This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json) Hash identifier: x/1gwVCyi+3PXHFNLjFFBoDBc0ajuwgTixkbTzhdLyg= Subject key identifier: DD:17:6E:AA:54:EE:72:E4:36:31:06:2A:49:FC:66:BF:26:5C:1D:5C Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft Manifest number: 0B36 Signing time: Thu 18 Dec 2025 18:54:00 +0000 Manifest this update: Thu 18 Dec 2025 18:54:00 +0000 Manifest next update: Thu 25 Dec 2025 18:54:00 +0000 Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: SB5s8rGjrcYSFb5P4vfx6IqVZuhJND2AcQL40yo8Kp4=) 2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: AtiHUqqiSc5seLUNoB/SjIutv6okcY16FsBOaprHkwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Validity Not Before: Dec 18 18:54:00 2025 GMT Not After : Dec 25 18:54:00 2025 GMT Subject: CN=69444dc8-95f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:32:16:c8:f3:5a:7c:55:18:ae:96:70:33:3c: cd:50:c2:99:40:15:3c:f1:29:f8:e0:79:04:29:00: 7c:a1:eb:fe:4e:1a:80:4f:1a:1d:cf:26:28:49:8c: 42:1b:ab:62:01:f6:e4:9a:c4:d5:87:3b:b5:43:f7: 07:b7:bb:01:79:ef:83:34:52:3d:08:af:36:14:86: f7:a7:a6:67:e5:22:34:5b:c3:53:56:49:94:c8:d1: 7b:52:fa:d1:bf:64:be:4a:5b:a8:ef:6e:9f:ed:8c: 67:2a:0b:89:03:58:c5:a0:64:c2:dd:f8:06:0c:80: d8:05:4a:a4:58:e5:5c:fd:11:c6:56:6c:f7:5b:c1: e9:4c:e4:a1:6b:41:a3:9e:78:ac:2a:72:03:2c:68: f1:28:bb:fb:43:0e:2f:f6:21:dc:91:c9:ec:a0:8d: aa:64:27:23:1f:8e:78:fe:cf:8e:11:93:ce:a3:c3: e6:df:ea:78:8b:e0:66:6b:fc:ba:ed:08:a0:af:34: 69:92:9f:78:ca:da:01:71:61:e0:62:d8:e4:d1:59: a8:ac:02:cf:d8:40:18:b5:0c:7c:a2:a2:1f:d9:30: 8a:13:48:e6:4b:b6:f2:77:ab:0b:94:ef:7c:ec:23: 33:d4:10:6c:61:3c:f8:b8:c6:92:8b:d7:34:2a:d0: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:17:6E:AA:54:EE:72:E4:36:31:06:2A:49:FC:66:BF:26:5C:1D:5C X509v3 Authority Key Identifier: keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c3:b3:4b:c8:b0:f2:27:3c:92:5a:5e:fe:da:68:50:2c:80: c0:45:5e:7f:d8:a3:4e:2a:4e:81:b2:e6:e9:58:06:8b:8c:42: 68:8e:59:6e:f0:9a:9b:06:5d:1c:85:a7:27:72:77:75:79:30: 6d:e9:c6:5c:23:8a:a3:e4:49:a0:19:06:18:d9:20:29:02:1a: c5:4a:dc:b6:48:cb:30:7e:26:82:49:1c:54:60:bd:2d:a7:bf: c8:83:f8:35:91:b6:1c:5d:71:14:1a:9b:12:2b:c3:46:e9:71: 53:c3:b4:c9:14:25:5d:91:4b:39:02:91:61:24:6c:27:6a:21: 95:85:08:31:d3:ee:40:5a:dc:5f:2c:53:ed:1f:71:5e:57:ed: 6a:39:e0:ec:08:78:2d:e2:9b:86:22:f1:95:ec:8b:b9:d7:d1: 78:f4:5f:4d:35:7b:9f:31:63:45:7b:92:fd:57:bd:f9:3f:40: d5:d8:e0:47:3f:0c:0e:9d:ca:93:d9:0e:5a:12:d8:7b:2d:b9: d2:1e:fc:74:04:df:21:2a:e4:08:a2:b3:a3:4c:34:2f:91:cd: b4:7c:07:08:a1:d3:cc:5b:42:31:fa:66:fe:0c:e3:9f:75:00: 3c:ce:2c:5e:d3:ba:4f:eb:6d:b1:29:25:b9:7c:03:05:86:e9: 46:8d:20:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4 MTU3OEVDQjUwHhcNMjUxMjE4MTg1NDAwWhcNMjUxMjI1MTg1NDAwWjAYMRYwFAYD VQQDDA02OTQ0NGRjOC05NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TIWyPNafFUYrpZwMzzNUMKZQBU88Sn44HkEKQB8oev+ThqATxodzyYoSYxC G6tiAfbkmsTVhzu1Q/cHt7sBee+DNFI9CK82FIb3p6Zn5SI0W8NTVkmUyNF7UvrR v2S+Sluo726f7YxnKguJA1jFoGTC3fgGDIDYBUqkWOVc/RHGVmz3W8HpTOSha0Gj nnisKnIDLGjxKLv7Qw4v9iHckcnsoI2qZCcjH454/s+OEZPOo8Pm3+p4i+Bma/y6 7QigrzRpkp94ytoBcWHgYtjk0VmorALP2EAYtQx8oqIf2TCKE0jmS7byd6sLlO98 7CMz1BBsYTz4uMaSi9c0KtCOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0XbqpU 7nLkNjEGKkn8Zr8mXB1cMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcw7NLyLDyJzySWl7+2mhQLIDARV5/2KNOKk6BsubpWAaLjEJojllu 8JqbBl0chacncnd1eTBt6cZcI4qj5EmgGQYY2SApAhrFSty2SMswfiaCSRxUYL0t p7/Ig/g1kbYcXXEUGpsSK8NG6XFTw7TJFCVdkUs5ApFhJGwnaiGVhQgx0+5AWtxf LFPtH3FeV+1qOeDsCHgt4puGIvGV7Iu519F49F9NNXufMWNFe5L9V735P0DV2OBH PwwOncqT2Q5aEth7LbnSHvx0BN8hKuQIorOjTDQvkc20fAcIodPMW0Ix+mb+DOOf dQA8zixe07pP622xKSW5fAMFhulGjSAR -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:34 2025 by rpki-client