT8h AkTw7443x4hrU9u4oDYgraO9rjnon3bTTwnWOXm8rdfnD4fH0W7VrzV23yBjDiAw pZ5LmRSuOBENx/IlVtvmmIgzU3H9YLx9YwP8H8FIxSj80V1pwMXxMVFFBqvRWFXW PND5e7SK0DvG/TYdKW1xjbJrWG/DsLzEZ2PJs0Qu1QGKWp/6Z90INGQ4kM2tUbJr KQ731b7Tb+Tsy3W5qXyobOm4Q2+7oCimqr6jo9rnsS+93yHoMpVuSjbW+vy90rwv EZYXOjvVvWg3Q9iaul1BSUtkTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZsWokq +IEMu36uMFz40QvnvEKAMB8GA1UdIwQYMBaAFEL+8zF0GlTVoK51UxCNTS0ysFew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I2Mi8yNjYxOUQ0NEM2 RTgxMUVGQkI1MjBCMERDNEY5QUUwMi9Rdjd6TVhRYVZOV2dyblZURUkxTkxUS3dW N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I2Mi8yNjYxOUQ0NEM2RTgxMUVGQkI1MjBCMERDNEY5QUUwMi9Rdjd6TVhRYVZO V2dyblZURUkxTkxUS3dWN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbE6fA5vNOdTsf6Xa/zgYi7Si5P0iNZXsBnYDrPP8/sqnqW2/iH21h CILqZHXMlNxNy7SEyMzHgbo/f/6mb6u7KAHNpuaclaCGqZ8C7stUxizHlrn0HMBx W2TkZ7Ae/iGCyuBw/7UvlLri0FsVK80qNr+4Z6q0NqWcvYqPHSNwqZK+319+WObA 8wiix0zZD0yflTWZXlyN5ET3GLLgxJj7yjY4amM6499uVsLhqA4ODq1dj8CvhbXM m2ILifC0oO4lp7Ged0Sc5MCgrnYZqqdJ2xXzP77/EBndMZT8DHoYp7Az125bQjmO WgU1qyLmsj5zjU+RqshSFpUTrPGc9rMT -----END CERTIFICATE-----Generated at Fri Jan 2 11:33:52 2026 by rpki-client