This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json) Hash identifier: KiERyeyyyzD/1r04ldiA58JAWmIoaWRrvrGVAO5qjI8= Subject key identifier: 8D:84:08:0B:C8:C0:A1:2A:C6:E5:A8:F0:5E:35:70:EC:57:5B:DF:7E Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 3282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft Manifest number: 3279 Signing time: Tue 06 Jan 2026 15:18:30 +0000 Manifest this update: Tue 06 Jan 2026 15:18:30 +0000 Manifest next update: Tue 13 Jan 2026 15:18:30 +0000 Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: L/YJJxID/IGSiZqlXtJx6CJgGc4jTzPMPY2o4jbBsxo=) 2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 15:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12930 (0x3282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: Jan 6 15:18:30 2026 GMT Not After : Jan 13 15:18:30 2026 GMT Subject: CN=695d27c6-c0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:97:be:02:15:d4:d9:45:c5:ea:b6:68:79: a6:9f:97:bf:ca:cb:7e:d9:c1:3f:d1:05:24:a0:6a: d6:70:e9:41:d5:71:a1:8a:32:39:36:75:89:18:79: d6:46:94:a2:3e:ed:9f:70:5d:c2:4e:61:24:42:56: b3:69:8c:ec:a5:ed:25:33:80:36:2a:81:bf:2d:6b: 2a:ad:5a:78:f1:23:e0:4a:7e:39:4e:b8:85:ca:2b: 6f:26:65:3f:e1:99:1d:35:bf:a3:d8:a8:1a:e1:09: d8:ce:c6:ed:df:d6:b5:24:b8:ba:5d:9f:ae:96:9d: e9:33:53:00:06:c3:3f:4f:06:84:03:97:ad:dc:32: ca:56:e5:87:4e:68:b6:47:b2:81:9c:2b:42:8a:20: 9b:8a:fe:fa:d9:59:15:7f:7a:f9:da:13:89:ba:7f: 73:1b:b2:15:91:20:b4:fd:68:d4:87:ce:c8:85:9d: 24:b7:98:0d:5b:4f:14:2d:77:5f:74:e1:19:69:e2: af:e8:dc:96:f2:11:e6:d2:c4:e7:ee:f4:e3:dd:21: 7a:ec:df:74:11:9f:ee:ea:6b:33:8a:0a:7d:2b:c6: 4a:be:b8:29:3d:f1:91:da:f9:fb:25:f8:93:7c:73: 08:57:a1:26:83:4b:ee:79:64:55:55:f9:17:fc:eb: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:84:08:0B:C8:C0:A1:2A:C6:E5:A8:F0:5E:35:70:EC:57:5B:DF:7E X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:48:9f:a9:8f:d8:a6:5b:23:0a:d1:f4:4b:dc:7c:89:73:0f: 7d:70:1f:18:96:a8:78:fa:84:75:3c:e4:9f:ee:48:cb:2a:72: 6d:6f:3c:e5:2a:61:59:d3:bb:65:fc:1d:5c:f1:af:01:d6:5c: df:07:29:50:b5:00:59:db:a5:55:71:01:5c:8e:81:37:c4:f0: 44:12:ee:05:d0:77:65:7d:2a:3d:a8:8f:b1:dc:32:a4:94:2e: 9e:49:1a:24:c1:4e:82:85:f1:9a:92:d0:e7:f1:d8:35:46:4a: 85:5e:00:92:ed:21:ba:81:4f:7a:b8:3b:7e:43:82:cf:08:dc: 8d:e8:9a:f6:29:4d:4c:40:85:b2:75:66:9c:f7:57:b5:85:3b: 34:5d:3e:0e:88:60:c8:54:69:13:38:db:64:ef:bd:a5:a2:d9: 8c:07:92:14:cf:38:54:0d:28:4a:a6:ac:5f:07:da:fc:27:97: 20:1e:24:62:ff:2c:a1:05:cf:4d:ce:c2:e0:e5:6e:2b:b4:38: 5d:59:79:35:d0:bd:72:fb:14:f5:61:4a:8e:45:3e:d9:3f:2c: e9:a9:57:24:07:ce:46:82:f8:09:5f:fe:d3:77:82:88:3b:9c: 79:60:c2:72:f9:0f:94:9a:1b:be:94:c0:11:49:97:8a:ce:6f: 39:3a:6d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjYwMTA2MTUxODMwWhcNMjYwMTEzMTUxODMwWjAYMRYwFAYD VQQDDA02OTVkMjdjNi1jMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdWXvgIV1NlFxeq2aHmmn5e/yst+2cE/0QUkoGrWcOlB1XGhijI5NnWJGHnW RpSiPu2fcF3CTmEkQlazaYzspe0lM4A2KoG/LWsqrVp48SPgSn45TriFyitvJmU/ 4ZkdNb+j2Kga4QnYzsbt39a1JLi6XZ+ulp3pM1MABsM/TwaEA5et3DLKVuWHTmi2 R7KBnCtCiiCbiv762VkVf3r52hOJun9zG7IVkSC0/WjUh87IhZ0kt5gNW08ULXdf dOEZaeKv6NyW8hHm0sTn7vTj3SF67N90EZ/u6mszigp9K8ZKvrgpPfGR2vn7JfiT fHMIV6Emg0vueWRVVfkX/OtxOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2ECAvI wKEqxuWo8F41cOxXW99+MB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5SJ+pj9imWyMK0fRL3HyJcw99cB8Ylqh4+oR1POSf7kjLKnJtbzzl KmFZ07tl/B1c8a8B1lzfBylQtQBZ26VVcQFcjoE3xPBEEu4F0HdlfSo9qI+x3DKk lC6eSRokwU6ChfGaktDn8dg1RkqFXgCS7SG6gU96uDt+Q4LPCNyN6Jr2KU1MQIWy dWac91e1hTs0XT4OiGDIVGkTONtk772lotmMB5IUzzhUDShKpqxfB9r8J5cgHiRi /yyhBc9NzsLg5W4rtDhdWXk10L1y+xT1YUqORT7ZPyzpqVckB85GgvgJX/7Td4KI O5x5YMJy+Q+Umhu+lMARSZeKzm85Om1f -----END CERTIFICATE-----Generated at Thu Jan 8 03:47:13 2026 by rpki-client