This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: mbQWkiXIQ1W2rNntUkvah1XKtFOmmpAtSLmZboNzmc8= Subject key identifier: 2F:1D:07:D0:2E:49:B6:EB:A7:6B:BD:64:65:9A:96:0E:BF:79:D2:CA Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: 0141 Signing time: Fri 19 Dec 2025 03:36:08 +0000 Manifest this update: Fri 19 Dec 2025 03:36:08 +0000 Manifest next update: Fri 26 Dec 2025 03:36:08 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: 3uVrMxIxCY+B6YMjDXDi1+KpwFnfuHin8/L6w7dsnw4=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: sah200aOwYvH7hldekVzzUV/LvL4ckSI60/32eio3go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Dec 19 03:36:08 2025 GMT Not After : Dec 26 03:36:08 2025 GMT Subject: CN=6944c828-ad95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:b7:99:ce:ea:a0:24:26:67:c0:07:4e:d3: 60:07:7d:cf:bb:91:14:73:09:36:99:b0:b3:bf:0b: 94:0d:0f:af:4a:c0:fb:bc:a2:c9:46:bf:56:1d:1d: 9c:53:4e:16:e5:77:6c:17:01:e1:50:b9:fb:c1:04: b4:17:7c:68:3c:f9:2a:a0:df:84:6b:cf:d8:51:42: 94:79:f2:2c:01:8c:b0:6b:48:89:da:2f:af:6f:37: 02:af:a6:36:fb:db:d4:8c:95:df:e1:32:5b:7b:3a: 3c:95:75:5d:16:4d:af:e0:d2:91:d8:95:29:89:fa: 40:ab:11:ad:6b:da:c9:b4:dd:6a:1d:80:3c:a2:f7: 84:ab:f6:14:fd:d7:9e:17:6c:67:e6:ed:b9:63:ea: f0:69:3d:34:50:54:f7:1d:92:d6:ae:c9:c6:d9:b4: 37:95:1d:8e:d9:55:98:22:9b:5a:c9:28:d4:0b:5a: 98:9f:58:92:4b:d5:48:5b:f3:d8:9b:2b:35:dc:27: cd:76:23:bf:c1:99:51:d9:57:3a:aa:d1:c4:b9:15: c7:91:fd:bc:1b:0d:55:a3:f0:ed:87:54:a2:8c:d5: 76:20:b7:9a:c0:43:b6:f6:01:36:e6:e0:22:d5:6f: 9b:0e:52:b8:60:f4:33:83:1a:de:3c:24:56:93:12: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:07:D0:2E:49:B6:EB:A7:6B:BD:64:65:9A:96:0E:BF:79:D2:CA X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:52:01:db:f4:5b:4f:96:29:3c:88:6f:7d:b5:72:e0:a0: 3d:51:78:11:81:50:42:81:a3:08:22:6f:42:fd:f0:b7:56:c9: b7:96:b1:63:3b:bb:2b:05:58:8e:61:dc:9f:ca:13:20:d3:5a: 12:83:20:d3:0e:08:42:f4:9e:b5:8b:f9:e8:6d:1b:bb:69:e3: 0b:72:88:5e:8c:35:58:22:27:51:9a:0b:3e:04:88:45:44:9d: cd:c6:62:39:b8:2c:cd:00:b6:77:3c:cd:7f:8a:e3:d5:72:43: 3e:16:c9:8e:1b:17:4b:93:88:0a:e5:47:3a:c3:b5:86:4f:d3: 18:12:54:a7:b0:87:26:5b:0f:f9:2b:c5:c0:05:2b:9d:55:5c: b5:54:49:c1:ef:58:f9:62:13:df:7b:5b:c7:90:f6:00:2b:a2: 58:c4:a4:b8:23:f7:05:97:c5:63:23:bf:10:46:df:2b:aa:71: 70:80:99:89:cd:69:2f:46:35:95:24:a4:07:0d:bc:e2:2c:72: ef:98:70:f2:73:02:59:75:48:ab:63:63:48:6a:34:41:11:af: e9:4c:85:a9:29:86:a3:0d:d3:a8:4b:d8:78:fc:01:ce:75:23: c7:08:ac:7f:39:37:7d:6e:00:5e:2d:81:1f:c1:c8:c2:02:d2: 11:b5:57:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUxMjE5MDMzNjA4WhcNMjUxMjI2MDMzNjA4WjAYMRYwFAYD VQQDDA02OTQ0YzgyOC1hZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7C3mc7qoCQmZ8AHTtNgB33Pu5EUcwk2mbCzvwuUDQ+vSsD7vKLJRr9WHR2c U04W5XdsFwHhULn7wQS0F3xoPPkqoN+Ea8/YUUKUefIsAYywa0iJ2i+vbzcCr6Y2 +9vUjJXf4TJbezo8lXVdFk2v4NKR2JUpifpAqxGta9rJtN1qHYA8oveEq/YU/dee F2xn5u25Y+rwaT00UFT3HZLWrsnG2bQ3lR2O2VWYIptaySjUC1qYn1iSS9VIW/PY mys13CfNdiO/wZlR2Vc6qtHEuRXHkf28Gw1Vo/Dth1SijNV2ILeawEO29gE25uAi 1W+bDlK4YPQzgxrePCRWkxJMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8dB9Au Sbbrp2u9ZGWalg6/edLKMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8DFIB2/RbT5YpPIhvfbVy4KA9UXgRgVBCgaMIIm9C/fC3Vsm3lrFj O7srBViOYdyfyhMg01oSgyDTDghC9J61i/nobRu7aeMLcohejDVYIidRmgs+BIhF RJ3NxmI5uCzNALZ3PM1/iuPVckM+FsmOGxdLk4gK5Uc6w7WGT9MYElSnsIcmWw/5 K8XABSudVVy1VEnB71j5YhPfe1vHkPYAK6JYxKS4I/cFl8VjI78QRt8rqnFwgJmJ zWkvRjWVJKQHDbziLHLvmHDycwJZdUirY2NIajRBEa/pTIWpKYajDdOoS9h4/AHO dSPHCKx/OTd9bgBeLYEfwcjCAtIRtVfg -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:44 2025 by rpki-client