This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: /wWMtOrh+xPvkF6hQXd/8NdP6Me5qHAsR4eXgkLLCsc= Subject key identifier: B6:C3:86:3B:B5:CA:2E:EC:58:83:D9:80:3D:BA:C3:2E:92:A3:A2:2C Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0D49 Signing time: Thu 18 Dec 2025 17:52:52 +0000 Manifest this update: Thu 18 Dec 2025 17:52:51 +0000 Manifest next update: Thu 25 Dec 2025 17:52:51 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: mMX3Gamd/WTKkX4jp8+gjq3f8fTpeltyZM8yUjPNzOU=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: Z4p5IL2wEtdYmX76by5DzgGIGhxAsMyvBXYRGxm6vYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Dec 18 17:52:51 2025 GMT Not After : Dec 25 17:52:51 2025 GMT Subject: CN=69443f74-deb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:ab:46:c5:11:51:3a:ad:62:48:e3:06:f1: 21:7d:42:2f:4b:98:b0:ce:76:fb:02:39:dd:e9:1d: 13:3d:dd:11:ce:7a:96:e9:57:22:cb:93:30:5a:02: fc:65:5c:2e:b6:e4:0e:7d:78:21:62:e2:6c:3d:63: 87:9e:f3:81:74:1d:38:fa:a5:a7:08:30:9b:b8:f4: cc:41:86:a5:aa:64:3c:e6:c9:7e:47:25:91:52:83: a7:55:e9:d5:71:bb:a2:85:b6:4a:16:1f:d3:96:bd: 9a:43:a4:4c:58:8c:5e:14:fd:8e:27:6a:55:d9:de: a8:49:78:1a:49:8c:3b:55:ab:76:dd:26:6c:2e:ac: 8d:67:46:ae:0e:71:3e:3a:4f:da:2d:d3:d6:88:b0: ad:7e:1b:0e:d4:ec:5a:58:43:68:3a:de:f9:a9:b7: 70:c3:12:59:b6:85:8d:73:89:1a:91:70:40:42:7d: cd:66:c8:dd:a6:46:fc:6e:69:6c:fa:9d:8d:c1:ea: 51:1a:00:b0:36:f2:8f:c4:b2:41:ca:f3:80:da:82: eb:95:e2:fe:01:47:8f:19:6f:fa:30:0a:2d:6f:2c: 14:4f:ae:dd:49:93:11:79:11:e8:8d:c8:9e:89:57: da:67:6f:df:9d:74:67:6b:70:03:9f:ad:ff:68:ce: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C3:86:3B:B5:CA:2E:EC:58:83:D9:80:3D:BA:C3:2E:92:A3:A2:2C X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b9:1d:29:9b:02:75:2b:34:4b:83:d9:8e:91:6f:60:20:ce: 87:90:a4:64:05:55:de:37:f0:da:42:6a:ba:3c:18:92:36:74: c7:17:ad:f1:f3:5f:64:96:30:f8:1c:48:70:c4:4f:9b:d4:84: dc:30:6c:20:1f:10:01:f9:87:5b:2c:36:03:40:1f:47:9c:c2: 5e:f5:62:f2:87:31:90:37:69:37:01:a4:47:5e:a2:da:cb:7a: 54:38:f1:3d:60:d8:27:b3:1f:03:1c:c8:11:ba:8a:9c:70:bb: 98:4f:5c:f4:35:10:42:5a:8e:09:c2:bf:a0:da:3e:7f:59:1c: 69:d4:14:1a:5a:98:93:01:f6:d8:c7:91:ac:7d:52:82:ee:7c: 2f:99:2d:c1:3b:6c:7b:59:e9:59:f0:01:3d:d1:fc:19:dd:5a: 78:a9:16:e3:e0:39:d4:08:89:cf:09:15:f4:2e:39:0a:b7:8b: dc:1b:f2:cd:ab:53:29:06:d3:9e:b7:a3:a4:bd:e7:8e:67:6e: 74:6b:a3:86:f8:8d:6d:45:0b:6e:44:b1:c2:9f:be:47:9d:1b: bf:6a:2c:ce:a7:1a:1e:b9:83:b4:67:f2:7f:1e:63:d5:a0:e3: ae:59:c9:77:35:21:c2:f7:24:b8:59:21:35:68:50:af:a9:e9: e8:64:54:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUxMjE4MTc1MjUxWhcNMjUxMjI1MTc1MjUxWjAYMRYwFAYD VQQDDA02OTQ0M2Y3NC1kZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1arRsURUTqtYkjjBvEhfUIvS5iwznb7Ajnd6R0TPd0RznqW6Vciy5MwWgL8 ZVwutuQOfXghYuJsPWOHnvOBdB04+qWnCDCbuPTMQYalqmQ85sl+RyWRUoOnVenV cbuihbZKFh/Tlr2aQ6RMWIxeFP2OJ2pV2d6oSXgaSYw7Vat23SZsLqyNZ0auDnE+ Ok/aLdPWiLCtfhsO1OxaWENoOt75qbdwwxJZtoWNc4kakXBAQn3NZsjdpkb8bmls +p2NwepRGgCwNvKPxLJByvOA2oLrleL+AUePGW/6MAotbywUT67dSZMReRHojcie iVfaZ2/fnXRna3ADn63/aM67lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbDhju1 yi7sWIPZgD26wy6So6IsMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0uR0pmwJ1KzRLg9mOkW9gIM6HkKRkBVXeN/DaQmq6PBiSNnTHF63x 819kljD4HEhwxE+b1ITcMGwgHxAB+YdbLDYDQB9HnMJe9WLyhzGQN2k3AaRHXqLa y3pUOPE9YNgnsx8DHMgRuoqccLuYT1z0NRBCWo4Jwr+g2j5/WRxp1BQaWpiTAfbY x5GsfVKC7nwvmS3BO2x7WelZ8AE90fwZ3Vp4qRbj4DnUCInPCRX0LjkKt4vcG/LN q1MpBtOet6OkveeOZ250a6OG+I1tRQtuRLHCn75HnRu/aizOpxoeuYO0Z/J/HmPV oOOuWcl3NSHC9yS4WSE1aFCvqenoZFRJ -----END CERTIFICATE-----Generated at Sat Dec 20 01:52:12 2025 by rpki-client