This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: nI47EsT7ijyhAPfXNxFXYZPMsOagudhmAenyPnXIPKo= Subject key identifier: EB:B9:8D:B5:7C:3A:61:42:CB:32:7E:94:2A:A5:E2:3D:E9:FC:16:E5 Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 061F Signing time: Thu 18 Dec 2025 22:11:19 +0000 Manifest this update: Thu 18 Dec 2025 22:11:18 +0000 Manifest next update: Thu 25 Dec 2025 22:11:18 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: pkHCrXqpmU+rBrJH8S/vGcnR30KbVBDslTJfq1kfFJc=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: +2Hbaxr801NyDnPE1ldFyqXo4OeCNMmMLf3UKaT2zEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Dec 18 22:11:18 2025 GMT Not After : Dec 25 22:11:18 2025 GMT Subject: CN=69447c07-c4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:f4:24:63:14:56:f8:46:3c:c1:ef:a0:92: d5:b0:c9:a1:6f:a3:26:75:39:ab:1c:ff:fa:6d:73: 2d:f3:f4:fb:19:2a:77:ba:ac:5f:5e:30:d6:4f:a1: 43:a8:cc:ac:4e:a1:50:ae:22:47:11:d5:ae:56:5f: bf:9b:4d:99:92:a4:78:c6:24:a8:df:5d:1e:82:d7: 40:7c:d3:7d:ea:c2:3d:ec:41:d7:e2:c4:73:cc:49: 38:66:a2:3d:b7:1e:6a:3d:ed:c4:30:46:d3:86:37: c7:3b:f4:cc:1d:27:52:28:99:14:01:cf:49:e6:4a: 39:da:6b:d7:82:09:8e:05:2e:68:bc:81:e4:92:61: c2:74:f7:d9:41:20:99:02:d8:af:71:f8:4a:f4:f0: 4a:dd:b3:dd:50:22:56:e9:dd:34:dd:36:0c:46:73: 84:3f:d9:c8:c1:e0:31:6e:2f:b6:96:bc:47:9f:72: 47:22:8b:55:7d:9d:b2:25:d3:c8:8c:9e:ae:1a:56: 00:81:5e:4a:93:b9:e0:d5:2b:98:b2:23:2e:34:f6: 1b:fa:83:07:8b:22:9d:c8:db:5c:d3:ad:ec:cb:d8: f9:a9:ee:c0:38:b8:65:5a:c2:82:37:68:02:b9:17: 95:0e:a7:58:a9:7c:db:1f:c4:2f:89:a3:45:10:26: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B9:8D:B5:7C:3A:61:42:CB:32:7E:94:2A:A5:E2:3D:E9:FC:16:E5 X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e9:a0:b6:f5:9d:ba:c9:99:f9:82:0e:5a:b7:78:29:da:ce: 1e:dd:85:68:ea:18:fc:34:15:54:25:59:f8:2f:57:fe:49:d8: 96:f0:ee:73:1d:da:51:53:4d:be:19:fe:00:23:0f:ff:73:d0: 26:14:f6:1a:4e:49:c7:57:a7:aa:c3:04:ea:6b:9c:19:ce:d0: d2:db:aa:32:30:c4:b8:73:51:2d:6b:c5:c4:09:57:fe:48:67: 47:63:9b:d2:4a:a5:32:0a:4f:02:a0:70:7e:0c:2c:0b:0e:44: aa:06:9c:7c:c1:bd:21:42:76:55:54:3c:84:4e:2f:22:a7:7e: 43:45:14:db:93:d2:d1:dd:40:3d:d0:be:b2:a0:dd:40:3f:90: 14:ac:b0:51:4b:3a:f5:b3:be:84:f7:1e:0e:89:a8:57:d2:74: 10:9f:2a:80:39:41:76:d2:14:00:b1:7d:b2:04:3b:df:6e:6b: 33:82:eb:00:be:54:45:ab:80:8e:be:55:b0:45:0a:e2:af:76: c7:c8:8e:83:a3:db:f2:76:c2:bc:b2:10:e8:28:b8:ae:57:68: 9f:9c:9b:4b:46:a7:81:51:8d:2a:5f:2e:3b:6a:99:ea:03:64: cf:cc:a4:39:e7:55:a5:ac:7a:d0:db:76:4f:27:4c:06:bc:4e: d7:c5:7a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUxMjE4MjIxMTE4WhcNMjUxMjI1MjIxMTE4WjAYMRYwFAYD VQQDDA02OTQ0N2MwNy1jNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/T0JGMUVvhGPMHvoJLVsMmhb6MmdTmrHP/6bXMt8/T7GSp3uqxfXjDWT6FD qMysTqFQriJHEdWuVl+/m02ZkqR4xiSo310egtdAfNN96sI97EHX4sRzzEk4ZqI9 tx5qPe3EMEbThjfHO/TMHSdSKJkUAc9J5ko52mvXggmOBS5ovIHkkmHCdPfZQSCZ AtivcfhK9PBK3bPdUCJW6d003TYMRnOEP9nIweAxbi+2lrxHn3JHIotVfZ2yJdPI jJ6uGlYAgV5Kk7ng1SuYsiMuNPYb+oMHiyKdyNtc063sy9j5qe7AOLhlWsKCN2gC uReVDqdYqXzbH8QviaNFECZ0PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOu5jbV8 OmFCyzJ+lCql4j3p/BblMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp6aC29Z26yZn5gg5at3gp2s4e3YVo6hj8NBVUJVn4L1f+SdiW8O5z HdpRU02+Gf4AIw//c9AmFPYaTknHV6eqwwTqa5wZztDS26oyMMS4c1Eta8XECVf+ SGdHY5vSSqUyCk8CoHB+DCwLDkSqBpx8wb0hQnZVVDyETi8ip35DRRTbk9LR3UA9 0L6yoN1AP5AUrLBRSzr1s76E9x4OiahX0nQQnyqAOUF20hQAsX2yBDvfbmszgusA vlRFq4COvlWwRQrir3bHyI6Do9vydsK8shDoKLiuV2ifnJtLRqeBUY0qXy47apnq A2TPzKQ551WlrHrQ23ZPJ0wGvE7XxXpv -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:24 2025 by rpki-client