This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: 4Pz+7jMpaNSFgxl809IHUm2OHIGlLpJNlEB2S9lM4Rc= Subject key identifier: 7B:73:92:C4:CE:D9:B4:E4:64:B8:40:A6:68:BC:60:7C:F4:F0:6B:20 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 011A Signing time: Fri 19 Dec 2025 03:55:34 +0000 Manifest this update: Fri 19 Dec 2025 03:55:33 +0000 Manifest next update: Fri 26 Dec 2025 03:55:33 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: 1KU3aJRkLKFACCI0bxtfGjn4GtIwql37d3XxUsK0h3I=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Dec 19 03:55:33 2025 GMT Not After : Dec 26 03:55:33 2025 GMT Subject: CN=6944ccb5-3651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:82:88:31:0c:b0:87:3e:a8:54:40:fd:fb: bc:38:ec:83:ca:ef:d4:0c:45:97:06:83:f4:46:56: b2:56:db:b7:ad:02:dc:2f:bb:ba:57:68:58:c6:de: a6:1a:52:0b:c2:7b:c2:1c:46:5f:7c:35:f8:30:0c: dd:d1:50:01:eb:81:0b:33:43:90:d0:aa:b3:1c:63: 5d:70:d3:26:79:47:17:c0:35:65:71:d9:ea:b8:8d: e1:8f:02:c2:c9:cc:2c:eb:69:1c:d2:78:b4:b7:15: 2e:c6:27:60:4f:93:c8:9e:ae:51:90:34:8d:0e:70: f4:ea:4f:ae:fa:96:8e:03:0a:b9:fc:22:81:0b:47: 0d:7b:0b:0e:91:b1:ca:45:55:84:16:a8:93:c4:68: 04:15:68:21:5b:9f:ee:63:9d:08:09:95:c3:f7:60: 2e:f6:83:69:c9:d6:25:6d:0c:f2:ca:04:3b:77:3d: bf:ed:a0:9c:b1:50:28:74:5a:50:ea:0c:cb:27:83: 8a:d5:b4:47:f5:09:b3:9e:21:8c:1f:39:86:a6:96: 44:c5:17:41:04:65:17:de:97:9f:55:b7:33:38:b6: 68:2e:4c:25:c0:a6:99:db:c2:e1:60:54:a4:b2:b8: af:c1:66:24:f7:8f:cc:e3:5f:8f:ac:4a:45:59:8a: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:73:92:C4:CE:D9:B4:E4:64:B8:40:A6:68:BC:60:7C:F4:F0:6B:20 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3c:8e:37:7e:7b:d8:9c:cb:92:7b:66:9a:81:8f:0b:cb:5c: 06:70:05:6d:6a:eb:32:53:6d:07:4d:f5:ac:df:48:d1:cc:77: 2a:fc:35:dc:42:fa:d1:ff:89:44:74:57:2d:d9:b9:78:3f:99: 25:27:b2:40:19:a6:8b:f7:12:86:6d:c9:87:5b:81:9d:03:31: b1:d9:7c:31:27:8b:f4:34:96:18:01:25:40:96:b1:64:0c:3d: cf:ab:bb:af:91:16:9e:b4:1f:89:8c:d9:87:90:ad:c6:5d:93: ac:35:e5:4f:c0:f6:9b:37:b3:4a:66:21:89:46:d6:1d:a9:ff: 6e:2c:0b:1c:dd:5a:b2:de:de:bb:f1:a5:2d:b4:bd:29:eb:a5: 32:e0:d5:fe:27:7b:cd:75:0e:42:6f:70:23:18:8c:2c:be:41: 4d:f4:0b:ea:8d:9a:b5:6b:e7:3b:ea:ec:c8:7c:82:95:4c:b5: b1:77:0b:3f:26:df:f5:b5:ab:cc:33:a9:4a:8f:cb:5d:2e:7a: d1:e9:3c:16:58:5f:a4:40:61:90:a9:e8:87:f4:70:b0:02:c5: b6:22:09:33:bd:0a:3a:07:e0:24:6a:c8:bd:0b:0a:81:11:05: e0:7b:75:7e:c5:ec:92:b7:6a:da:f2:6b:3b:a4:ad:f6:e4:07: 4d:0e:92:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUxMjE5MDM1NTMzWhcNMjUxMjI2MDM1NTMzWjAYMRYwFAYD VQQDDA02OTQ0Y2NiNS0zNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZKCiDEMsIc+qFRA/fu8OOyDyu/UDEWXBoP0RlayVtu3rQLcL7u6V2hYxt6m GlILwnvCHEZffDX4MAzd0VAB64ELM0OQ0KqzHGNdcNMmeUcXwDVlcdnquI3hjwLC ycws62kc0ni0txUuxidgT5PInq5RkDSNDnD06k+u+paOAwq5/CKBC0cNewsOkbHK RVWEFqiTxGgEFWghW5/uY50ICZXD92Au9oNpydYlbQzyygQ7dz2/7aCcsVAodFpQ 6gzLJ4OK1bRH9QmzniGMHzmGppZExRdBBGUX3pefVbczOLZoLkwlwKaZ28LhYFSk srivwWYk94/M41+PrEpFWYpc5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtzksTO 2bTkZLhApmi8YHz08GsgMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdPI43fnvYnMuSe2aagY8Ly1wGcAVtausyU20HTfWs30jRzHcq/DXc QvrR/4lEdFct2bl4P5klJ7JAGaaL9xKGbcmHW4GdAzGx2XwxJ4v0NJYYASVAlrFk DD3Pq7uvkRaetB+JjNmHkK3GXZOsNeVPwPabN7NKZiGJRtYdqf9uLAsc3Vqy3t67 8aUttL0p66Uy4NX+J3vNdQ5Cb3AjGIwsvkFN9AvqjZq1a+c76uzIfIKVTLWxdws/ Jt/1tavMM6lKj8tdLnrR6TwWWF+kQGGQqeiH9HCwAsW2IgkzvQo6B+Akasi9CwqB EQXge3V+xeySt2ra8ms7pK325AdNDpLi -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:18 2025 by rpki-client