This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json) Hash identifier: lGIwHVk8FJy9E7/pP41DQ3TQ6lbTnCotuZEhu8a19kc= Subject key identifier: 35:65:B8:3A:DE:D5:83:44:39:A1:F9:2F:04:82:05:3C:16:44:61:72 Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft Manifest number: D0 Signing time: Thu 25 Dec 2025 04:44:30 +0000 Manifest this update: Thu 25 Dec 2025 04:44:30 +0000 Manifest next update: Thu 01 Jan 2026 04:44:30 +0000 Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: 6jNzEGTLAb1HHwoYzEzwSxzAQVWc3rN8kgT8rjD+nNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Validity Not Before: Dec 25 04:44:30 2025 GMT Not After : Jan 1 04:44:30 2026 GMT Subject: CN=694cc12e-73f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:5e:9b:14:8d:e0:30:91:64:52:60:ba:df: 11:36:48:8e:9c:e0:e3:0c:be:21:c1:39:8c:51:ec: 34:57:b9:d2:27:74:15:e6:8e:cb:8f:4d:00:86:54: e2:82:aa:62:46:f8:5f:65:8a:19:5d:ff:70:e6:02: 6a:0b:fe:2d:89:50:26:0d:ff:a9:52:a0:d1:60:63: 23:4b:72:ae:20:11:64:bd:a5:57:12:79:9b:d5:04: ed:b9:ea:10:33:3e:7b:05:ff:16:e4:b0:97:9b:c1: 73:4c:1d:05:6a:8c:dd:76:a2:45:a3:af:be:d5:19: 35:fe:d4:84:0e:79:de:ed:46:e0:71:31:65:9d:58: 99:f7:c4:1e:86:c6:b5:43:a1:cd:b2:4e:b0:c7:87: f1:4f:d6:0f:bb:88:c5:d3:86:7c:20:88:c9:c1:24: ed:99:27:09:e2:9c:10:dc:42:5a:4b:6f:fa:84:fa: 4d:23:70:3e:ae:a7:b3:99:5e:01:64:32:71:fc:0f: f5:b3:ea:46:62:60:8b:3d:9c:1d:86:20:a8:f6:b1: 42:62:17:e2:92:03:b9:46:7d:3b:2e:cc:24:e8:58: 61:5e:06:29:0a:21:63:56:73:9b:b9:32:ee:91:8d: b1:b9:47:2c:6d:55:b4:35:12:b0:5a:fa:44:c3:a0: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:B8:3A:DE:D5:83:44:39:A1:F9:2F:04:82:05:3C:16:44:61:72 X509v3 Authority Key Identifier: keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d1:59:e0:ab:a6:c3:77:df:e6:38:d2:c1:4c:7b:9f:a2:7a: 42:18:fa:b5:1e:73:ad:7b:ac:89:ce:f6:2e:f2:da:6b:04:15: 4e:83:f5:b7:14:4f:25:af:cf:e9:88:82:49:60:e2:bd:be:43: 38:f8:71:36:93:d0:0e:31:e5:8a:03:50:24:ad:52:71:38:a8: 5f:b8:e9:32:d3:d8:c0:00:49:b3:01:19:fc:17:4e:fd:7b:c3: a1:0a:b1:e6:78:bf:4e:c4:65:52:0c:a1:e8:dc:26:0f:25:f6: 20:12:16:96:0d:5f:51:31:c3:4a:b9:73:66:cf:8a:93:bd:c1: 6d:65:a0:4f:de:9d:78:42:51:91:cb:3e:a3:bc:7e:df:62:03: c7:32:c0:7b:16:cd:73:23:96:39:90:2f:94:12:e1:64:8c:d3: d7:b1:a5:8d:b6:4e:15:3e:b8:e6:39:d2:dc:85:16:dc:ba:26: cb:c9:ad:59:bd:dd:62:37:14:56:91:db:fc:2f:0d:be:a3:8f: dd:17:c6:75:43:27:8b:1d:9a:4f:f7:c9:53:81:dd:ab:e9:3c: 47:7c:76:c8:75:7f:08:16:f1:13:62:ea:78:6b:13:85:01:e1: a8:41:33:90:87:50:da:c2:a5:b9:cc:53:7b:88:b1:22:f1:60: f1:f2:cd:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBM0YxMTAvBgNVBAUTKDg2QTY0RjJBRDJEREUyQjdEOTYyNEU2OTIyN0FEMDlC MTc3OEM2QzEwHhcNMjUxMjI1MDQ0NDMwWhcNMjYwMTAxMDQ0NDMwWjAYMRYwFAYD VQQDDA02OTRjYzEyZS03M2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqftemxSN4DCRZFJgut8RNkiOnODjDL4hwTmMUew0V7nSJ3QV5o7Lj00AhlTi gqpiRvhfZYoZXf9w5gJqC/4tiVAmDf+pUqDRYGMjS3KuIBFkvaVXEnmb1QTtueoQ Mz57Bf8W5LCXm8FzTB0FaozddqJFo6++1Rk1/tSEDnne7UbgcTFlnViZ98Qehsa1 Q6HNsk6wx4fxT9YPu4jF04Z8IIjJwSTtmScJ4pwQ3EJaS2/6hPpNI3A+rqezmV4B ZDJx/A/1s+pGYmCLPZwdhiCo9rFCYhfikgO5Rn07Lswk6FhhXgYpCiFjVnObuTLu kY2xuUcsbVW0NRKwWvpEw6DxlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVluDre 1YNEOaH5LwSCBTwWRGFyMB8GA1UdIwQYMBaAFIamTyrS3eK32WJOaSJ60JsXeMbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi85QjI3NTRGNkEy NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRyZlpZazVwSW5yUW14ZDR4 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hxWlBLdExkNHJmWllrNXBJbnJRbXhkNHhzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUEzRi85QjI3NTRGNkEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRy ZlpZazVwSW5yUW14ZDR4c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW0Vngq6bDd9/mONLBTHufonpCGPq1HnOte6yJzvYu8tprBBVOg/W3 FE8lr8/piIJJYOK9vkM4+HE2k9AOMeWKA1AkrVJxOKhfuOky09jAAEmzARn8F079 e8OhCrHmeL9OxGVSDKHo3CYPJfYgEhaWDV9RMcNKuXNmz4qTvcFtZaBP3p14QlGR yz6jvH7fYgPHMsB7Fs1zI5Y5kC+UEuFkjNPXsaWNtk4VPrjmOdLchRbcuibLya1Z vd1iNxRWkdv8Lw2+o4/dF8Z1QyeLHZpP98lTgd2r6TxHfHbIdX8IFvETYup4axOF AeGoQTOQh1DawqW5zFN7iLEi8WDx8s2d -----END CERTIFICATE-----Generated at Thu Dec 25 06:30:58 2025 by rpki-client