This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft File: sQnalQV25mJneVo066kbw3qZI7Q.mft (raw, json) Hash identifier: iWgrasbBJ7Q1fIRQJ8hAzkNK86UZrj7vzVthTuBhWRk= Subject key identifier: F7:3B:9E:C1:53:DF:4C:46:86:F4:C4:86:7B:AB:ED:5A:58:2E:18:AD Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 Certificate issuer: /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft Manifest number: 24 Signing time: Fri 19 Dec 2025 06:40:54 +0000 Manifest this update: Fri 19 Dec 2025 06:40:54 +0000 Manifest next update: Fri 26 Dec 2025 06:40:54 +0000 Files and hashes: 1: sQnalQV25mJneVo066kbw3qZI7Q.crl (hash: hZn7MwnRgn93v2mfAX0uMWYqdYKSv2+VjYFfbeLzVWI=) 2: EBBEEC14C36711F084BC3465C4F9AE02.roa (hash: sEsXZZXeC9fx2SKgwdoJZ8ecJUtifztiDpJwhoX/eN0=) 3: 0FDE83B6C36811F0BB7F9C65C4F9AE02.roa (hash: HUV1xiTm4nTnouvWGKMxu0/+nSr2OIqTSE04ekggEQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Validity Not Before: Dec 19 06:40:54 2025 GMT Not After : Dec 26 06:40:54 2025 GMT Subject: CN=6944f376-9079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:cc:b1:e1:d1:2a:8d:69:78:a0:70:dc:9e: 06:c3:6f:03:45:94:79:a7:db:c4:a6:04:b9:9e:63: f9:65:ad:70:e7:f2:ce:af:6d:42:e9:55:47:b0:b7: 4f:bc:15:88:dc:84:59:d3:e6:cf:80:eb:6a:a5:fb: d6:c3:dd:1d:7d:fe:df:16:a1:1f:d6:a2:f1:d5:30: f9:09:b0:ad:6a:8f:14:23:c6:10:86:32:31:3a:fc: 32:94:ca:0c:8d:73:2c:d8:bd:b4:21:a7:e7:68:de: 37:66:2d:ed:c5:19:a7:88:f5:18:ad:15:88:c6:59: 88:e4:18:59:14:e5:dc:b3:92:a5:95:fa:4c:2b:94: 18:fe:37:91:35:f0:2d:d1:fc:ca:a4:60:56:09:ba: a1:c3:68:a7:13:9b:75:b1:8c:19:f4:50:c9:b8:b9: b9:18:f6:5c:02:d1:9a:8f:07:47:b9:0d:0b:00:b7: d5:f1:66:d1:a6:f8:29:9d:ec:d1:4e:cc:30:ee:7d: 5a:db:fb:8b:c4:77:b9:33:b3:be:97:fc:31:20:18: 5c:2c:7d:6e:38:0e:0e:5d:9d:b4:13:c1:38:2f:8b: 15:48:85:99:b5:8c:60:bf:41:f2:c5:b2:53:e3:10: f2:a6:30:21:cf:6e:82:62:12:d0:3f:58:90:21:1e: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3B:9E:C1:53:DF:4C:46:86:F4:C4:86:7B:AB:ED:5A:58:2E:18:AD X509v3 Authority Key Identifier: keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:76:6d:a7:49:bb:2e:d0:3c:f7:f0:1b:f8:b8:94:72:79:ef: 01:16:24:bb:5f:c7:28:bd:26:a5:80:4d:d7:bb:df:b5:ae:ec: f6:14:b2:bb:cd:47:ab:13:4e:be:cd:1c:62:58:0f:41:84:75: 1a:90:dd:00:af:0f:80:3b:99:d9:ff:a7:56:2a:b2:4e:83:7e: 2b:8c:0a:d4:94:d6:ea:a0:49:b1:ed:21:fd:3c:56:6a:0b:5d: cb:31:f7:a1:7a:5b:53:f1:29:18:78:85:62:2f:16:15:7c:0f: f7:cb:5f:6a:59:60:79:e1:17:42:52:72:20:21:55:94:67:c6: 27:b3:dc:96:d7:d9:71:6e:00:09:f6:d6:8e:55:9e:24:2a:29: ef:30:87:a0:57:4c:5c:f9:6a:06:0a:2e:1f:ec:11:5d:10:9f: 85:90:b3:2c:90:0a:2f:3e:26:30:f9:10:6c:6e:86:ea:18:85: db:78:80:38:5d:8d:82:40:11:a9:b2:a8:a9:10:a0:98:07:d3: 92:75:a6:2b:fd:3e:9c:fd:d2:26:66:f1:87:79:38:19:90:44: 33:37:18:cd:e6:ca:8d:e0:c0:63:9a:25:ee:61:0a:03:e4:a3: bf:20:78:1a:b2:3a:09:f1:21:fa:ad:48:7f:3c:ae:ef:86:aa: 0a:2d:5b:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoQjEwOURBOTUwNTc2RTY2MjY3Nzk1QTM0RUJBOTFCQzM3 QTk5MjNCNDAeFw0yNTEyMTkwNjQwNTRaFw0yNTEyMjYwNjQwNTRaMBgxFjAUBgNV BAMMDTY5NDRmMzc2LTkwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAj8yx4dEqjWl4oHDcngbDbwNFlHmn28SmBLmeY/llrXDn8s6vbULpVUewt0+8 FYjchFnT5s+A62ql+9bD3R19/t8WoR/WovHVMPkJsK1qjxQjxhCGMjE6/DKUygyN cyzYvbQhp+do3jdmLe3FGaeI9RitFYjGWYjkGFkU5dyzkqWV+kwrlBj+N5E18C3R /MqkYFYJuqHDaKcTm3WxjBn0UMm4ubkY9lwC0ZqPB0e5DQsAt9XxZtGm+Cmd7NFO zDDufVrb+4vEd7kzs76X/DEgGFwsfW44Dg5dnbQTwTgvixVIhZm1jGC/QfLFslPj EPKmMCHPboJiEtA/WJAhHmYpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9zuewVPf TEaG9MSGe6vtWlguGK0wHwYDVR0jBBgwFoAUsQnalQV25mJneVo066kbw3qZI7Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzBFNkZGNTRBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1KbmVWbzA2NmtidzNxWkk3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1FuYWxRVjI1bUpuZVZvMDY2a2J3M3FaSTdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 REM5LzBFNkZGNTRBQUU1QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1K bmVWbzA2NmtidzNxWkk3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALd2badJuy7QPPfwG/i4lHJ57wEWJLtfxyi9JqWATde737Wu7PYUsrvN R6sTTr7NHGJYD0GEdRqQ3QCvD4A7mdn/p1Yqsk6DfiuMCtSU1uqgSbHtIf08VmoL Xcsx96F6W1PxKRh4hWIvFhV8D/fLX2pZYHnhF0JSciAhVZRnxiez3JbX2XFuAAn2 1o5VniQqKe8wh6BXTFz5agYKLh/sEV0Qn4WQsyyQCi8+JjD5EGxuhuoYhdt4gDhd jYJAEamyqKkQoJgH05J1piv9Ppz90iZm8Yd5OBmQRDM3GM3myo3gwGOaJe5hCgPk o78geBqyOgnxIfqtSH88ru+GqgotW+4= -----END CERTIFICATE-----Generated at Sat Dec 20 02:48:40 2025 by rpki-client