This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json) Hash identifier: MfFlYZeuFDDNFDw/79GuakY+0evOafZ+rIfNYbH7xrg= Subject key identifier: 69:FE:BE:B6:A7:C0:9D:9B:6E:69:25:28:5F:81:93:E9:94:45:20:1A Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft Manifest number: F1 Signing time: Fri 19 Dec 2025 04:28:05 +0000 Manifest this update: Fri 19 Dec 2025 04:28:04 +0000 Manifest next update: Fri 26 Dec 2025 04:28:04 +0000 Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: /vdq8tnPtCPzfqUdPmtBppLu8a166/5rsrO9CanjPGs=) 2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: EF4oE/lxCN23IMjmuuP02cCqUrL7uq26SoDsV63e3dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Validity Not Before: Dec 19 04:28:04 2025 GMT Not After : Dec 26 04:28:04 2025 GMT Subject: CN=6944d455-9c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:42:f1:9e:6c:f0:62:bf:76:2f:c7:2e:15: e1:bc:56:bd:ed:33:fa:b5:77:38:c5:04:f5:2c:d3: 8f:02:b2:4c:62:a3:b0:fb:4d:ef:25:8f:69:00:c0: 95:84:4c:14:72:73:61:ee:c5:9b:5e:f6:21:50:0b: 8b:62:e5:36:d2:98:e3:b9:05:03:ff:26:bc:3b:e7: 96:5e:ff:95:d4:8e:cb:48:f9:76:b5:ec:1e:20:ba: 07:71:9c:ba:e6:56:d9:a1:18:0c:ba:95:73:a6:c7: 76:6f:19:22:6a:24:ab:da:0d:fc:a2:2a:7a:44:a8: ec:1a:0f:b8:51:92:ac:c8:ea:bc:ec:6a:23:a3:77: 36:5f:0d:8a:fb:f0:a6:b7:0d:56:c4:c9:64:ba:be: 4d:93:41:8b:80:6a:62:7c:9b:63:86:d6:8d:08:69: 3e:fa:0b:e9:51:6d:d5:60:62:95:be:5f:81:35:95: 55:de:de:e9:12:66:2f:0e:2a:a6:be:da:d9:22:4d: f3:da:4e:56:f9:82:99:f3:fe:35:dc:69:55:6b:0f: 38:af:6a:16:dc:55:d3:ba:1c:ad:6f:70:ef:01:43: 4f:a8:e7:b5:3a:11:fd:13:6b:8d:9e:b8:81:0a:1c: 2c:62:19:0c:f0:7f:6a:ee:95:de:b1:4c:ce:c8:9b: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:BE:B6:A7:C0:9D:9B:6E:69:25:28:5F:81:93:E9:94:45:20:1A X509v3 Authority Key Identifier: keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c3:3e:8e:67:b6:04:f6:29:cd:d3:62:60:f1:85:de:55:24: 66:9c:b0:43:c6:d3:53:ac:ea:9a:53:a8:78:16:8b:c4:31:4c: fd:4e:2d:12:ca:c3:20:b1:b9:5c:90:1a:a6:58:13:64:76:3d: 30:e0:0e:66:99:7b:88:62:d3:96:dd:8c:46:3c:db:a1:02:1a: 1f:77:09:05:6f:b1:26:21:7e:98:a4:a7:09:c2:a5:2f:7d:f2: 66:9c:90:c3:2f:db:d6:b8:43:ef:0d:45:d1:cb:a0:71:c7:d9: db:39:d5:c1:57:ca:17:6f:d9:2c:f1:6a:31:06:bd:f7:d3:f7: 39:c2:1d:87:b8:96:af:7b:c4:17:18:0a:82:4a:ad:1b:8b:93: 85:85:30:5d:ea:f8:92:9c:b8:42:dc:92:05:03:ea:c7:a9:1d: 1f:fc:bf:82:6d:44:1f:55:ec:19:46:3a:49:4b:db:6b:7c:37: 37:66:e6:7f:8d:29:ff:90:0d:1d:04:60:3b:05:9c:7c:64:47: 28:03:c4:4f:cc:78:a4:c4:3f:90:60:54:f7:ca:53:60:43:a3: 11:47:e0:38:a1:05:4c:a5:b8:c5:19:82:73:3c:08:47:57:46: 86:9f:26:1f:a9:8f:d7:5a:f2:61:8a:14:6e:89:a9:72:d3:f4: c2:bf:06:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDk2QTYzNTAyN0I2NEE2NTREODA4OTQ1REI4MzVBOUUy OEM3OTRCMDEwHhcNMjUxMjE5MDQyODA0WhcNMjUxMjI2MDQyODA0WjAYMRYwFAYD VQQDDA02OTQ0ZDQ1NS05YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLhC8Z5s8GK/di/HLhXhvFa97TP6tXc4xQT1LNOPArJMYqOw+03vJY9pAMCV hEwUcnNh7sWbXvYhUAuLYuU20pjjuQUD/ya8O+eWXv+V1I7LSPl2teweILoHcZy6 5lbZoRgMupVzpsd2bxkiaiSr2g38oip6RKjsGg+4UZKsyOq87Gojo3c2Xw2K+/Cm tw1WxMlkur5Nk0GLgGpifJtjhtaNCGk++gvpUW3VYGKVvl+BNZVV3t7pEmYvDiqm vtrZIk3z2k5W+YKZ8/413GlVaw84r2oW3FXTuhytb3DvAUNPqOe1OhH9E2uNnriB ChwsYhkM8H9q7pXesUzOyJsurwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn+vran wJ2bbmklKF+Bk+mURSAaMB8GA1UdIwQYMBaAFJamNQJ7ZKZU2AiUXbg1qeKMeUsB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS9GNzIwOUMzMjcw QUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3BsVFlDSlJkdURXcDRveDVT d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS9GNzIwOUMzMjcwQUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3Bs VFlDSlJkdURXcDRveDVTd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9wz6OZ7YE9inN02Jg8YXeVSRmnLBDxtNTrOqaU6h4FovEMUz9Ti0S ysMgsblckBqmWBNkdj0w4A5mmXuIYtOW3YxGPNuhAhofdwkFb7EmIX6YpKcJwqUv ffJmnJDDL9vWuEPvDUXRy6Bxx9nbOdXBV8oXb9ks8WoxBr330/c5wh2HuJave8QX GAqCSq0bi5OFhTBd6viSnLhC3JIFA+rHqR0f/L+CbUQfVewZRjpJS9trfDc3ZuZ/ jSn/kA0dBGA7BZx8ZEcoA8RPzHikxD+QYFT3ylNgQ6MRR+A4oQVMpbjFGYJzPAhH V0aGnyYfqY/XWvJhihRuialy0/TCvwbG -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:54 2025 by rpki-client