This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: X7/pgyvauKHNYetJ+wYnCQeh2cuuql0IVOdeILi3zLg= Subject key identifier: 9A:F5:C5:E0:A8:84:E6:2A:38:33:23:36:61:25:B0:59:5E:8E:FC:9A Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 12C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 12A9 Signing time: Sat 20 Dec 2025 16:50:01 +0000 Manifest this update: Sat 20 Dec 2025 16:50:01 +0000 Manifest next update: Sat 27 Dec 2025 16:50:01 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: A5ELbmKbKo5KGPz82jLJOi6ADad3XwhQskCoPGg66uE=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: /Ap9CSMlbg4Z4XpJ5kSZEcOsTjIpg7hIcLCNKU8Ina4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4803 (0x12c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Dec 20 16:50:01 2025 GMT Not After : Dec 27 16:50:01 2025 GMT Subject: CN=6946d3b9-0f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:ce:f8:8f:b4:e5:8b:7f:f3:fe:e5:67:a1: b6:61:91:d5:01:47:73:17:00:98:26:7e:21:62:6b: 79:30:b8:ae:35:68:11:8e:ab:aa:99:25:85:e7:75: f4:4d:3c:7a:d6:e1:c4:60:ac:05:a6:bf:b6:ff:11: 42:ed:e9:4d:a2:19:17:86:ca:54:d6:51:60:2c:5e: 53:80:a0:2d:cc:03:48:3d:6c:78:37:76:b4:ef:96: 9d:89:85:20:0a:20:18:7b:81:a0:02:ca:1c:2e:33: 85:90:c2:a9:0b:93:c0:d9:a9:c6:3a:61:7a:76:ad: 63:26:69:5f:f9:ab:f7:2b:c6:27:f8:64:d6:22:da: 28:e0:22:a5:2f:aa:fc:40:fb:69:0a:f2:00:d7:29: 9b:93:5f:49:5a:8e:13:20:85:11:77:b2:40:7a:37: 92:2a:0b:b3:7f:ea:64:3b:05:09:f0:89:3f:c2:4e: 79:cb:db:bc:6a:f3:04:1f:5f:15:1a:8a:14:df:ae: 91:42:3f:85:33:65:d6:68:b5:5d:c2:9d:9b:25:bd: 8c:08:21:72:28:12:5e:be:82:48:6d:f5:06:79:09: d4:ea:a2:c5:89:da:fe:a3:81:bd:23:08:c2:88:ac: a5:11:94:e3:05:45:ea:f4:65:f3:15:25:79:2c:8f: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F5:C5:E0:A8:84:E6:2A:38:33:23:36:61:25:B0:59:5E:8E:FC:9A X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:44:96:0c:94:89:e8:89:64:21:bd:93:e1:f6:79:59:fc:13: fa:c7:ae:28:17:c7:27:f4:ee:60:16:df:60:48:01:50:a2:ba: af:05:48:7b:45:a2:9f:8e:d5:91:2f:ca:1a:de:a7:a5:84:f0: 2d:d7:d7:96:02:48:36:6c:c2:c4:9a:7c:ec:4c:20:03:eb:f9: d0:40:75:00:0a:4a:74:9a:1a:e6:a9:ca:1e:e7:5d:8a:93:ef: 57:4e:71:8a:46:05:d1:90:cc:4c:59:46:f1:a8:cc:bf:8b:db: 01:fe:22:28:75:82:0e:f3:5b:ad:6b:8d:ac:78:e0:ef:f5:ab: 5f:a7:7b:d1:aa:bc:91:a6:d8:ba:30:04:7b:ff:a3:9d:8a:11: 1b:d7:f5:6b:c3:00:a2:e8:56:e2:ee:a1:d2:80:da:e8:33:17: 55:fe:aa:dd:89:fb:f5:c6:1e:27:dc:3b:0c:fa:df:5d:8d:fb: 8b:31:28:16:80:d6:c4:11:73:d3:ef:de:0a:46:08:d4:ed:dd: 82:01:82:83:e7:04:47:96:ec:59:c2:40:0c:79:12:75:8f:34: 17:50:fc:bd:a5:43:29:94:45:b2:c9:7a:ee:ed:60:48:df:f9: 0a:c6:48:62:57:96:cf:77:bf:3d:ff:87:d5:12:34:d6:21:45: 5f:80:09:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUxMjIwMTY1MDAxWhcNMjUxMjI3MTY1MDAxWjAYMRYwFAYD VQQDDA02OTQ2ZDNiOS0wZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NPO+I+05Yt/8/7lZ6G2YZHVAUdzFwCYJn4hYmt5MLiuNWgRjquqmSWF53X0 TTx61uHEYKwFpr+2/xFC7elNohkXhspU1lFgLF5TgKAtzANIPWx4N3a075adiYUg CiAYe4GgAsocLjOFkMKpC5PA2anGOmF6dq1jJmlf+av3K8Yn+GTWItoo4CKlL6r8 QPtpCvIA1ymbk19JWo4TIIURd7JAejeSKguzf+pkOwUJ8Ik/wk55y9u8avMEH18V GooU366RQj+FM2XWaLVdwp2bJb2MCCFyKBJevoJIbfUGeQnU6qLFidr+o4G9IwjC iKylEZTjBUXq9GXzFSV5LI9LcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr1xeCo hOYqODMjNmElsFlejvyaMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZRJYMlInoiWQhvZPh9nlZ/BP6x64oF8cn9O5gFt9gSAFQorqvBUh7 RaKfjtWRL8oa3qelhPAt19eWAkg2bMLEmnzsTCAD6/nQQHUACkp0mhrmqcoe512K k+9XTnGKRgXRkMxMWUbxqMy/i9sB/iIodYIO81uta42seODv9atfp3vRqryRpti6 MAR7/6OdihEb1/VrwwCi6Fbi7qHSgNroMxdV/qrdifv1xh4n3DsM+t9djfuLMSgW gNbEEXPT794KRgjU7d2CAYKD5wRHluxZwkAMeRJ1jzQXUPy9pUMplEWyyXru7WBI 3/kKxkhiV5bPd789/4fVEjTWIUVfgAl7 -----END CERTIFICATE-----Generated at Sun Dec 21 03:57:20 2025 by rpki-client