This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft File: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json) Hash identifier: oXFHJSCEtVVRlRuskMx7bnZKy3W97QjQZW2BdA1xhJ8= Subject key identifier: 13:6C:D6:FD:D5:6B:E2:50:FC:4B:8D:DD:BC:E9:14:86:14:EF:61:A6 Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B Certificate issuer: /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Certificate serial: 1182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft Manifest number: 1179 Signing time: Sat 20 Dec 2025 16:57:33 +0000 Manifest this update: Sat 20 Dec 2025 16:57:32 +0000 Manifest next update: Sat 27 Dec 2025 16:57:32 +0000 Files and hashes: 1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: bdkNoR3bOdAhsPuek+UcQKxqvDDFiiM9j62UB7dMfOo=) 2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4482 (0x1182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Validity Not Before: Dec 20 16:57:32 2025 GMT Not After : Dec 27 16:57:32 2025 GMT Subject: CN=6946d57d-8676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:66:a6:ca:b2:6e:12:4c:b9:0a:5c:c2:4b: 01:13:d2:e2:a2:eb:dc:81:8a:6c:96:b3:4f:e9:45: 3c:2d:ce:ca:08:e7:bd:19:e0:d6:02:3e:5e:1c:2d: db:ac:b3:15:80:03:cb:40:af:48:a3:19:cd:60:b3: 4a:d7:c9:06:14:ff:fa:45:98:b9:8a:ad:c3:f3:3c: 6e:c8:1c:e5:2e:14:20:9b:4e:f0:70:64:76:c7:17: ed:09:e6:9b:26:10:75:58:2b:e2:7b:09:31:f2:63: 4a:28:72:8a:95:b6:d0:c7:34:81:14:55:b2:e7:00: 9a:16:32:1a:0b:b7:bf:b1:b1:27:68:e5:7a:b6:78: 0c:55:7c:11:5e:bc:66:61:45:25:84:d9:10:be:6a: 3a:46:0d:d4:1a:0e:d2:59:91:35:ff:40:29:b0:0b: 29:db:66:cb:b5:89:bd:29:d2:f6:fc:3b:4c:0c:6a: bf:0c:7c:fe:e7:9e:d8:66:67:dc:4d:e5:cb:80:ca: 9b:62:28:8a:02:be:bd:a0:15:b4:1c:63:ee:58:1c: 3d:aa:0e:bd:67:ce:e7:f7:f8:d2:86:65:d9:06:1d: 8f:df:6d:da:71:49:0e:16:3a:e0:be:f0:68:58:22: f3:f0:87:49:24:e5:37:d9:ed:19:3c:12:ac:88:35: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:D6:FD:D5:6B:E2:50:FC:4B:8D:DD:BC:E9:14:86:14:EF:61:A6 X509v3 Authority Key Identifier: keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:58:ae:b4:5f:03:a5:d6:89:40:64:61:fc:1a:e3:a6:c3:07: 6f:c3:d2:60:87:cb:00:4c:2e:a6:a6:f7:46:1b:b8:bc:6a:48: 75:28:68:1b:28:a1:20:66:32:21:d4:7a:5a:c8:8b:ae:4c:fe: 4f:1a:5d:36:ff:a0:6b:10:0f:86:05:f2:f5:91:14:21:bf:95: fd:96:58:e0:23:ba:e3:df:a4:19:0a:96:67:c2:ba:b5:85:e6: 8f:68:81:b8:d8:48:e4:0b:3b:02:86:38:5b:d1:bc:2a:cc:58: d4:55:32:9b:99:e5:65:89:16:0e:69:43:16:64:0a:0f:af:ec: 9b:84:69:81:a8:1f:c2:f1:00:25:25:c7:b4:d3:ed:1f:65:59: 42:9d:d0:ad:4c:57:be:8e:2d:79:a2:6b:82:1f:b4:7f:cb:76: b4:79:c4:e3:b7:a7:fc:12:87:80:df:41:54:e8:e0:7c:12:96: e1:fa:62:18:1d:d0:0e:54:e4:0d:32:7b:81:59:ab:6f:9b:eb: b6:c9:90:e9:a7:e6:41:5e:f9:25:1c:6b:69:bf:cd:88:da:4e: 78:ee:05:26:16:cf:7d:c6:0f:b9:1c:3f:06:1a:2a:03:62:bd: d4:fb:f5:7a:0f:63:4f:51:01:53:7e:24:3e:2c:00:f9:dd:d4: 37:c0:bf:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4 RjI4MjA0OEIwHhcNMjUxMjIwMTY1NzMyWhcNMjUxMjI3MTY1NzMyWjAYMRYwFAYD VQQDDA02OTQ2ZDU3ZC04Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnx9mpsqybhJMuQpcwksBE9LiouvcgYpslrNP6UU8Lc7KCOe9GeDWAj5eHC3b rLMVgAPLQK9IoxnNYLNK18kGFP/6RZi5iq3D8zxuyBzlLhQgm07wcGR2xxftCeab JhB1WCviewkx8mNKKHKKlbbQxzSBFFWy5wCaFjIaC7e/sbEnaOV6tngMVXwRXrxm YUUlhNkQvmo6Rg3UGg7SWZE1/0ApsAsp22bLtYm9KdL2/DtMDGq/DHz+557YZmfc TeXLgMqbYiiKAr69oBW0HGPuWBw9qg69Z87n9/jShmXZBh2P323acUkOFjrgvvBo WCLz8IdJJOU32e0ZPBKsiDVemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNs1v3V a+JQ/EuN3bzpFIYU72GmMB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy OElncDNGTEM3VHFQS0NCSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMWK60XwOl1olAZGH8GuOmwwdvw9Jgh8sATC6mpvdGG7i8akh1KGgb KKEgZjIh1HpayIuuTP5PGl02/6BrEA+GBfL1kRQhv5X9lljgI7rj36QZCpZnwrq1 heaPaIG42EjkCzsChjhb0bwqzFjUVTKbmeVliRYOaUMWZAoPr+ybhGmBqB/C8QAl Jce00+0fZVlCndCtTFe+ji15omuCH7R/y3a0ecTjt6f8EoeA30FU6OB8Epbh+mIY HdAOVOQNMnuBWatvm+u2yZDpp+ZBXvklHGtpv82I2k547gUmFs99xg+5HD8GGioD Yr3U+/V6D2NPUQFTfiQ+LAD53dQ3wL9R -----END CERTIFICATE-----Generated at Mon Dec 22 10:07:54 2025 by rpki-client