This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json) Hash identifier: ChnqKUNIe9NpfY7VYUraLEcpaQrp6Q5AVWirMfsF/08= Subject key identifier: 54:D4:D8:10:F4:DE:56:3B:41:C1:C9:78:03:8C:34:4B:18:7F:97:40 Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft Manifest number: D2 Signing time: Mon 29 Dec 2025 04:47:06 +0000 Manifest this update: Mon 29 Dec 2025 04:47:06 +0000 Manifest next update: Mon 05 Jan 2026 04:47:06 +0000 Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: e9W8wJmvVOzFDyiGOh7TsHi7BQWCbYnmibKHSAN+2Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Validity Not Before: Dec 29 04:47:06 2025 GMT Not After : Jan 5 04:47:06 2026 GMT Subject: CN=695207ca-bcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:38:bb:64:14:e4:ef:bd:0b:9b:57:4f:86: 52:aa:da:5b:7e:13:a5:49:ca:7e:29:55:3d:5b:a1: 03:8b:bc:81:bf:2a:43:b2:95:c3:4f:f4:c4:2d:a7: 70:51:d9:b5:96:a8:ad:49:55:03:69:55:57:ef:b4: 0b:b1:13:05:b7:fb:b2:83:e7:b0:df:39:7d:81:29: 9c:7f:cb:a9:2b:f9:ed:ca:68:fd:35:de:cc:f6:52: f6:ea:ce:38:49:11:c0:bf:29:22:75:7e:54:d3:f5: ef:18:24:7c:e5:f6:c0:66:bd:07:70:4b:43:19:69: 08:1a:33:da:0c:65:58:81:cb:c1:ef:0d:0c:b0:02: 96:44:f5:44:8e:7c:4a:5b:70:e6:d4:b0:1b:0b:b3: 39:e0:9a:07:e9:3e:07:83:2c:49:77:53:73:21:89: 45:65:19:b7:b0:39:b9:6d:1d:9f:ff:6a:81:b9:6e: 04:6e:c4:91:1d:be:c1:6c:bb:08:c6:a7:f2:de:ed: b5:34:09:87:60:ba:cd:41:94:d6:b5:3d:b7:44:be: f8:bd:78:c7:64:33:20:39:e8:72:73:89:aa:8e:c0: 6a:19:a8:da:25:be:d6:6e:09:5d:9a:3d:27:0b:5b: 3d:44:ff:49:b7:40:80:8c:f4:8d:20:5b:cd:10:64: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D4:D8:10:F4:DE:56:3B:41:C1:C9:78:03:8C:34:4B:18:7F:97:40 X509v3 Authority Key Identifier: keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:8b:8b:18:55:fc:3c:f8:b0:b2:cc:e6:4e:b9:ad:c1:5b:ea: f8:c1:60:7a:ff:95:14:a6:44:c2:8e:92:b5:b9:16:78:63:fe: 1e:91:94:7a:cd:07:66:b4:20:7d:15:5c:94:81:dd:46:d9:40: f4:29:df:07:4c:83:55:b0:37:de:f8:9e:42:8c:3d:91:d6:fd: 53:ac:9f:5a:79:d9:40:29:72:f4:09:e1:c3:97:b7:7d:53:f3: e6:7b:aa:d6:9a:d6:a8:71:b9:ea:67:f5:f2:be:85:de:30:65: 9c:57:14:96:f7:f8:3d:ef:f4:24:b5:36:de:6b:20:12:86:84: b7:c4:89:d7:76:b3:54:19:4f:f3:f4:f6:08:9e:c5:5c:f9:c2: 22:48:da:ed:6f:f7:9c:af:07:d9:f7:25:8e:83:5a:41:06:39: 4e:44:e7:99:d1:8e:f2:58:a8:b6:2b:1b:2a:b3:ba:be:66:80: ff:22:96:e7:87:54:91:e3:0e:92:4c:2a:81:3f:ac:e2:33:c8: 1f:ff:c1:51:b3:ea:73:62:30:0f:e1:88:ba:ee:5d:81:0c:76: ea:ab:7e:32:2d:33:c2:0b:1e:f1:05:dd:d8:53:11:0a:83:b3: 35:dd:f0:60:3e:3b:a0:f7:a2:06:64:e5:a7:6f:eb:15:96:fb: 78:d7:c6:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBM0YxMTAvBgNVBAUTKDg2QTY0RjJBRDJEREUyQjdEOTYyNEU2OTIyN0FEMDlC MTc3OEM2QzEwHhcNMjUxMjI5MDQ0NzA2WhcNMjYwMTA1MDQ0NzA2WjAYMRYwFAYD VQQDDA02OTUyMDdjYS1iY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAri04u2QU5O+9C5tXT4ZSqtpbfhOlScp+KVU9W6EDi7yBvypDspXDT/TELadw Udm1lqitSVUDaVVX77QLsRMFt/uyg+ew3zl9gSmcf8upK/ntymj9Nd7M9lL26s44 SRHAvykidX5U0/XvGCR85fbAZr0HcEtDGWkIGjPaDGVYgcvB7w0MsAKWRPVEjnxK W3Dm1LAbC7M54JoH6T4HgyxJd1NzIYlFZRm3sDm5bR2f/2qBuW4EbsSRHb7BbLsI xqfy3u21NAmHYLrNQZTWtT23RL74vXjHZDMgOehyc4mqjsBqGajaJb7Wbgldmj0n C1s9RP9Jt0CAjPSNIFvNEGRB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTU2BD0 3lY7QcHJeAOMNEsYf5dAMB8GA1UdIwQYMBaAFIamTyrS3eK32WJOaSJ60JsXeMbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi85QjI3NTRGNkEy NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRyZlpZazVwSW5yUW14ZDR4 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hxWlBLdExkNHJmWllrNXBJbnJRbXhkNHhzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUEzRi85QjI3NTRGNkEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRy ZlpZazVwSW5yUW14ZDR4c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJi4sYVfw8+LCyzOZOua3BW+r4wWB6/5UUpkTCjpK1uRZ4Y/4ekZR6 zQdmtCB9FVyUgd1G2UD0Kd8HTINVsDfe+J5CjD2R1v1TrJ9aedlAKXL0CeHDl7d9 U/Pme6rWmtaocbnqZ/XyvoXeMGWcVxSW9/g97/QktTbeayAShoS3xInXdrNUGU/z 9PYInsVc+cIiSNrtb/ecrwfZ9yWOg1pBBjlOROeZ0Y7yWKi2Kxsqs7q+ZoD/Ipbn h1SR4w6STCqBP6ziM8gf/8FRs+pzYjAP4Yi67l2BDHbqq34yLTPCCx7xBd3YUxEK g7M13fBgPjug96IGZOWnb+sVlvt418Yq -----END CERTIFICATE-----Generated at Tue Dec 30 07:17:12 2025 by rpki-client