This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft File: QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json) Hash identifier: nauW4vNPRz00u2phrCNnBl7GNCPXGjaYZ4E1qZPQs5Y= Subject key identifier: 69:BC:82:30:B6:26:AF:2C:6F:6A:37:00:49:DD:22:11:30:32:2C:51 Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D Certificate issuer: /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft Manifest number: 06 Signing time: Fri 19 Dec 2025 07:00:31 +0000 Manifest this update: Fri 19 Dec 2025 07:00:31 +0000 Manifest next update: Fri 26 Dec 2025 07:00:31 +0000 Files and hashes: 1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: jQZ0/f3w3WN0RwUNagSLxabmFMUKN7MNGzKXz1WJODQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D Validity Not Before: Dec 19 07:00:31 2025 GMT Not After : Dec 26 07:00:31 2025 GMT Subject: CN=6944f80f-8a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:d6:b4:b7:54:f7:cf:af:73:b5:8b:18:19: c0:7f:50:51:2a:e2:a9:e2:d1:31:41:b8:f0:ee:15: ba:86:34:a3:09:c1:5a:be:b5:e9:8b:2a:28:e4:2d: 4c:5e:32:97:4a:39:12:1e:e6:4d:91:e4:d2:06:91: aa:e8:e6:23:7e:51:cc:2d:bf:5f:9a:38:2d:22:68: f0:f3:c9:96:eb:f5:eb:57:32:93:32:78:d5:c1:4a: 72:d6:82:33:f1:58:08:23:97:8c:aa:f0:81:59:27: 98:fb:66:45:87:5d:a2:d8:72:ff:01:ce:c8:9d:da: cc:4c:7e:94:00:43:0e:e2:62:1a:45:8a:3d:5f:be: a8:ce:0a:e7:ae:f8:7b:79:b3:82:ba:11:90:a2:54: 41:70:c4:97:96:17:53:e7:cc:b1:bf:d3:c8:a7:a7: 21:1f:1d:ac:77:37:0c:40:68:aa:9e:92:a0:b7:dd: cf:da:24:1a:dd:36:e3:8f:78:0d:7e:b5:92:3b:7d: 98:95:dd:83:67:eb:9c:49:66:1b:58:27:7e:8c:94: c1:75:c2:1b:99:bc:41:40:4a:6a:c0:10:2e:dd:57: a2:e4:af:61:cb:6a:2a:3a:bb:66:1b:96:46:74:79: fe:fa:5b:e5:39:a7:db:b1:da:5e:31:d5:c6:88:41: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BC:82:30:B6:26:AF:2C:6F:6A:37:00:49:DD:22:11:30:32:2C:51 X509v3 Authority Key Identifier: keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:58:aa:c4:2d:85:0f:3a:12:84:4b:72:e2:f1:ac:5b:9f:67: 06:33:97:12:b1:20:c2:dc:b0:38:d6:54:de:71:68:72:84:eb: de:f0:ff:d1:5a:98:e9:96:d0:5b:8e:53:9c:2d:b0:89:0f:e4: 43:98:73:db:34:b1:61:6e:e8:60:28:b6:c4:5e:5a:76:6d:aa: 42:49:df:18:95:df:73:97:f7:b4:c1:a2:0e:d7:68:e2:07:8d: 5f:c0:9a:9f:0b:21:62:b4:13:40:f4:8b:b1:9a:64:4a:67:71: 9f:04:81:ec:00:ed:fd:f3:b0:78:eb:c9:f1:05:81:fa:90:25: e2:ed:4f:09:7a:92:93:0a:a4:13:ee:08:8b:42:29:45:f2:0a: 9c:39:ff:62:ca:48:f0:66:b0:02:3e:71:e6:46:2f:82:5f:fc: 61:f7:92:ed:72:84:f8:92:b9:5f:5a:84:ff:fd:c3:e7:64:7d: 70:4f:27:0f:db:d7:c8:52:0d:b9:64:2c:d0:77:7b:6a:fd:8d: e8:6c:d1:8c:88:51:7c:4f:26:7f:01:11:4c:b1:04:9e:ea:3b: 19:6d:18:35:c0:3d:80:0a:a7:6e:1c:1e:b1:56:cd:6c:6f:ba: 6f:31:b6:a8:2f:19:d5:36:68:14:d7:f7:22:28:bf:a6:99:f0: 8b:8d:fa:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDYzOTExMC8GA1UEBRMoNDA1RTVBQjA3NTAwN0JBM0Q4NTI2MkQ2OEIyNTE5ODZD NkU5REQ1RDAeFw0yNTEyMTkwNzAwMzFaFw0yNTEyMjYwNzAwMzFaMBgxFjAUBgNV BAMMDTY5NDRmODBmLThhN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCE6da0t1T3z69ztYsYGcB/UFEq4qni0TFBuPDuFbqGNKMJwVq+temLKijkLUxe MpdKORIe5k2R5NIGkaro5iN+Ucwtv1+aOC0iaPDzyZbr9etXMpMyeNXBSnLWgjPx WAgjl4yq8IFZJ5j7ZkWHXaLYcv8Bzsid2sxMfpQAQw7iYhpFij1fvqjOCueu+Ht5 s4K6EZCiVEFwxJeWF1PnzLG/08inpyEfHax3NwxAaKqekqC33c/aJBrdNuOPeA1+ tZI7fZiV3YNn65xJZhtYJ36MlMF1whuZvEFASmrAEC7dV6Lkr2HLaio6u2YblkZ0 ef76W+U5p9ux2l4x1caIQc0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUabyCMLYm ryxvajcASd0iETAyLFEwHwYDVR0jBBgwFoAUQF5asHUAe6PYUmLWiyUZhsbp3V0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0NjM5LzJCQTIzQzhDRDVC RjExRjA4REJDN0MzMUM0RjlBRTAyL1FGNWFzSFVBZTZQWVVtTFdpeVVaaHNicDNW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUY1YXNIVUFlNlBZVW1MV2l5VVpoc2JwM1YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 NjM5LzJCQTIzQzhDRDVCRjExRjA4REJDN0MzMUM0RjlBRTAyL1FGNWFzSFVBZTZQ WVVtTFdpeVVaaHNicDNWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALNYqsQthQ86EoRLcuLxrFufZwYzlxKxIMLcsDjWVN5xaHKE697w/9Fa mOmW0FuOU5wtsIkP5EOYc9s0sWFu6GAotsReWnZtqkJJ3xiV33OX97TBog7XaOIH jV/Amp8LIWK0E0D0i7GaZEpncZ8EgewA7f3zsHjryfEFgfqQJeLtTwl6kpMKpBPu CItCKUXyCpw5/2LKSPBmsAI+ceZGL4Jf/GH3ku1yhPiSuV9ahP/9w+dkfXBPJw/b 18hSDblkLNB3e2r9jehs0YyIUXxPJn8BEUyxBJ7qOxltGDXAPYAKp24cHrFWzWxv um8xtqgvGdU2aBTX9yIov6aZ8IuN+hQ= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:06 2025 by rpki-client