This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: T2jGlqnmhEP7jCwBdKa4nK5WHwRZEVJKzkSitWjpwek= Subject key identifier: 18:59:9C:C1:D3:FD:B7:8C:14:59:BE:88:07:47:D4:15:BD:B2:16:20 Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: D3 Signing time: Sun 21 Dec 2025 04:48:45 +0000 Manifest this update: Sun 21 Dec 2025 04:48:44 +0000 Manifest next update: Sun 28 Dec 2025 04:48:44 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: Beg5nB15S/ssyNcr+h2DGGncPbvp3igOxZzy2OURED8=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Dec 21 04:48:44 2025 GMT Not After : Dec 28 04:48:44 2025 GMT Subject: CN=69477c2d-60fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:5d:dc:39:b5:3d:f7:dd:f1:dc:ba:d8:21: 59:4a:f6:ae:dc:f8:84:3a:46:2d:ad:75:64:69:b7: 01:08:d3:90:26:d6:92:16:31:ce:d4:f9:17:0f:fe: af:6f:98:c9:c4:22:96:c1:29:5c:65:a1:97:a8:f3: 90:f3:00:0a:74:5a:0e:ae:ec:83:aa:61:e3:9c:be: ce:6e:e9:b1:d4:2b:14:f7:d2:f6:8e:59:6d:0d:10: 47:5e:fe:5e:ef:1b:1b:4a:52:d6:66:45:d8:8e:7c: dd:e4:1d:d8:db:a3:91:01:5a:08:36:86:be:c8:fa: 92:b9:18:c0:86:be:e2:d0:9f:94:88:58:69:07:ab: 71:a6:24:45:97:b7:4c:0b:db:d3:90:3f:38:fa:4d: f0:ec:e5:d8:26:b0:15:24:52:65:21:9b:b0:8a:3c: 26:52:11:59:33:f8:7a:85:ae:4b:ca:95:a3:f7:61: 02:48:50:9a:1a:ba:89:2f:8f:41:b1:91:84:4e:1a: 5e:ae:47:67:4b:a9:b9:b9:6d:45:69:35:69:52:e0: ea:0d:35:88:02:4f:58:23:c9:21:98:38:94:e7:6b: be:06:29:99:16:f0:82:c4:33:7f:dd:05:75:c2:53: 07:ac:88:94:30:79:93:d7:26:f7:83:b1:a9:f8:45: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:9C:C1:D3:FD:B7:8C:14:59:BE:88:07:47:D4:15:BD:B2:16:20 X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e4:b6:f9:00:66:f5:63:ad:45:ab:37:53:76:ca:d6:ed:0f: 91:ee:15:1a:b1:18:b1:ea:48:56:93:af:a0:ca:8e:70:25:fd: 56:ca:e3:f7:c2:90:4e:7f:04:7a:7e:1e:4d:5c:18:cd:da:e4: b1:e2:1b:92:98:9d:ae:5d:a2:86:84:42:2e:bf:28:e5:e8:96: 95:54:ae:71:ab:a3:9d:17:5a:75:b2:b9:e6:e6:77:4d:94:d8: b4:c0:e9:b5:43:02:da:d3:7f:0b:ec:9e:f6:f5:9d:59:ff:a7: 4e:1e:48:80:15:83:88:08:4e:f3:f5:e1:3c:6a:76:82:bd:4f: a8:d9:8f:24:af:18:fe:dc:f5:52:6f:ee:f5:3c:23:6e:e1:d0: 98:6e:f9:9e:cc:45:3a:0e:46:a1:fe:2c:15:ed:88:1b:9e:02: 43:7f:a8:bf:7e:43:60:66:56:b9:21:85:59:0c:52:8d:9a:c2: 33:08:55:8b:75:67:03:c1:c6:f0:a2:df:44:96:d2:36:78:e7: 88:f8:ec:57:52:11:54:53:5e:c4:70:c0:0b:0a:37:7b:b8:71: 9d:c8:ee:53:af:c8:15:b6:03:a8:ab:15:7e:58:b4:6e:88:60: bc:a8:c9:05:7e:fa:00:8b:e1:47:13:c2:fa:e4:1b:cc:52:35: a1:32:b6:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5 N0YwMEY1RjUwHhcNMjUxMjIxMDQ0ODQ0WhcNMjUxMjI4MDQ0ODQ0WjAYMRYwFAYD VQQDDA02OTQ3N2MyZC02MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySdd3Dm1Pffd8dy62CFZSvau3PiEOkYtrXVkabcBCNOQJtaSFjHO1PkXD/6v b5jJxCKWwSlcZaGXqPOQ8wAKdFoOruyDqmHjnL7Obumx1CsU99L2jlltDRBHXv5e 7xsbSlLWZkXYjnzd5B3Y26ORAVoINoa+yPqSuRjAhr7i0J+UiFhpB6txpiRFl7dM C9vTkD84+k3w7OXYJrAVJFJlIZuwijwmUhFZM/h6ha5LypWj92ECSFCaGrqJL49B sZGEThperkdnS6m5uW1FaTVpUuDqDTWIAk9YI8khmDiU52u+BimZFvCCxDN/3QV1 wlMHrIiUMHmT1yb3g7Gp+EUgDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhZnMHT /beMFFm+iAdH1BW9shYgMB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5 ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu UllXWTNqd1pxaGVYOEE5ZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh5Lb5AGb1Y61FqzdTdsrW7Q+R7hUasRix6khWk6+gyo5wJf1WyuP3 wpBOfwR6fh5NXBjN2uSx4huSmJ2uXaKGhEIuvyjl6JaVVK5xq6OdF1p1srnm5ndN lNi0wOm1QwLa038L7J729Z1Z/6dOHkiAFYOICE7z9eE8anaCvU+o2Y8krxj+3PVS b+71PCNu4dCYbvmezEU6Dkah/iwV7YgbngJDf6i/fkNgZla5IYVZDFKNmsIzCFWL dWcDwcbwot9EltI2eOeI+OxXUhFUU17EcMALCjd7uHGdyO5Tr8gVtgOoqxV+WLRu iGC8qMkFfvoAi+FHE8L65BvMUjWhMraH -----END CERTIFICATE-----Generated at Sun Dec 21 13:42:36 2025 by rpki-client