This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: F+C5yJlA6FP3IHluJCjMUxmzfmZEmmpx5xtw85FICDg= Subject key identifier: 50:4E:99:2F:50:F8:35:7D:B6:AB:FD:E2:2E:B5:12:32:11:96:B7:47 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 8C Signing time: Sun 21 Dec 2025 05:43:33 +0000 Manifest this update: Sun 21 Dec 2025 05:43:33 +0000 Manifest next update: Sun 28 Dec 2025 05:43:33 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: YcO3lPkif/1kgHfhXeel4KGjwG16gT3aQTHlhOKJ/eg=) 2: FA9003D2D76B11F095EF502678D3641D.roa (hash: Ykp2UN9GPMyXKOTVb5r0Mqvneu3EgQYlO7QLXYUBEi0=) 3: 73667C2ED76B11F09495728677D3641D.roa (hash: UHvoaDflAEpArdNX3TgCdkJqpWNguaJxXZrpGvwT9SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Dec 21 05:43:33 2025 GMT Not After : Dec 28 05:43:33 2025 GMT Subject: CN=69478905-3b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:45:42:5b:44:c0:b7:2e:46:10:d4:da:cc: b4:44:c1:ba:87:86:b4:a9:99:cf:e1:4d:ba:0d:f2: 51:36:b7:34:fc:13:c1:af:87:09:8c:a3:96:d6:03: ae:c7:45:35:cf:bc:21:74:3c:55:dd:b7:ed:65:be: e6:52:f6:06:49:e6:e5:82:fb:36:77:4e:33:58:3f: 9d:de:76:62:bc:a5:a4:b9:8f:4f:34:1f:8a:77:e5: e4:58:2d:a3:54:b6:ea:0f:d0:c5:c7:b2:ea:6c:b0: ec:c7:f4:27:26:9e:e3:d8:2a:a0:e3:23:ed:d4:4e: 5d:b0:f8:59:cf:e5:6c:8e:92:93:2f:f0:6e:9e:32: 6c:26:4f:61:7e:0b:30:4a:b3:9f:70:8f:64:25:47: 7c:03:d3:31:9c:f3:6d:61:e3:9e:14:14:88:aa:20: cc:31:ee:c1:8e:a7:bf:be:5b:ca:bd:5c:de:87:67: f6:c8:01:f8:56:ae:27:8d:e2:ec:d6:67:5d:31:44: fb:28:39:25:dd:15:7e:c3:59:67:df:fb:ff:07:d3: fb:9e:ab:5a:3c:24:ba:bd:78:21:61:8c:30:69:86: d1:93:4c:24:3f:a3:10:b8:fa:34:0a:4b:5c:1b:9d: 81:10:1e:7f:34:31:ac:c8:f4:67:2a:38:d9:37:70: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4E:99:2F:50:F8:35:7D:B6:AB:FD:E2:2E:B5:12:32:11:96:B7:47 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:91:f5:a2:36:10:d9:23:09:87:43:07:1e:85:5b:05:be:00: 76:6e:cc:40:97:8c:4e:02:b8:84:56:4b:b1:fa:74:2b:ca:01: 94:33:9b:d5:d8:31:d1:44:b5:b2:e6:94:02:c7:6c:d2:13:a0: 84:8c:17:2a:2e:fb:8d:0c:85:5d:15:b3:ad:a5:97:9d:19:2d: d0:27:28:a2:63:02:0e:1a:bb:db:b8:ac:40:5d:2e:bc:07:95: 05:aa:dc:f3:5d:73:b1:79:6a:87:2c:ba:34:ed:77:ec:63:c4: f0:85:d0:4e:f3:1c:c0:c5:bf:c5:f8:d9:c2:35:57:be:f7:49: 3e:72:0a:d3:bb:7d:92:74:8f:c6:77:81:a7:01:b9:3a:6d:95: 03:d1:da:2d:83:a9:f5:29:57:a9:57:c4:fa:32:a9:8a:d5:05: d1:37:38:81:ab:25:15:c7:83:cd:bf:c2:d8:4f:74:3c:c2:4f: ca:f5:34:ec:80:ff:01:1e:ea:70:d1:1a:30:b0:10:e6:08:c2: 9c:b9:c7:c1:7b:4c:9e:b7:88:82:64:8e:08:8c:16:20:1f:62: 18:01:b0:44:88:91:61:29:c7:4f:56:77:ed:86:08:3e:34:73: 8f:fb:0a:3d:14:99:df:2a:7e:a8:9a:c3:f5:31:e8:1a:92:55: 8a:1b:98:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGOTUxMTAvBgNVBAUTKEE4M0JDRjZEQjI4OEU5NjQ3MEQzNEQxOEFGQjNFNEE4 MTI3OTE4NjcwHhcNMjUxMjIxMDU0MzMzWhcNMjUxMjI4MDU0MzMzWjAYMRYwFAYD VQQDDA02OTQ3ODkwNS0zYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CpFQltEwLcuRhDU2sy0RMG6h4a0qZnP4U26DfJRNrc0/BPBr4cJjKOW1gOu x0U1z7whdDxV3bftZb7mUvYGSeblgvs2d04zWD+d3nZivKWkuY9PNB+Kd+XkWC2j VLbqD9DFx7LqbLDsx/QnJp7j2Cqg4yPt1E5dsPhZz+VsjpKTL/BunjJsJk9hfgsw SrOfcI9kJUd8A9MxnPNtYeOeFBSIqiDMMe7Bjqe/vlvKvVzeh2f2yAH4Vq4njeLs 1mddMUT7KDkl3RV+w1ln3/v/B9P7nqtaPCS6vXghYYwwaYbRk0wkP6MQuPo0Cktc G52BEB5/NDGsyPRnKjjZN3D7YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBOmS9Q +DV9tqv94i61EjIRlrdHMB8GA1UdIwQYMBaAFKg7z22yiOlkcNNNGK+z5KgSeRhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y5NS83RDMzRkQzODEy RTcxMUYwQkRCOTQ1NERDNEY5QUUwMi9xRHZQYmJLSTZXUncwMDBZcjdQa3FCSjVH R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y5NS83RDMzRkQzODEyRTcxMUYwQkRCOTQ1NERDNEY5QUUwMi9xRHZQYmJLSTZX UncwMDBZcjdQa3FCSjVHR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFkfWiNhDZIwmHQwcehVsFvgB2bsxAl4xOAriEVkux+nQrygGUM5vV 2DHRRLWy5pQCx2zSE6CEjBcqLvuNDIVdFbOtpZedGS3QJyiiYwIOGrvbuKxAXS68 B5UFqtzzXXOxeWqHLLo07XfsY8TwhdBO8xzAxb/F+NnCNVe+90k+cgrTu32SdI/G d4GnAbk6bZUD0dotg6n1KVepV8T6MqmK1QXRNziBqyUVx4PNv8LYT3Q8wk/K9TTs gP8BHupw0RowsBDmCMKcucfBe0yet4iCZI4IjBYgH2IYAbBEiJFhKcdPVnfthgg+ NHOP+wo9FJnfKn6omsP1MegaklWKG5ix -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:22 2025 by rpki-client