This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: bcii9HLi6IzcMKJzH5YZjq2A/BSCGbDNOC2MxViwBm4= Subject key identifier: 71:D7:5F:1A:92:08:3E:4B:AA:7E:38:A5:23:1E:BF:89:89:8C:CF:28 Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 01A3 Signing time: Fri 19 Dec 2025 02:27:06 +0000 Manifest this update: Fri 19 Dec 2025 02:27:05 +0000 Manifest next update: Fri 26 Dec 2025 02:27:05 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: +a2nYJZALO8SMiyEyljmMEm21n9aAFTPevY7ilu9BiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Dec 19 02:27:05 2025 GMT Not After : Dec 26 02:27:05 2025 GMT Subject: CN=6944b7fa-78b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:15:06:ee:84:eb:ee:1f:a1:f0:17:11:80: 29:e9:35:2d:4d:09:b5:3a:8c:7d:6e:c0:ef:75:1d: df:1d:eb:47:44:f2:b4:8e:2c:0c:03:2d:eb:4c:42: 6a:1f:d6:99:2e:c8:69:ff:9e:21:df:8b:1d:29:9a: d0:87:d5:90:82:c8:30:cc:1d:28:89:a4:95:af:61: bc:cb:d7:c8:08:b9:85:26:98:2d:a1:9b:42:33:55: 3a:1b:5c:c9:43:9f:90:3b:c0:b6:e4:af:0c:4b:bc: ee:bc:cf:79:9c:24:7d:41:e2:83:93:6d:b8:a5:75: 72:53:a8:65:1c:2e:f7:ad:3a:cb:96:42:b6:a9:03: 29:c2:d5:4f:5d:2c:6c:c8:9b:f4:50:ff:04:f1:b9: d1:81:71:95:70:f7:a9:74:8c:fd:13:b9:af:8d:c5: e1:7c:99:6c:c5:13:ab:03:19:09:fd:3b:9a:84:8d: 65:88:ce:5c:06:13:4e:1b:4e:c2:c6:f3:dc:0a:bf: fe:cf:58:a6:18:b4:1c:ee:e9:5c:d8:a8:48:62:0c: 7e:9c:3b:18:c7:62:a8:fe:46:ee:94:b2:ec:18:c5: 5e:de:59:a5:47:03:de:eb:04:f4:2b:79:20:f5:ae: 4d:9f:b7:9b:b4:0d:c2:24:f8:38:7b:18:ae:3f:13: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:5F:1A:92:08:3E:4B:AA:7E:38:A5:23:1E:BF:89:89:8C:CF:28 X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:52:23:89:53:f3:82:1c:29:78:5f:0f:ad:d3:b5:c0:49:49: 57:d5:21:d0:4b:3e:75:2c:58:db:74:99:71:f2:14:ee:da:65: 4e:97:a6:2e:35:b8:05:29:d1:77:aa:d8:f2:16:af:b6:cc:de: 6c:16:b9:19:ea:2d:e2:98:4d:49:5c:2d:95:30:77:6f:c7:df: 78:95:bf:01:c4:ff:6e:41:f2:e1:d8:af:2e:f4:8b:92:b7:4d: 0b:ce:35:b4:79:9f:16:57:e7:ea:f3:52:05:1c:54:7a:ec:d9: 89:62:f6:66:9b:20:84:4f:8b:7e:d0:e5:e6:27:51:0a:e8:c9: 22:0e:4a:dd:df:61:79:59:59:cd:71:e9:1d:0a:47:e6:cb:fc: 46:aa:5b:88:fb:ce:8a:1e:25:cc:4b:ae:89:97:4d:e6:70:69: e8:5c:bf:f8:9d:74:56:81:02:a3:f7:0c:f2:09:a6:b8:69:54: 5b:82:fe:b5:fa:dd:29:b3:0d:14:57:c6:f6:30:25:1a:fd:24: 66:79:f3:ae:6c:e9:fc:9f:5b:54:30:24:d8:94:d8:02:9c:0b: 3d:03:00:bc:e0:0e:7e:93:b3:53:b3:a2:47:37:94:4a:ce:3b: b2:ba:89:48:a1:1f:0e:0b:0d:8c:60:58:94:01:04:00:2b:52: a6:09:e4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUxMjE5MDIyNzA1WhcNMjUxMjI2MDIyNzA1WjAYMRYwFAYD VQQDDA02OTQ0YjdmYS03OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjgIVBu6E6+4fofAXEYAp6TUtTQm1Oox9bsDvdR3fHetHRPK0jiwMAy3rTEJq H9aZLshp/54h34sdKZrQh9WQgsgwzB0oiaSVr2G8y9fICLmFJpgtoZtCM1U6G1zJ Q5+QO8C25K8MS7zuvM95nCR9QeKDk224pXVyU6hlHC73rTrLlkK2qQMpwtVPXSxs yJv0UP8E8bnRgXGVcPepdIz9E7mvjcXhfJlsxROrAxkJ/TuahI1liM5cBhNOG07C xvPcCr/+z1imGLQc7ulc2KhIYgx+nDsYx2Ko/kbulLLsGMVe3lmlRwPe6wT0K3kg 9a5Nn7ebtA3CJPg4exiuPxO94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHXXxqS CD5Lqn44pSMev4mJjM8oMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsUiOJU/OCHCl4Xw+t07XASUlX1SHQSz51LFjbdJlx8hTu2mVOl6Yu NbgFKdF3qtjyFq+2zN5sFrkZ6i3imE1JXC2VMHdvx994lb8BxP9uQfLh2K8u9IuS t00LzjW0eZ8WV+fq81IFHFR67NmJYvZmmyCET4t+0OXmJ1EK6MkiDkrd32F5WVnN cekdCkfmy/xGqluI+86KHiXMS66Jl03mcGnoXL/4nXRWgQKj9wzyCaa4aVRbgv61 +t0psw0UV8b2MCUa/SRmefOubOn8n1tUMCTYlNgCnAs9AwC84A5+k7NTs6JHN5RK zjuyuolIoR8OCw2MYFiUAQQAK1KmCeTF -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:58 2025 by rpki-client