This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json) Hash identifier: 3Njp8JYrCfsPPP0H0FrWdA88m7xrS3bHv4QI/x0DK50= Subject key identifier: 2A:96:87:5E:5E:0A:22:B6:D3:17:A3:23:45:47:A7:80:8E:AB:74:B0 Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft Manifest number: 132C Signing time: Fri 26 Dec 2025 18:32:17 +0000 Manifest this update: Fri 26 Dec 2025 18:32:17 +0000 Manifest next update: Fri 02 Jan 2026 18:32:17 +0000 Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: JJZlRLzj7If8lDAHcPkp/0yonnpaNodkIU8sfjPcoIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 18:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Validity Not Before: Dec 26 18:32:17 2025 GMT Not After : Jan 2 18:32:17 2026 GMT Subject: CN=694ed4b1-1a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:36:6b:61:da:93:7f:48:e3:0d:4f:18:25: 83:59:98:9c:ea:d3:ad:bb:57:8d:fb:b3:69:0f:ec: 34:14:3c:3b:fb:f6:fd:02:13:62:fc:06:88:3b:6c: cf:92:20:c2:04:66:0d:e2:a0:e0:86:03:7c:5d:c7: ad:4b:42:d9:74:ea:1d:a7:51:3f:4e:6b:cc:ff:e9: 9b:55:b3:f6:6c:13:21:69:c7:1a:0e:a1:96:92:8e: 40:74:e0:11:2c:4c:4b:e3:2a:c6:16:51:61:ef:e1: f5:7b:0f:43:f1:f5:4d:b8:83:b1:e0:ea:6e:db:e6: c7:12:1f:be:e2:3a:da:4b:4a:d3:06:c5:85:bb:54: ef:74:a9:bf:7d:c3:83:e4:a2:8f:32:ae:18:e6:83: 4b:b0:75:b4:a6:49:45:a4:fa:dc:96:12:56:20:51: 51:19:85:13:ad:14:86:2b:6a:da:3a:d3:b7:3d:60: fc:49:b1:52:5e:56:27:da:88:fa:66:79:92:43:fe: 21:59:b4:33:27:b6:09:75:2e:67:2f:6f:15:ca:be: 87:9d:52:85:05:aa:90:5b:4f:ba:ab:e5:18:46:4b: 68:8e:15:59:5f:5f:23:3e:94:15:a4:86:8f:1c:ac: 29:dc:73:e8:e4:ff:c6:ba:f9:28:db:3e:a6:fd:f1: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:87:5E:5E:0A:22:B6:D3:17:A3:23:45:47:A7:80:8E:AB:74:B0 X509v3 Authority Key Identifier: keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c5:81:ca:44:5d:59:aa:ea:b9:43:b3:bb:bf:94:06:33:5e: 56:a7:82:ff:cf:d2:14:88:86:5d:60:45:ae:90:29:45:7c:b9: 58:b9:21:6c:e2:c5:bd:bc:e0:0a:d1:14:13:bd:c3:ad:a2:fa: af:5e:58:02:cb:d0:22:f1:5d:8e:a1:78:bf:09:7d:65:4c:bb: 8d:2c:f9:06:00:a5:bf:72:64:80:a3:3f:18:d3:ad:58:02:86: 17:44:1c:e6:95:69:87:98:9a:5b:ba:36:a6:56:fc:92:00:d1: 3a:17:6a:55:7b:f6:75:5c:9b:cd:45:aa:ab:7f:7c:f6:58:e1: 02:01:b1:07:f7:0c:95:aa:84:23:4a:03:b7:a6:11:48:c8:a1: 9e:49:ce:a7:10:41:7f:5f:27:18:e1:cb:15:31:d3:85:f1:62: 9b:1b:84:49:fa:8f:8e:33:f0:01:bc:5e:b9:95:6b:71:8f:24: 9b:12:6a:04:d0:9e:da:5b:1d:63:c9:20:20:bd:8f:e0:d7:9d: 68:d6:27:4b:6d:de:13:a2:54:80:6b:73:5d:0e:41:49:a8:eb: 7d:39:ef:f7:e6:00:ad:ad:16:cc:8b:7c:41:db:b9:10:83:33: 49:13:7e:42:1a:57:ce:ef:69:3e:a9:41:ba:4a:48:71:64:67: ed:44:91:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEIzRTQxNTdERDU4RDQzQTdBN0Q4MEZGMzA2RkJDNTQx NTQ0NTE2RTYwHhcNMjUxMjI2MTgzMjE3WhcNMjYwMTAyMTgzMjE3WjAYMRYwFAYD VQQDDA02OTRlZDRiMS0xYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ss2a2Hak39I4w1PGCWDWZic6tOtu1eN+7NpD+w0FDw7+/b9AhNi/AaIO2zP kiDCBGYN4qDghgN8XcetS0LZdOodp1E/TmvM/+mbVbP2bBMhaccaDqGWko5AdOAR LExL4yrGFlFh7+H1ew9D8fVNuIOx4Opu2+bHEh++4jraS0rTBsWFu1TvdKm/fcOD 5KKPMq4Y5oNLsHW0pklFpPrclhJWIFFRGYUTrRSGK2raOtO3PWD8SbFSXlYn2oj6 ZnmSQ/4hWbQzJ7YJdS5nL28Vyr6HnVKFBaqQW0+6q+UYRktojhVZX18jPpQVpIaP HKwp3HPo5P/Guvko2z6m/fHAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqWh15e CiK20xejI0VHp4COq3SwMB8GA1UdIwQYMBaAFLPkFX3VjUOnp9gP8wb7xUFURRbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2ZW4yQV96QnZ2RlFWUkZG dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtUVZmZFdOUTZlbjJBX3pCdnZGUVZSRkZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2 ZW4yQV96QnZ2RlFWUkZGdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAxYHKRF1Zquq5Q7O7v5QGM15Wp4L/z9IUiIZdYEWukClFfLlYuSFs 4sW9vOAK0RQTvcOtovqvXlgCy9Ai8V2OoXi/CX1lTLuNLPkGAKW/cmSAoz8Y061Y AoYXRBzmlWmHmJpbujamVvySANE6F2pVe/Z1XJvNRaqrf3z2WOECAbEH9wyVqoQj SgO3phFIyKGeSc6nEEF/XycY4csVMdOF8WKbG4RJ+o+OM/ABvF65lWtxjySbEmoE 0J7aWx1jySAgvY/g151o1idLbd4TolSAa3NdDkFJqOt9Oe/35gCtrRbMi3xB27kQ gzNJE35CGlfO72k+qUG6SkhxZGftRJGc -----END CERTIFICATE-----Generated at Sun Dec 28 05:47:56 2025 by rpki-client