This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json) Hash identifier: YvuLf4mws/CD8zcTIG8j6feYs+umfca/urChnZXA6RI= Subject key identifier: BD:FE:CF:7F:3E:06:B0:DE:58:27:73:70:F3:85:05:03:D4:65:1F:8F Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Certificate serial: 0EBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft Manifest number: 0EB4 Signing time: Thu 18 Dec 2025 17:29:11 +0000 Manifest this update: Thu 18 Dec 2025 17:29:10 +0000 Manifest next update: Thu 25 Dec 2025 17:29:10 +0000 Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: 350/KLFXRuYd3yas2ojnpJ23JQGY6siFKE+CUXQ0HHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Validity Not Before: Dec 18 17:29:10 2025 GMT Not After : Dec 25 17:29:10 2025 GMT Subject: CN=694439e7-e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:3b:63:8e:83:ee:bb:14:f4:e5:dd:ae:b6: 72:3d:e0:1a:d3:12:00:75:93:06:46:53:1e:67:b7: b7:b8:a8:cd:62:4d:db:ed:b3:d1:8f:7d:8a:1b:e9: 75:5c:94:dd:3c:9b:64:f0:75:ba:4c:23:ac:5e:29: de:af:de:4e:8d:43:65:d6:05:80:47:1c:64:76:d7: 04:73:61:31:ae:c7:bf:6d:62:d5:30:c2:9e:58:54: 51:d3:d4:c7:73:9c:e4:4c:dd:a3:73:7e:46:3a:6f: 98:29:a1:c2:07:e0:ed:03:2a:0f:48:ef:ce:a4:44: f0:4d:f0:85:53:fa:74:1b:be:c6:34:d7:f7:69:75: 7c:56:4f:ba:82:11:8d:70:a3:9b:29:70:39:ac:22: b0:b4:b0:1b:9b:92:d3:be:e3:1b:01:50:dc:8f:d6: 9d:05:09:8e:3c:93:9a:c8:ec:ef:9b:12:f4:d0:8b: 5a:a9:64:c3:3b:6d:cf:22:68:df:15:35:f6:a5:af: a5:cd:0c:50:9f:6e:96:0c:12:2f:4a:08:9d:d9:f4: 1b:76:da:11:cd:e8:76:cb:fc:2f:64:85:e7:41:28: ac:5a:3c:2e:6a:08:47:fd:cc:15:19:57:6d:70:ba: 94:2f:0a:9a:85:94:31:f6:0a:12:50:c5:09:7e:44: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FE:CF:7F:3E:06:B0:DE:58:27:73:70:F3:85:05:03:D4:65:1F:8F X509v3 Authority Key Identifier: keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:be:81:d5:4f:c3:89:28:5e:f8:92:c5:ac:f3:77:96:29:52: a3:76:78:17:94:fb:7f:d9:3a:36:93:cb:6d:f7:da:ab:a8:4a: 73:04:66:b6:47:28:15:d8:d6:af:5f:8b:86:07:23:eb:f2:87: 6d:a7:2f:c4:f2:82:98:75:c5:a5:49:00:61:45:44:27:63:c6: 26:3a:ac:82:71:16:cb:c8:f3:5c:1f:51:8c:dd:80:c0:27:45: 60:be:0e:90:93:8d:37:1b:32:c8:90:30:e1:4d:25:3e:30:86: f6:e4:3c:e6:5e:1d:70:38:8a:9c:55:e5:9f:75:cd:e6:7c:e3: b6:22:58:4c:95:8e:d1:75:33:a2:47:4d:7f:f1:e4:ff:2c:a4: c6:de:b8:ee:b6:36:af:ec:52:de:8d:8a:ec:be:71:ae:18:38: 86:af:30:59:85:8e:3a:e1:60:cd:c8:00:d0:9a:f3:b4:a1:6d: d8:e0:a9:0b:9b:98:04:ba:61:c7:52:0d:5e:49:4f:c1:bb:46: 9f:23:37:5b:5b:06:cf:28:82:f9:7e:eb:1f:ef:73:4d:98:18: 72:95:61:ff:de:ab:c4:88:89:52:ca:fe:23:4c:48:4b:5b:9e: 02:85:b2:99:9d:3f:82:68:1f:92:03:7d:ce:1a:84:1c:be:39: e2:5f:de:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF QTI3MTYzRUYwHhcNMjUxMjE4MTcyOTEwWhcNMjUxMjI1MTcyOTEwWjAYMRYwFAYD VQQDDA02OTQ0MzllNy1lNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SI7Y46D7rsU9OXdrrZyPeAa0xIAdZMGRlMeZ7e3uKjNYk3b7bPRj32KG+l1 XJTdPJtk8HW6TCOsXiner95OjUNl1gWARxxkdtcEc2Exrse/bWLVMMKeWFRR09TH c5zkTN2jc35GOm+YKaHCB+DtAyoPSO/OpETwTfCFU/p0G77GNNf3aXV8Vk+6ghGN cKObKXA5rCKwtLAbm5LTvuMbAVDcj9adBQmOPJOayOzvmxL00ItaqWTDO23PImjf FTX2pa+lzQxQn26WDBIvSgid2fQbdtoRzeh2y/wvZIXnQSisWjwuaghH/cwVGVdt cLqULwqahZQx9goSUMUJfkTdMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3+z38+ BrDeWCdzcPOFBQPUZR+PMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMvoHVT8OJKF74ksWs83eWKVKjdngXlPt/2To2k8tt99qrqEpzBGa2 RygV2NavX4uGByPr8odtpy/E8oKYdcWlSQBhRUQnY8YmOqyCcRbLyPNcH1GM3YDA J0Vgvg6Qk403GzLIkDDhTSU+MIb25DzmXh1wOIqcVeWfdc3mfOO2IlhMlY7RdTOi R01/8eT/LKTG3rjutjav7FLejYrsvnGuGDiGrzBZhY464WDNyADQmvO0oW3Y4KkL m5gEumHHUg1eSU/Bu0afIzdbWwbPKIL5fusf73NNmBhylWH/3qvEiIlSyv4jTEhL W54ChbKZnT+CaB+SA33OGoQcvjniX963 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:43 2025 by rpki-client